Fix the DWAA size checks (#2476)

vlazar-ilm · web-flow · commit bc7fc07c2d85 · 2026-06-16T21:12:09.000-07:00
diff --git a/src/lib/OpenEXRCore/internal_dwa_compressor.h b/src/lib/OpenEXRCore/internal_dwa_compressor.h
@@ -774,8 +774,7 @@ DwaCompressor_uncompress (
        be checked below */
     if (unknownUncompressedSize > uncompressed_size ||
         rleRawSize > uncompressed_size ||
-        (unknownUncompressedSize + rleRawSize) > uncompressed_size ||
-        totalAcUncompressedCount > uncompressed_size)
+        (unknownUncompressedSize + rleRawSize) > uncompressed_size)
     {
         return EXR_ERR_CORRUPT_CHUNK;
     }

Original file line number	Diff line number	Diff line change
`@@ -774,8 +774,7 @@ DwaCompressor_uncompress (`
`774`	`774`	`be checked below */`
`775`	`775`	`if (unknownUncompressedSize > uncompressed_size \|\|`
`776`	`776`	`rleRawSize > uncompressed_size \|\|`
`777`		`- (unknownUncompressedSize + rleRawSize) > uncompressed_size \|\|`
`778`		`- totalAcUncompressedCount > uncompressed_size)`
	`777`	`+ (unknownUncompressedSize + rleRawSize) > uncompressed_size)`
`779`	`778`	`{`
`780`	`779`	`return EXR_ERR_CORRUPT_CHUNK;`
`781`	`780`	`}`