From 88d5b57a4a639f88c937e7b22f6fe976b4380ce9 Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Tue, 9 Feb 2021 11:19:08 +0100 Subject: [PATCH] gif_deanimate(): Confirm that that we have enough data ... before doing any work. Fixes a crash when fuzzing with an empty document. Reported by: Joshua Rogers (Opera). --- deanimate.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deanimate.c b/deanimate.c index bc64de63..a6759da4 100644 --- a/deanimate.c +++ b/deanimate.c @@ -333,6 +333,10 @@ int gif_deanimate(struct binbuffer *src, struct binbuffer *dst, int get_first_im { return 1; } + if (src->size <= 10) + { + return 1; + } c = buf_getbyte(src, 10); -- 2.39.2