| Index: third_party/libtiff/tif_aux.c
|
| diff --git a/third_party/libtiff/tif_aux.c b/third_party/libtiff/tif_aux.c
|
| index 927150a49352deaf881631a3abd6e00e09887993..3ce3680ab2ae23cd86654230d47b2aaf81c18955 100644
|
| --- a/third_party/libtiff/tif_aux.c
|
| +++ b/third_party/libtiff/tif_aux.c
|
| @@ -69,7 +69,7 @@ _TIFFCheckRealloc(TIFF* tif, void* buffer,
|
| /*
|
| * XXX: Check for integer overflow.
|
| */
|
| - if (nmemb && elem_size && bytes / elem_size == nmemb)
|
| + if (nmemb && elem_size && !_TIFFIfMultiplicationOverflow(nmemb, elem_size))
|
| cp = _TIFFrealloc(buffer, bytes);
|
|
|
| if (cp == NULL) {
|
|
|