From: Cristy <urban-warrior@imagemagick.org>
Date: Mon, 27 Aug 2018 19:24:10 +0000 (-0400)
Subject: https://github.com/ImageMagick/ImageMagick/issues/1268
X-Git-Tag: 7.0.8-11~14
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ecb31dbad39ccdc65868d5d2a37f0f0521250832;p=imagemagick

https://github.com/ImageMagick/ImageMagick/issues/1268
---

diff --git a/coders/bmp.c b/coders/bmp.c
index 8461e1a49..e20085fef 100644
--- a/coders/bmp.c
+++ b/coders/bmp.c
@@ -661,6 +661,8 @@ static Image *ReadBMPImage(const ImageInfo *image_info,ExceptionInfo *exception)
         bmp_info.x_pixels=ReadBlobLSBLong(image);
         bmp_info.y_pixels=ReadBlobLSBLong(image);
         bmp_info.number_colors=ReadBlobLSBLong(image);
+        if (bmp_info.number_colors > GetBlobSize(image))
+          ThrowReaderException(CorruptImageError,"InsufficientImageDataInFile");
         bmp_info.colors_important=ReadBlobLSBLong(image);
         if (image->debug != MagickFalse)
           {