diff options
| -rw-r--r-- | source/fitz/filter-fax.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/source/fitz/filter-fax.c b/source/fitz/filter-fax.c index e0aa781d..7b35c812 100644 --- a/source/fitz/filter-fax.c +++ b/source/fitz/filter-fax.c @@ -780,6 +780,9 @@ fz_open_faxd(fz_stream *chain, fz_try(ctx) { + if (columns < 0 || columns >= INT_MAX - 7) + fz_throw(ctx, FZ_ERROR_GENERIC, "too many columns lead to an integer overflow (%d)", columns); + fax = fz_malloc_struct(ctx, fz_faxd); fax->chain = chain; |