Skip to content

Commit 132c540

Browse files
committed
Increase limit for deserialization of large arrays
The last limit was still too small. Signed-off-by: Stefan Weil <[email protected]>
1 parent 0e1e68d commit 132c540

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

src/ccutil/genericvector.h

+3-2
Original file line numberDiff line numberDiff line change
@@ -968,8 +968,9 @@ bool GenericVector<T>::DeSerialize(tesseract::TFile* fp) {
968968
uint32_t reserved;
969969
if (fp->FReadEndian(&reserved, sizeof(reserved), 1) != 1) return false;
970970
// Arbitrarily limit the number of elements to protect against bad data.
971-
assert(reserved <= 30000000);
972-
if (reserved > 30000000) return false;
971+
const uint32_t limit = 50000000;
972+
assert(reserved <= limit);
973+
if (reserved > limit) return false;
973974
reserve(reserved);
974975
size_used_ = reserved;
975976
return fp->FReadEndian(data_, sizeof(T), size_used_) == size_used_;

0 commit comments

Comments
 (0)