diff --git a/src/bigtiffimage.cpp b/src/bigtiffimage.cpp index dc8c2f86..b1dcd27a 100644 --- a/src/bigtiffimage.cpp +++ b/src/bigtiffimage.cpp @@ -227,7 +227,7 @@ namespace Exiv2 : 1; // #55 memory allocation crash test/data/POC8 - long long allocate = (long long) (size*count + pad); + long long allocate = (long long) size*count + pad; if ( allocate > (long long) io.size() ) { throw Error(57); } diff --git a/src/image.cpp b/src/image.cpp index c19fb989..ce79c0a6 100644 --- a/src/image.cpp +++ b/src/image.cpp @@ -402,7 +402,7 @@ namespace Exiv2 { // if ( offset > io.size() ) offset = 0; // Denial of service? // #55 memory allocation crash test/data/POC8 - long long allocate = (long long) (size*count + pad+20); + long long allocate = (long long) size*count + pad+20; if ( allocate > (long long) io.size() ) { throw Error(57); }