https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14413

diff --git a/coders/xbm.c b/coders/xbm.c
index ab8b6578508bc99832915471c8d89afc81a747b5..76c5b42242635aafafbdbdf0f975e6fd13788f58 100644 (file)
--- a/coders/xbm.c
+++ b/coders/xbm.c
@@ -158,7 +158,7 @@ static int XBMInteger(Image *image,short int *hex_digits)
       {
         value*=16;
         c&=0xff;
-        if (value <= (unsigned int) (INT_MAX-hex_digits[c]))
+        if (value <= (unsigned int) ((INT_MAX-1)-hex_digits[c]))
           value+=hex_digits[c];
       }
     c=ReadBlobByte(image);