Fix potential out-of-buffer read while parsing corrupt file, closes #38

bfabiszewski · Sep 18, 2021 · c78e186 · c78e186
1 parent bec783e
commit c78e186
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/read.c b/src/read.c
@@ -752,6 +752,10 @@ MOBI_RET mobi_parse_huffdic(const MOBIData *m, MOBIHuffCdic *huffcdic) {
         }
         curr = curr->next;
     }
+    if (huffcdic->index_count != huffcdic->index_read) {
+        debug_print("CDIC: wrong read index count: %zu, total: %zu\n", huffcdic->index_read, huffcdic->index_count);
+        return MOBI_DATA_CORRUPT;
+    }
     return MOBI_SUCCESS;
 }