From: Cristy <urban-warrior@imagemagick.org>
Date: Sat, 1 Oct 2016 23:35:21 +0000 (-0400)
Subject: ...
X-Git-Tag: 7.0.3-2~5
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5fe4159b6c02d87f31b870ec2bf537dba2190f4e;p=imagemagick

...
---

diff --git a/coders/meta.c b/coders/meta.c
index baba221d6..c96d0030d 100644
--- a/coders/meta.c
+++ b/coders/meta.c
@@ -400,10 +400,17 @@ static ssize_t parse8BIM(Image *ifile, Image *ofile)
             {
               if (brkused && next > 0)
                 {
+                  size_t
+                    codes_length;
+
                   char
                     *s = &token[next-1];
 
-                  len -= (ssize_t) convertHTMLcodes(s,strlen(s));
+                  codes_length=convertHTMLcodes(s, strlen(s));
+                  if (codes_length > len)
+                    len=0;
+                  else
+                    len-=codes_length;
                 }
             }
 
@@ -696,10 +703,17 @@ static ssize_t parse8BIMW(Image *ifile, Image *ofile)
             {
               if (brkused && next > 0)
                 {
+                  size_t
+                    codes_length;
+
                   char
                     *s = &token[next-1];
 
-                  len -= (ssize_t) convertHTMLcodes(s,strlen(s));
+                  codes_length=convertHTMLcodes(s, strlen(s));
+                  if (codes_length > len)
+                    len=0;
+                  else
+                    len-=codes_length;
                 }
             }