diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/image/jpeg/reader.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/image/jpeg/reader.go b/src/image/jpeg/reader.go index 12b20a6922..5c5465283a 100644 --- a/src/image/jpeg/reader.go +++ b/src/image/jpeg/reader.go @@ -331,6 +331,10 @@ func (d *decoder) processSOF(n int) error { } d.comp[i].tq = d.tmp[8+3*i] + if d.comp[i].tq > maxTq { + return FormatError("bad Tq value") + } + hv := d.tmp[7+3*i] h, v := int(hv>>4), int(hv&0x0f) if h < 1 || 4 < h || v < 1 || 4 < v { |