From: cristy <urban-warrior@git.imagemagick.org>
Date: Sat, 24 May 2014 23:26:25 +0000 (+0000)
Subject: (no commit message)
X-Git-Tag: 7.0.1-0~2292
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=caf07b0f71a915d00c6667efd90a138340735eb7;p=imagemagick

---

diff --git a/coders/rle.c b/coders/rle.c
index a1fb82069..24b44f00e 100644
--- a/coders/rle.c
+++ b/coders/rle.c
@@ -219,8 +219,11 @@ static Image *ReadRLEImage(const ImageInfo *image_info,ExceptionInfo *exception)
     number_planes=1UL*ReadBlobByte(image);
     bits_per_pixel=1UL*ReadBlobByte(image);
     number_colormaps=1UL*ReadBlobByte(image);
+    map_length=(unsigned char) ReadBlobByte(image);
+    if (map_length >= 64)
+      ThrowReaderException(CorruptImageError,"ImproperImageHeader");
     one=1;
-    map_length=one << (unsigned char) ReadBlobByte(image);
+    map_length=one << map_length;
     if ((number_planes == 0) || (number_planes == 2) || (bits_per_pixel != 8) ||
         (image->columns == 0))
       ThrowReaderException(CorruptImageError,"ImproperImageHeader");