gif: report error on bogus LWZ data, instead of overflowing a buffer.

libsdl-org · Jan 28, 2018 · 4c830d4 · 4c830d4
1 parent 5c6aaba
commit 4c830d4
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/IMG_gif.c b/IMG_gif.c
@@ -497,8 +497,10 @@ LWZReadByte(SDL_RWops *src, int flag, int input_code_size)
             return -3;
         }
         *sp++ = table[1][code];
-        if (code == table[0][code])
-        RWSetMsg("circular table entry BIG ERROR");
+        if (code == table[0][code]) {
+            RWSetMsg("circular table entry BIG ERROR");
+            return -3;
+        }
         code = table[0][code];
     }