https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6199

diff --git a/coders/dcm.c b/coders/dcm.c
index eff8818a9d8c6ca922ae67d7d5ef53240891bde1..3612c458557942605aa0bb099e205a5033d34eb1 100644 (file)
--- a/coders/dcm.c
+++ b/coders/dcm.c
@@ -3778,7 +3778,8 @@ static Image *ReadDCMImage(const ImageInfo *image_info,ExceptionInfo *exception)
       */
       for (i=0; i < (ssize_t) stream_info->remaining; i++)
         (void) ReadBlobByte(image);
-      (void) ((ReadBlobLSBShort(image) << 16) | ReadBlobLSBShort(image));
+      (void) (((ssize_t) ReadBlobLSBShort(image) << 16) |
+        ReadBlobLSBShort(image));
       length=(size_t) ReadBlobLSBLong(image);
       if (length > GetBlobSize(image))
         ThrowDCMException(CorruptImageError,"InsufficientImageDataInFile");