summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSebastian Rasmussen <sebras@hotmail.com>2009-11-25 22:58:00 +0100
committerSebastian Rasmussen <sebras@hotmail.com>2009-11-25 22:58:00 +0100
commita21cc1548993c392e474817bb3d656eb3730d88f (patch)
tree12def45ec7b3ca0e4124810ebce5f9f7ffe37a2c
parent28d2a5916f321c1391d11864e44576fbd14860c1 (diff)
Limit number of components in Separation/DeviceN colorspace to FZ_MAXCOLORS.
-rw-r--r--mupdf/pdf_colorspace1.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/mupdf/pdf_colorspace1.c b/mupdf/pdf_colorspace1.c
index 002ddc289..828096c90 100644
--- a/mupdf/pdf_colorspace1.c
+++ b/mupdf/pdf_colorspace1.c
@@ -484,6 +484,9 @@ loadseparation(fz_colorspace **csp, pdf_xref *xref, fz_obj *array)
else
n = 1;
+ if (n > FZ_MAXCOLORS)
+ return fz_throw("too many components in colorspace");
+
pdf_logrsrc("n = %d\n", n);
error = pdf_loadcolorspace(&base, xref, baseobj);