Cast int before potentially exceeding INT_MAX

radarhere · radarhere · commit 0f579c3f5618 · 2024-09-23T23:25:10.000+10:00
diff --git a/src/libImaging/SgiRleDecode.c b/src/libImaging/SgiRleDecode.c
@@ -183,7 +183,7 @@ ImagingSgiRleDecode(Imaging im, ImagingCodecState state, UINT8 *buf, Py_ssize_t
        each with 4 bytes per element of tablen
        Check here before we allocate any memory
     */
-    if (c->bufsize < 8 * c->tablen) {
+    if (c->bufsize < 8 * (uint64_t)c->tablen) {
         state->errcode = IMAGING_CODEC_OVERRUN;
         return -1;
     }

Original file line number	Diff line number	Diff line change
`@@ -183,7 +183,7 @@ ImagingSgiRleDecode(Imaging im, ImagingCodecState state, UINT8 *buf, Py_ssize_t`
`183`	`183`	`each with 4 bytes per element of tablen`
`184`	`184`	`Check here before we allocate any memory`
`185`	`185`	`*/`
`186`		`- if (c->bufsize < 8 * c->tablen) {`
	`186`	`+ if (c->bufsize < 8 * (uint64_t)c->tablen) {`
`187`	`187`	`state->errcode = IMAGING_CODEC_OVERRUN;`
`188`	`188`	`return -1;`
`189`	`189`	`}`