Fix check for invalid glTF to consider invalid length/model_length combinations.

This commit is contained in:
Doug Muir 2019-10-28 09:51:13 -07:00
parent e886247329
commit cf668683f9

View File

@ -5618,6 +5618,7 @@ bool TinyGLTF::LoadBinaryFromMemory(Model *model, std::string *err,
// JSON contents,
// so use "greater than" operator.
if ((20 + model_length > size) || (model_length < 1) || (length > size) ||
(20 + model_length > length) ||
(model_format != 0x4E4F534A)) { // 0x4E4F534A = JSON format.
if (err) {
(*err) = "Invalid glTF binary.";