metadata: validate min chunk length for jpeg

pdeljanov · Jan 18, 2025 · 9015455 · 9015455
1 parent 0affead
commit 9015455
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/CONTRIBUTORS b/CONTRIBUTORS
@@ -28,5 +28,6 @@ geckoxx [https://github.com/geckoxx]
 Herohtar [https://github.com/herohtar]
 nicholaswyoung [https://github.com/nicholaswyoung]
 richardmitic [https://github.com/richardmitic]
+sscobici [https://github.com/sscobici]
 terrorfisch [https://github.com/terrorfisch]
 Tommoa [https://github.com/Tommoa]
diff --git a/symphonia-metadata/src/utils/images.rs b/symphonia-metadata/src/utils/images.rs
@@ -82,6 +82,9 @@ fn parse_jpeg(mut reader: BufReader<'_>) -> Result<ImageInfo> {
 
             return Ok(info);
         }
+        if chunk_len < 2 {
+            return decode_error("meta (jpeg): invalid chunk length");
+        }
 
         // Ignore the chunk. Exclude the chunk length that has already been read.
         reader.ignore_bytes(u64::from(chunk_len) - 2)?;