From 06dcb7a8b9543cefcbc867d85624bbb0bcf35ca8 Mon Sep 17 00:00:00 2001 From: Cristy Date: Sun, 28 Jan 2018 16:39:12 -0500 Subject: [PATCH] https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5781 --- coders/sixel.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/coders/sixel.c b/coders/sixel.c index 01dfa8d93..edce7ba4f 100644 --- a/coders/sixel.c +++ b/coders/sixel.c @@ -245,8 +245,9 @@ MagickBooleanType sixel_decode(unsigned char /* in */ *p, int imsx, imsy; int dmsx, dmsy; int y; - size_t offset; + size_t extent,offset; + extent=strlen((char *) p); posision_x = posision_y = 0; max_x = max_y = 0; attributed_pan = 2; @@ -380,6 +381,8 @@ MagickBooleanType sixel_decode(unsigned char /* in */ *p, if ((n > 0) && (param[0] > 0)) { repeat_count = param[0]; + if (repeat_count > extent) + break; } } else if (*p == '#') { -- 2.40.0