https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6071

diff --git a/coders/dcm.c b/coders/dcm.c
index 6189798502d125a84d6aab09168d8f80e3b0f5c2..8885e1dd2c8e4e6c5c925a9821a9e52db10917e7 100644 (file)
--- a/coders/dcm.c
+++ b/coders/dcm.c
@@ -3887,6 +3887,8 @@ static Image *ReadDCMImage(const ImageInfo *image_info,ExceptionInfo *exception)
         Compute pixel scaling table.
       */
       length=(size_t) (GetQuantumRange(info.depth)+1);
+      if (length > GetBlobSize(image)) 
+        ThrowDCMException(CorruptImageError,"InsufficientImageDataInFile");
       info.scale=(Quantum *) AcquireQuantumMemory(length,sizeof(*info.scale));
       if (info.scale == (Quantum *) NULL)
         ThrowDCMException(ResourceLimitError,"MemoryAllocationFailed");