]> granicus.if.org Git - imagemagick/commitdiff
https://github.com/ImageMagick/ImageMagick/issues/542
authorCristy <urban-warrior@imagemagick.org>
Thu, 6 Jul 2017 23:20:57 +0000 (19:20 -0400)
committerCristy <urban-warrior@imagemagick.org>
Thu, 6 Jul 2017 23:20:57 +0000 (19:20 -0400)
coders/png.c

index dfe6843ac1cc8bfdb501e091a86ec3bea57924ed..860d28ec41c005f2e7ee8610ec4137d46a3f93b2 100644 (file)
@@ -5968,6 +5968,8 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
 
               for (i=(ssize_t) first_object; i <= (ssize_t) last_object; i++)
               {
+                if ((i < 0) || (i >= MNG_MAX_OBJECTS))
+                  continue;
                 if (mng_info->exists[i] && !mng_info->frozen[i] &&
                     (p-chunk) < (ssize_t) (length-8))
                   {