fn dav1d_data_create: limit maximum size to match C code

fbossen · Mar 24, 2024 · a5fb822 · a5fb822
1 parent a142e2d
commit a5fb822
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/lib.rs b/src/lib.rs
@@ -1011,6 +1011,7 @@ pub unsafe extern "C" fn dav1d_picture_unref(p: *mut Dav1dPicture) {
 pub unsafe extern "C" fn dav1d_data_create(buf: *mut Dav1dData, sz: usize) -> *mut u8 {
     || -> Rav1dResult<*mut u8> {
         let buf = validate_input!(NonNull::new(buf).ok_or(EINVAL))?;
+        validate_input!((sz <= usize::MAX / 2, EINVAL))?;
         let data = Rav1dData::create(sz)?;
         let data = data.to::<Dav1dData>();
         let ptr = data