ras_enc: check components for RGB, fixes NULL pointer dereference

Fixes CVE-2018-18873 Closes jasper-maint/jasper#15 Closes #184
jasper-software · Jun 28, 2020 · 12db807 · 12db807
1 parent fc0397d
commit 12db807
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/libjasper/ras/ras_enc.c b/src/libjasper/ras/ras_enc.c
@@ -232,6 +232,11 @@ static int ras_putdatastd(jas_stream_t *out, ras_hdr_t *hdr, jas_image_t *image,
 
 	assert(numcmpts <= 3);
 
+	if (RAS_ISRGB(hdr) && numcmpts < 3) {
+		/* need 3 components for RGB */
+		return -1;
+	}
+
 	for (i = 0; i < 3; ++i) {
 		data[i] = 0;
 	}