From 174943496afea3dd367f3d7a3eef667d3392ec48 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Sat, 6 Jun 2020 10:10:43 +0200 Subject: [PATCH] limit taken pictures to avoid integer overfglows (AFL) --- camlibs/soundvision/agfa_cl18.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/camlibs/soundvision/agfa_cl18.c b/camlibs/soundvision/agfa_cl18.c index d8cfdb9e1..5c1d5c623 100644 --- a/camlibs/soundvision/agfa_cl18.c +++ b/camlibs/soundvision/agfa_cl18.c @@ -133,6 +133,9 @@ int agfa_delete_picture(CameraPrivateLibrary *dev, const char *filename) { taken=soundvision_photos_taken(dev); taken=soundvision_photos_taken(dev); taken=soundvision_photos_taken(dev); + + if (taken > ((1<<31) / 13 )) + return GP_ERROR_NO_MEMORY; buflen = (taken * 13)+1; /* 12 char filenames and space for each */ /* plus trailing NULL */