...

diff --git a/coders/meta.c b/coders/meta.c
index baba221d60cc9fabcd7a3719219a355441d2dfcf..c96d0030d1c89d7b183506ad3fc3770542ca6e17 100644 (file)
--- a/coders/meta.c
+++ b/coders/meta.c
@@ -400,10 +400,17 @@ static ssize_t parse8BIM(Image *ifile, Image *ofile)
             {
               if (brkused && next > 0)
                 {
+                  size_t
+                    codes_length;
+
                   char
                     *s = &token[next-1];
 
-                  len -= (ssize_t) convertHTMLcodes(s,strlen(s));
+                  codes_length=convertHTMLcodes(s, strlen(s));
+                  if (codes_length > len)
+                    len=0;
+                  else
+                    len-=codes_length;
                 }
             }
 
@@ -696,10 +703,17 @@ static ssize_t parse8BIMW(Image *ifile, Image *ofile)
             {
               if (brkused && next > 0)
                 {
+                  size_t
+                    codes_length;
+
                   char
                     *s = &token[next-1];
 
-                  len -= (ssize_t) convertHTMLcodes(s,strlen(s));
+                  codes_length=convertHTMLcodes(s, strlen(s));
+                  if (codes_length > len)
+                    len=0;
+                  else
+                    len-=codes_length;
                 }
             }