GitHub-Proxy/tinygltf
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/syoyo/tinygltf.git synced 2025-08-14 23:45:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix check for invalid glTF to consider invalid length/model_length combinations.

Browse Source
This commit is contained in:
Doug Muir 2019-10-28 09:51:13 -07:00
parent e886247329
commit cf668683f9
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
tiny_gltf.h
View File

@ -5618,6 +5618,7 @@ bool TinyGLTF::LoadBinaryFromMemory(Model *model, std::string *err,
// JSON contents, // JSON contents,
// so use "greater than" operator. // so use "greater than" operator.
if ((20 + model_length > size) || (model_length < 1) || (length > size) || if ((20 + model_length > size) || (model_length < 1) || (length > size) ||
(20 + model_length > length) ||
(model_format != 0x4E4F534A)) { // 0x4E4F534A = JSON format. (model_format != 0x4E4F534A)) { // 0x4E4F534A = JSON format.
if (err) { if (err) {
(*err) = "Invalid glTF binary."; (*err) = "Invalid glTF binary.";