From 415e0d79d2844f1883c41426acae5bef77c01a4f Mon Sep 17 00:00:00 2001 From: Aurelien David Date: Tue, 7 Feb 2023 16:01:42 +0100 Subject: [PATCH] [PATCH] load_text: prevent overflow on long lines conversion to utf8 (#2386) Gbp-Pq: Name CVE-2023-1452.patch --- src/filters/load_text.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/filters/load_text.c b/src/filters/load_text.c index 8a103f3..c8718d3 100644 --- a/src/filters/load_text.c +++ b/src/filters/load_text.c @@ -295,6 +295,12 @@ char *gf_text_get_utf8_line(char *szLine, u32 lineSize, FILE *txt_in, s32 unicod szLineConv[j] = szLine[i]; j++; + + if (j >= GF_ARRAY_LENGTH(szLineConv) - 1) { + GF_LOG(GF_LOG_DEBUG, GF_LOG_PARSER, ("[TXTIn] Line too long to convert to utf8 (len: %d)\n", len)); + break; + } + } if ( j >= GF_ARRAY_LENGTH(szLineConv) ) { GF_LOG(GF_LOG_DEBUG, GF_LOG_PARSER, ("[TXTIn] Line too long to convert to utf8 (len: %d)\n", len)); -- 2.30.2