From: Cristy <urban-warrior@imagemagick.org>
Date: Fri, 17 Nov 2017 12:24:53 +0000 (-0500)
Subject: https://github.com/ImageMagick/ImageMagick/issues/867
X-Git-Tag: 7.0.7-12~83
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9da3b39525982ad98f7e8f5e8183b9c613927e61;p=imagemagick

https://github.com/ImageMagick/ImageMagick/issues/867
---

diff --git a/coders/dds.c b/coders/dds.c
index a476247c1..f4672bd84 100644
--- a/coders/dds.c
+++ b/coders/dds.c
@@ -1865,6 +1865,8 @@ static MagickBooleanType ReadDDSInfo(Image *image, DDSInfo *dds_info)
   dds_info->pitchOrLinearSize = ReadBlobLSBLong(image);
   dds_info->depth = ReadBlobLSBLong(image);
   dds_info->mipmapcount = ReadBlobLSBLong(image);
+  if (dds_info->mipmapcount > GetBlobSize(image))
+    return MagickFalse;
   
   (void) SeekBlob(image, 44, SEEK_CUR);   /* reserved region of 11 DWORDs */