From: Cristy <urban-warrior@imagemagick.org>
Date: Sat, 1 Sep 2018 15:20:40 +0000 (-0400)
Subject: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9435
X-Git-Tag: 7.0.8-12~102
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6fc767d6574451eea839764ff3215b904f58cfb9;p=imagemagick

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9435
---

diff --git a/coders/dcm.c b/coders/dcm.c
index 4878fa13a..8a431c73c 100644
--- a/coders/dcm.c
+++ b/coders/dcm.c
@@ -3943,11 +3943,11 @@ static Image *ReadDCMImage(const ImageInfo *image_info,ExceptionInfo *exception)
           ThrowDCMException(CorruptImageError,"InsufficientImageDataInFile");
         if (info.scale != (Quantum *) NULL)
           info.scale=(Quantum *) RelinquishMagickMemory(info.scale);
-        info.scale=(Quantum *) AcquireQuantumMemory(MagickMax(length,256),
+        info.scale=(Quantum *) AcquireQuantumMemory(MagickMax(length,MaxMap)+1,
           sizeof(*info.scale));
         if (info.scale == (Quantum *) NULL)
           ThrowDCMException(ResourceLimitError,"MemoryAllocationFailed");
-        (void) memset(info.scale,0,MagickMax(length,256)*
+        (void) memset(info.scale,0,(MagickMax(length,MaxMap)+1)*
           sizeof(*info.scale));
         range=GetQuantumRange(info.depth);
         for (i=0; i <= (ssize_t) GetQuantumRange(info.depth); i++)