[cairo-commit] src/cairo-image-info.c

[Adrian Johnson]

 src/cairo-image-info.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 57b40507dda3f58dfc8635548d606b86dc7bcf51
Author: Adrian Johnson <ajohnson at redneon.com>
Date:   Thu Jun 15 20:53:29 2017 +0930

    Fix off by one check in cairo-image-info.c
    
    https://bugs.freedesktop.org/show_bug.cgi?id=101427

diff --git a/src/cairo-image-info.c b/src/cairo-image-info.c
index 2ecce954..3b4cf6ed 100644
--- a/src/cairo-image-info.c
+++ b/src/cairo-image-info.c
@@ -154,7 +154,7 @@ _cairo_image_info_get_jpeg_info (cairo_image_info_t	*info,
 		break;
 	    }
 
-	    if (p + 2 > data + length)
+	    if (p + 3 > data + length)
 		return CAIRO_INT_STATUS_UNSUPPORTED;
 
 	    p = _jpeg_skip_segment (p);