rbf_font: sanitize loaded bitmap font before use (CONFIG_NO_BFNT)

reticulatedpines / magiclantern_simplified

A Git based version of Magic Lantern, for those unwilling or unable to work using Mercurial. The vast majority of branches have been removed, with those thought to be important brought in individually and merged.

GNU General Public License v2.0

147 stars 51 forks source link

rbf_font: sanitize loaded bitmap font before use (CONFIG_NO_BFNT) #23

Open kitor opened 2 years ago

kitor commented 2 years ago

In 05a99a7c5f4c0723568382f629bb8b44a89dd7bb I blindly believe font file to be valid if just header magic matches.

bfnt_load_from_card should be updated to:

verify if loaded size > header size
parse header
count if maximum offset fits in loaded file