(no commit message)

diff --git a/MagickCore/cache.c b/MagickCore/cache.c
index 2e54fe8a60e0e63cb4f66ef39e545b699d722ca8..19ce17d057a282662f9cc4d8a2adb383481bd41f 100644 (file)
--- a/MagickCore/cache.c
+++ b/MagickCore/cache.c
@@ -3396,7 +3396,8 @@ static MagickBooleanType OpenPixelCache(Image *image,const MapMode mode,
     packet_size+=cache_info->metacontent_extent;
   length=number_pixels*packet_size;
   columns=(size_t) (length/cache_info->rows/packet_size);
-  if (cache_info->columns != columns)
+  if ((cache_info->columns != columns) || ((ssize_t) cache_info->columns < 0) ||
+      ((ssize_t) cache_info->rows < 0))
     ThrowBinaryException(ResourceLimitError,"PixelCacheAllocationFailed",
       image->filename);
   cache_info->length=length;