From 3d14462e233571ac8a77ab0484069e6cc944f320 Mon Sep 17 00:00:00 2001
From: Caolán McNamara <caolanm@redhat.com>
Date: Thu, 10 Jan 2019 21:33:43 +0000
Subject: ofz#11061 pick an upper bound on acceptible image size
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Change-Id: I3386dfe5c53c07c60f8845380246fb369d970134
Reviewed-on: https://gerrit.libreoffice.org/66134
Tested-by: Jenkins
Reviewed-by: Caolán McNamara <caolanm@redhat.com>
Tested-by: Caolán McNamara <caolanm@redhat.com>
---
 filter/source/graphicfilter/itiff/itiff.cxx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'filter')

diff --git a/filter/source/graphicfilter/itiff/itiff.cxx b/filter/source/graphicfilter/itiff/itiff.cxx
index ec55044fd32c..8f8edd243be2 100644
--- a/filter/source/graphicfilter/itiff/itiff.cxx
+++ b/filter/source/graphicfilter/itiff/itiff.cxx
@@ -1587,7 +1587,7 @@ bool TIFFReader::ReadTIFF(SvStream & rTIFF, Graphic & rGraphic )
             {
                 if (o3tl::checked_multiply<sal_Int32>(nImageWidth, nImageLength, nImageDataSize) ||
                     o3tl::checked_multiply<sal_Int32>(nImageDataSize, (HasAlphaChannel() ? 4 : 3), nImageDataSize) ||
-                    nImageDataSize > SAL_MAX_INT32/2)
+                    nImageDataSize > SAL_MAX_INT32/4)
                 {
                     bStatus = false;
                 }
-- 
cgit