You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ImageMagick/ImageMagick-6.2.8-cve-2006-...

15 lines
636 B

--- ImageMagick-6.2.8/coders/sgi.c.cve-2006-4144 2006-02-07 22:52:54.000000000 -0500
+++ ImageMagick-6.2.8/coders/sgi.c 2006-08-23 02:05:52.000000000 -0400
@@ -410,7 +410,11 @@
for (i=0; i < (long) (iris_info.rows*iris_info.depth); i++)
offsets[i]=(ssize_t) ReadBlobMSBLong(image);
for (i=0; i < (long) (iris_info.rows*iris_info.depth); i++)
+ {
runlength[i]=ReadBlobMSBLong(image);
+ if (runlength[i] >= (4*(size_t) iris_info.columns+10))
+ ThrowReaderException(CorruptImageError,"ImproperImageHeader");
+ }
/*
Check data order.
*/