casa-mp-base

Extracted From 768f70ca405cd3159d990e962d54456773bb8cf8

From: Marti Maria <info@littlecms.com>

Date: Wed, 15 Aug 2018 20:07:56 +0200

diff --git src/cmscgats.c src/cmscgats.c

--- src/cmscgats.c

+++ src/cmscgats.c

@@ -1507,10 +1507,16 @@ void AllocateDataSet(cmsIT8* it8)

     t-> nSamples   = atoi(cmsIT8GetProperty(it8, "NUMBER_OF_FIELDS"));

     t-> nPatches   = atoi(cmsIT8GetProperty(it8, "NUMBER_OF_SETS"));

-    t-> Data = (char**)AllocChunk (it8, ((cmsUInt32Number) t->nSamples + 1) * ((cmsUInt32Number) t->nPatches + 1) *sizeof (char*));

-    if (t->Data == NULL) {

+    if (t -> nSamples < 0 || t->nSamples > 0x7ffe || t->nPatches < 0 || t->nPatches > 0x7ffe)

+    {

+        SynError(it8, "AllocateDataSet: too much data");

+    }

+    else {

+        t->Data = (char**)AllocChunk(it8, ((cmsUInt32Number)t->nSamples + 1) * ((cmsUInt32Number)t->nPatches + 1) * sizeof(char*));

+        if (t->Data == NULL) {

-        SynError(it8, "AllocateDataSet: Unable to allocate data array");

+            SynError(it8, "AllocateDataSet: Unable to allocate data array");

+        }

     }

 }