Blame SOURCES/rhbz-1956917.patch

ca9047
diff --git a/src/mux/muxread.c b/src/mux/muxread.c
ca9047
index fbe9f05..ea07dbf 100644
ca9047
--- a/src/mux/muxread.c
ca9047
+++ b/src/mux/muxread.c
ca9047
ca9047
@@ -264,6 +264,7 @@
ca9047
         chunk_list = MuxGetChunkListFromId(mux, id);  // List to add this chunk.
ca9047
         if (ChunkSetNth(&chunk, chunk_list, 0) != WEBP_MUX_OK) goto Err;
ca9047
         if (id == WEBP_CHUNK_VP8X) {  // grab global specs
ca9047
+          if (data_size < CHUNK_HEADER_SIZE + VP8X_CHUNK_SIZE) goto Err;
ca9047
           mux->canvas_width_ = GetLE24(data + 12) + 1;
ca9047
           mux->canvas_height_ = GetLE24(data + 15) + 1;
ca9047
         }
ca9047