Mercurial > hg > orthanc
view Resources/Patches/dcmtk-3.6.0-dulparse-vulnerability.patch @ 3570:f05887b1d1bf Tomas-Zubiri/replaced-broken-url-with-url-from-waybac-1573762425576
Replaced broken url with url from wayback archive
author | Tomas Zubiri <me@tomaszubiri.com> |
---|---|
date | Thu, 14 Nov 2019 20:13:59 +0000 |
parents | 6ac6193a7935 |
children |
line wrap: on
line source
diff -urEb dcmtk-3.6.0.orig/dcmnet/libsrc/dulparse.cc dcmtk-3.6.0/dcmnet/libsrc/dulparse.cc --- dcmtk-3.6.0.orig/dcmnet/libsrc/dulparse.cc 2010-12-01 09:26:36.000000000 +0100 +++ dcmtk-3.6.0/dcmnet/libsrc/dulparse.cc 2016-12-02 15:58:49.930540033 +0100 @@ -393,6 +393,8 @@ return cond; buf += length; + if (presentationLength < length) + return EC_MemoryExhausted; presentationLength -= length; DCMNET_TRACE("Successfully parsed Abstract Syntax"); break; @@ -404,12 +406,16 @@ cond = LST_Enqueue(&context->transferSyntaxList, (LST_NODE*)subItem); if (cond.bad()) return cond; buf += length; + if (presentationLength < length) + return EC_MemoryExhausted; presentationLength -= length; DCMNET_TRACE("Successfully parsed Transfer Syntax"); break; default: cond = parseDummy(buf, &length, presentationLength); buf += length; + if (presentationLength < length) + return EC_MemoryExhausted; presentationLength -= length; break; }