Merge pull request #8408 from radarhere/fli

python-pillow · Sep 30, 2024 · 0314bb3 · 0314bb3
2 parents 7e6e08e + fc65e43
commit 0314bb3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/libImaging/FliDecode.c b/src/libImaging/FliDecode.c
@@ -224,7 +224,7 @@ ImagingFliDecode(Imaging im, ImagingCodecState state, UINT8 *buf, Py_ssize_t byt
                 break;
             case 16:
                 /* COPY chunk */
-                if (INT32_MAX / state->xsize < state->ysize) {
+                if (INT32_MAX < (uint64_t)state->xsize * state->ysize) {
                     /* Integer overflow, bail */
                     state->errcode = IMAGING_CODEC_OVERRUN;
                     return -1;