Merge pull request #1352 from m-holger/fuzz

In Pl_RunLength apply memory limit before and after decoding

Merge pull request #1352 from m-holger/fuzz
In Pl_RunLength apply memory limit before and after decoding
m-holger · GitHub
2 parents 466169d0 6883a9c8
Showing 1 changed file with 3 additions and 0 deletions
libqpdf/Pl_RunLength.cc
@@ -156,6 +156,9 @@ Pl_RunLength::finish()
         unsigned char ch = 128;
         next()->write(&ch, 1);
     } else {
+        if (memory_limit && (m->out.size()) > memory_limit) {
+            throw std::runtime_error("Pl_RunLength memory limit exceeded");
+        }
         next()->writeString(m->out);
     }
     next()->finish();