diff options
Diffstat (limited to 'psi/zpdf_r6.c')
| -rw-r--r-- | psi/zpdf_r6.c | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/psi/zpdf_r6.c b/psi/zpdf_r6.c index e2f1a711..a958fdb2 100644 --- a/psi/zpdf_r6.c +++ b/psi/zpdf_r6.c @@ -1,4 +1,4 @@ -/* Copyright (C) 2001-2019 Artifex Software, Inc. +/* Copyright (C) 2001-2020 Artifex Software, Inc. All Rights Reserved. This software is provided AS-IS with no warranty, either express or @@ -152,6 +152,8 @@ zcheck_r6_password(i_ctx_t * i_ctx_p) return_error(gs_error_undefined); if (!r_has_type(Oref, t_string)) return_error(gs_error_typecheck); + if (r_size(Oref) < 48) + return_error(gs_error_invalidaccess); code = dict_find_string(CryptDict, "OE", &OEref); if (code < 0) @@ -160,6 +162,8 @@ zcheck_r6_password(i_ctx_t * i_ctx_p) return_error(gs_error_undefined); if (!r_has_type(OEref, t_string)) return_error(gs_error_typecheck); + if (r_size(OEref) < 32) + return_error(gs_error_invalidaccess); code = dict_find_string(CryptDict, "U", &Uref); if (code < 0) @@ -168,6 +172,8 @@ zcheck_r6_password(i_ctx_t * i_ctx_p) return_error(gs_error_undefined); if (!r_has_type(Uref, t_string)) return_error(gs_error_typecheck); + if (r_size(Uref) < 48) + return_error(gs_error_invalidaccess); code = dict_find_string(CryptDict, "UE", &UEref); if (code < 0) @@ -176,6 +182,8 @@ zcheck_r6_password(i_ctx_t * i_ctx_p) return_error(gs_error_undefined); if (!r_has_type(UEref, t_string)) return_error(gs_error_typecheck); + if (r_size(UEref) < 32) + return_error(gs_error_invalidaccess); pop(2); op = osp; |