fixed NULL ptr deref in sigma fp config handling (afl)

gphoto · Sep 27, 2024 · 57dbf7e · 57dbf7e
1 parent 72364f3
commit 57dbf7e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/camlibs/ptp2/config.c b/camlibs/ptp2/config.c
@@ -5098,7 +5098,7 @@ _get_SigmaFP_Aperture(CONFIG_GET_ARGS) {
 	 * byte[last]	checksum
 	 */
 
-	if (!(xdata[1] & (1<<1))) {
+	if ((xsize < 2) || (!(xdata[1] & (1<<1)))) {
 		free (xdata);
 		return GP_ERROR;
 	}
@@ -5244,7 +5244,7 @@ _get_SigmaFP_ShutterSpeed(CONFIG_GET_ARGS) {
 	 * byte[last]	checksum
 	 */
 
-	if (!(xdata[1] & (1<<0))) {
+	if ((xsize < 2) || (!(xdata[1] & (1<<0)))) {
 		free (xdata);
 		return GP_ERROR;
 	}