|
Alex Kashchenko |
03a9057 |
diff --git a/src/share/native/sun/java2d/cmm/lcms/cmstypes.c b/src/share/native/sun/java2d/cmm/lcms/cmstypes.c
|
|
Alex Kashchenko |
03a9057 |
--- openjdk/jdk/src/share/native/sun/java2d/cmm/lcms/cmstypes.c
|
|
Alex Kashchenko |
03a9057 |
+++ openjdk/jdk/src/share/native/sun/java2d/cmm/lcms/cmstypes.c
|
|
Alex Kashchenko |
03a9057 |
@@ -1484,6 +1484,7 @@
|
|
Alex Kashchenko |
03a9057 |
|
|
Alex Kashchenko |
03a9057 |
// Check for overflow
|
|
Alex Kashchenko |
03a9057 |
if (Offset < (SizeOfHeader + 8)) goto Error;
|
|
Alex Kashchenko |
03a9057 |
+ if ((Offset + Len) > SizeOfTag + 8) goto Error;
|
|
Alex Kashchenko |
03a9057 |
|
|
Alex Kashchenko |
03a9057 |
// True begin of the string
|
|
Alex Kashchenko |
03a9057 |
BeginOfThisString = Offset - SizeOfHeader - 8;
|