]> granicus.if.org Git - imagemagick/commitdiff
Heap buffer-overflow when processing a SVG image including a broken comment like...
authorCristy <mikayla-grace@urban-warrior.org>
Tue, 12 Feb 2019 00:58:52 +0000 (19:58 -0500)
committerCristy <mikayla-grace@urban-warrior.org>
Tue, 12 Feb 2019 00:58:52 +0000 (19:58 -0500)
coders/svg.c

index cd2085378fd23151a6306357f458219869212e69..0663f715eadb3efa5eeb1fdfeb26a8bba31eff32 100644 (file)
@@ -678,12 +678,12 @@ static void SVGStripString(const MagickBooleanType trim,char *message)
     *q++=(*p);
   }
   *q='\0';
-  if (trim != MagickFalse)
+  length=strlen(message);
+  if ((trim != MagickFalse) && (length != 0))
     {
       /*
         Remove whitespace.
       */
-      length=strlen(message);
       p=message;
       while (isspace((int) ((unsigned char) *p)) != 0)
         p++;