From: Cristy <urban-warrior@imagemagick.org>
Date: Thu, 25 Jan 2018 00:27:25 +0000 (-0500)
Subject: Eliminate out-of-memory for DDS coder
X-Git-Tag: 7.0.7-23~281
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=f176551f4e4172bf7696eea3f251ca02efe2b1c5;p=imagemagick

Eliminate out-of-memory for DDS coder
Credit Fuzz OSS
---

diff --git a/coders/dds.c b/coders/dds.c
index b82e5f119..92e3a80d0 100644
--- a/coders/dds.c
+++ b/coders/dds.c
@@ -1792,7 +1792,7 @@ static Image *ReadDDSImage(const ImageInfo *image_info,ExceptionInfo *exception)
   if (volume)
     num_images = dds_info.depth;
 
-  if (num_images < 1)
+  if ((num_images == 0) || (num_images > GetBlobSize(image)))
     ThrowReaderException(CorruptImageError,"ImproperImageHeader");
 
   option=GetImageOption(image_info,"dds:skip-mipmaps");