]> granicus.if.org Git - imagemagick/commitdiff
https://github.com/ImageMagick/ImageMagick/issues/999
authorCristy <urban-warrior@imagemagick.org>
Fri, 23 Feb 2018 10:28:15 +0000 (05:28 -0500)
committerCristy <urban-warrior@imagemagick.org>
Fri, 23 Feb 2018 10:28:15 +0000 (05:28 -0500)
coders/tiff.c

index 5bc1bc871e912ed448eea0dac7e63bc3e899d209..7ffbc167a35b26e1f73628719423046f5b4b6c5d 100644 (file)
@@ -1757,6 +1757,8 @@ RestoreMSCWarning
       method=ReadTileMethod;
     quantum_info->endian=LSBEndian;
     quantum_type=RGBQuantum;
+    if (((MagickSizeType) TIFFScanlineSize(tiff)) > GetBlobSize(image))
+      ThrowTIFFException(CorruptImageError,"InsufficientImageDataInFile");
     tiff_pixels=(unsigned char *) AcquireMagickMemory(MagickMax(
       TIFFScanlineSize(tiff),(ssize_t) (image->columns*samples_per_pixel*
       pow(2.0,ceil(log(bits_per_sample)/log(2.0)))*sizeof(uint32))));