Fix vuln OSV-2023-1267

Author: oss-patch

src/free.c

@@ -682,6 +682,8 @@ free_preR13_object (Dwg_Object *obj)
     {
       Dwg_Object_Entity *_obj = obj->tio.entity;
       FIELD_HANDLE (layer, 2, 8);
+      if (_obj->layer == NULL || !_obj->layer->handleref.is_global)
+        return;
       if (_obj->flag_r11 & FLAG_R11_HAS_LTYPE) // 2
         FIELD_HANDLE (ltype, 1, 6);
       if (_obj->flag_r11 & FLAG_R11_HAS_HANDLING)

src/in_json.c

@@ -3170,6 +3170,7 @@ json_OBJECTS (Bit_Chain *restrict dat, Dwg_Data *restrict dwg,
                          objsize);
               obj->tio.object = (Dwg_Object_Object *)calloc (
                   1, sizeof (Dwg_Object_Object));
+              obj->tio.entity = (Dwg_Object_Entity *)calloc(1, sizeof(Dwg_Object_Entity));
               obj->tio.object->dwg = dwg;
               obj->tio.object->objid = i;
               // NEW_OBJECT (dwg, obj)