prevent OOM when cataloguing some RAW files

deckerst · Aug 28, 2024 · 98c39c2 · 98c39c2
1 parent 0f9fc28
commit 98c39c2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/android/exifinterface/src/main/java/androidx/exifinterface/media/ExifInterfaceFork.java b/android/exifinterface/src/main/java/androidx/exifinterface/media/ExifInterfaceFork.java
@@ -6808,6 +6808,11 @@ private void parseTiffHeaders(ByteOrderedDataInputStream dataInputStream) throws
         }
         firstIfdOffset -= 8;
         if (firstIfdOffset > 0) {
+            // TLAD start
+            if (firstIfdOffset > ATTRIBUTE_SIZE_DANGER_THRESHOLD) {
+                throw new IOException("dangerous IFD offset=" + firstIfdOffset);
+            }
+            // TLAD end
             dataInputStream.skipFully(firstIfdOffset);
         }
     }