shithub: opus

Info  •  Files  •  Log  •  Branches

Avoid potential integer wrap-around

--- a/dnn/parse_lpcnet_weights.c

+++ b/dnn/parse_lpcnet_weights.c

@@ -36,7 +36,7 @@

   WeightHead *h = (WeightHead *)*data;

   if (*len < WEIGHT_BLOCK_SIZE) return -1;

   if (h->block_size < h->size) return -1;

-  if (*len < h->block_size+WEIGHT_BLOCK_SIZE) return -1;

+  if (h->block_size > *len-WEIGHT_BLOCK_SIZE) return -1;

   if (h->name[sizeof(h->name)-1] != 0) return -1;

   if (h->size < 0) return -1;

   array->name = h->name;

-- 

⑨