address #271: catch scanlines with negative sizes

AcademySoftwareFoundation · Jul 15, 2019 · 849c616 · 849c616
1 parent 960a56f
commit 849c616
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/OpenEXR/IlmImf/ImfScanLineInputFile.cpp b/OpenEXR/IlmImf/ImfScanLineInputFile.cpp
@@ -429,8 +429,8 @@ readPixelData (InputStreamMutex *streamData,
     if (yInFile != minY)
         throw IEX_NAMESPACE::InputExc ("Unexpected data block y coordinate.");
 
-    if (dataSize > (int) ifd->lineBufferSize)
-	throw IEX_NAMESPACE::InputExc ("Unexpected data block length.");
+    if (dataSize < 0 || dataSize > static_cast<int>(ifd->lineBufferSize) )
+        throw IEX_NAMESPACE::InputExc ("Unexpected data block length.");
 
     //
     // Read the pixel data.