Commit 26061aac authored by Wang Junjie's avatar Wang Junjie Committed by Nikias Bassen

bplist: Check for invalid offset_size in bplist trailer

parent 82501db7
......@@ -733,6 +733,9 @@ PLIST_API void plist_from_bin(const char *plist_bin, uint32_t length, plist_t *
if (num_objects == 0)
return;
if (offset_size == 0)
return;
if (root_object >= num_objects)
return;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment