Merge pull request #1048 from bradh/issue1044

uncompressed: protect against broken uncC box component references
strukturag · Nov 30, 2023 · 12d8b6b · 12d8b6b
2 parents f2d30c3 + 440c2a5
commit 12d8b6b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/libheif/uncompressed_image.cc b/libheif/uncompressed_image.cc
@@ -531,6 +531,9 @@ int UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci(cons
   int alternate_channel_bits = 0;
   for (Box_uncC::Component component : uncC_box->get_components()) {
     uint16_t component_index = component.component_index;
+    if (component_index >= cmpd_box->get_components().size()) {
+      return -1;
+    }
     auto component_type = cmpd_box->get_components()[component_index].component_type;
     switch (component_type) {
       case component_type_monochrome: