prevent overflow in hufUncompress if nBits is large (AcademySoftwareF…

…oundation#836) Signed-off-by: Peter Hillman <peterh@wetafx.co.nz>
peterhillman · Dec 6, 2020 · d63b19d · d63b19d
1 parent fc439bc
commit d63b19d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/OpenEXR/IlmImf/ImfHuf.cpp b/OpenEXR/IlmImf/ImfHuf.cpp
@@ -1093,7 +1093,9 @@ hufUncompress (const char compressed[],
 
     const char *ptr = compressed + 20;
 
-    if ( ptr + (nBits+7 )/8 > compressed+nCompressed)
+    uint64_t nBytes = (static_cast<uint64_t>(nBits)+7) / 8 ;
+
+    if ( ptr + nBytes > compressed+nCompressed)
     {
         notEnoughData();
         return;