Added extra check (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7266)

diff --git a/coders/psd.c b/coders/psd.c
index ce5c908592e57e71654a43660c2103093e02504e..f0c39d80bc65250e1b16d1bebd3418b3c6d1748f 100644 (file)
--- a/coders/psd.c
+++ b/coders/psd.c
@@ -1235,6 +1235,9 @@ static MagickBooleanType ReadPSDChannelZip(Image *image,const size_t channels,
     (void) LogMagickEvent(CoderEvent,GetMagickModule(),
        "      layer data is ZIP compressed");
 
+  if ((MagickSizeType) compact_size > GetBlobSize(image))
+    ThrowBinaryException(CorruptImageError,"UnexpectedEndOfFile",
+      image->filename);
   compact_pixels=(unsigned char *) AcquireQuantumMemory(compact_size,
     sizeof(*compact_pixels));
   if (compact_pixels == (unsigned char *) NULL)