Bug 413373 - "Crash [@nsGIFDecoder2::DoLzw] when loading GIF file" (detect malformed LZW encoding [p=alfredkayser@gmail.com (Alfred Kayser) r=stuart sr=tor a1.9=beltzner]

modules/libpr0n/decoders/gif/nsGIFDecoder2.cpp

@@ -590,6 +590,8 @@ nsGIFDecoder2::DoLzw(const PRUint8 *q)
       }
 
       if (oldcode == -1) {
+        if (code >= MAX_BITS)
+          return PR_FALSE;
         *rowp++ = suffix[code];
         if (rowp == rowend)
           OUTPUT_ROW();