From e75a3444dba1d92c61d301da5eaef5bd21072954 Mon Sep 17 00:00:00 2001
From: Craig Carnell <1188869+cscd98@users.noreply.github.com>
Date: Sat, 20 Dec 2025 09:10:53 +0000
Subject: [PATCH] add size checking when opening a stream

---
 src/gapi/gl.h | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/gapi/gl.h b/src/gapi/gl.h
index a3e5e9cb..b1a3c564 100644
--- a/src/gapi/gl.h
+++ b/src/gapi/gl.h
@@ -737,12 +737,21 @@ namespace GAPI {
                 return false;
 
             Stream *stream = new Stream(path);
-            if (!stream)
+
+            if (!stream || stream->size <= 0) {
+                delete stream;
                 return false;
+            }
 
             GLenum size, format;
             stream->read(format);
             stream->read(size);
+
+            if (size == 0 || size > (GLenum)stream->size) {
+                delete stream;
+                return false;
+            }
+
             char *data = new char[size];
             stream->raw(data, size);
             glProgramBinary(ID, format, data, size);