From: Dirk Lemstra <dirk@git.imagemagick.org>
Date: Sat, 13 Jan 2018 00:00:40 +0000 (+0100)
Subject: Added extra check for the number of elements
X-Git-Tag: 7.0.7-22~101
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=eb6f00e059ba657811f224367c22e593d9589035;p=imagemagick

Added extra check for the number of elements
Credit to OSS-Fuzz
---

diff --git a/coders/dpx.c b/coders/dpx.c
index bc021bad7..6c73c3d4a 100644
--- a/coders/dpx.c
+++ b/coders/dpx.c
@@ -803,7 +803,8 @@ static Image *ReadDPXImage(const ImageInfo *image_info,ExceptionInfo *exception)
     case 7: image->orientation=RightBottomOrientation; break;
   }
   dpx.image.number_elements=ReadBlobShort(image);
-  if (dpx.image.number_elements > MaxNumberImageElements)
+  if ((dpx.image.number_elements < 1) ||
+      (dpx.image.number_elements > MaxNumberImageElements))
     ThrowReaderException(CorruptImageError,"ImproperImageHeader");
   offset+=2;
   dpx.image.pixels_per_line=ReadBlobLong(image);