From c635d2263f138cd7d1ce7940135e5f706b758627 Mon Sep 17 00:00:00 2001
From: morkt <muvluv.ru@gmail.com>
Date: Mon, 1 Jun 2015 00:51:54 +0400
Subject: [PATCH] (TgfFormat): additional input sanity checks.

---
 ArcFormats/ImageTGF.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ArcFormats/ImageTGF.cs b/ArcFormats/ImageTGF.cs
index d8f2d0ce..524eb002 100644
--- a/ArcFormats/ImageTGF.cs
+++ b/ArcFormats/ImageTGF.cs
@@ -60,7 +60,7 @@ namespace GameRes.Formats.Tactics
                 return null;
             uint length = LittleEndian.ToUInt32 (header, 0);
             int chunk_size = LittleEndian.ToInt32 (header, 4);
-            if (length > 0xffffff)
+            if (length > 0xffffff || chunk_size <= 0 || length < chunk_size)
                 return null;
             using (var reader = new Reader (stream, (uint)Math.Max (0x20, chunk_size+2), chunk_size))
             {