From: Cristy <urban-warrior@imagemagick.org>
Date: Mon, 12 Feb 2018 01:56:19 +0000 (-0500)
Subject: https://mail.google.com/mail/#inbox/1618795878d3300a
X-Git-Tag: 7.0.7-23~52
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=f5ac47195a8c93ba33d00bbc109eb7aa71de7228;p=imagemagick

https://mail.google.com/mail/#inbox/1618795878d3300a
---

diff --git a/coders/viff.c b/coders/viff.c
index 4cbf264c8..93854fad7 100644
--- a/coders/viff.c
+++ b/coders/viff.c
@@ -414,7 +414,7 @@ static Image *ReadVIFFImage(const ImageInfo *image_info,
           default: bytes_per_pixel=1; break;
         }
         image->colors=viff_info.map_columns;
-        if ((MagickSizeType) image->colors > GetBlobSize(image))
+        if ((MagickSizeType) (viff_info.map_rows*image->colors) > GetBlobSize(image))
           ThrowReaderException(CorruptImageError,"InsufficientImageDataInFile");
         if (AcquireImageColormap(image,image->colors,exception) == MagickFalse)
           ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");