diff --git a/zxingorg/src/com/google/zxing/web/DecodeServlet.java b/zxingorg/src/com/google/zxing/web/DecodeServlet.java index e3245c1df..70a35556c 100644 --- a/zxingorg/src/com/google/zxing/web/DecodeServlet.java +++ b/zxingorg/src/com/google/zxing/web/DecodeServlet.java @@ -282,8 +282,11 @@ public final class DecodeServlet extends HttpServlet { response.sendRedirect("badimage.jspx"); return; } - if (image == null || - image.getHeight() <= 1 || image.getWidth() <= 1 || + if (image == null) { + response.sendRedirect("badimage.jspx"); + return; + } + if (image.getHeight() <= 1 || image.getWidth() <= 1 || image.getHeight() * image.getWidth() > MAX_PIXELS) { log.fine("Dimensions too large: " + image.getWidth() + 'x' + image.getHeight()); response.sendRedirect("badimage.jspx");