Commit 6a44dfb7 authored by Nikias Bassen's avatar Nikias Bassen

bplist: Check for invalid ref_size in bplist trailer

parent c67ab063
......@@ -727,6 +727,9 @@ PLIST_API void plist_from_bin(const char *plist_bin, uint32_t length, plist_t *
if (offset_size == 0)
return;
if (ref_size == 0)
return;
if (root_object >= num_objects)
return;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment