]> granicus.if.org Git - imagemagick/commitdiff
Throw exception instead of break (https://bugs.chromium.org/p/oss-fuzz/issues/detail...
authorDirk Lemstra <dirk@git.imagemagick.org>
Tue, 10 Apr 2018 20:38:27 +0000 (22:38 +0200)
committerDirk Lemstra <dirk@git.imagemagick.org>
Tue, 10 Apr 2018 20:38:27 +0000 (22:38 +0200)
coders/png.c

index 457db712eccef2e9885d4fefeeb18aa60928dc1c..4d783615f931630a98c56ea2bcaf72d9351a0e14 100644 (file)
@@ -5437,7 +5437,11 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
 
               c=ReadBlobByte(image);
               if (c == EOF)
-                break;
+                {
+                  chunk=(unsigned char *) RelinquishMagickMemory(chunk);
+                  ThrowReaderException(CorruptImageError,
+                    "InsufficientImageDataInFile");
+                }
               chunk[i]=(unsigned char) c;
             }