From 5f06bc16f4dd3a2c1aa2d8e0f2d8eb6dc1a0049f Mon Sep 17 00:00:00 2001 From: cristy Date: Tue, 3 Apr 2012 12:47:36 +0000 Subject: [PATCH] --- MagickCore/property.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/MagickCore/property.c b/MagickCore/property.c index 175cf150e..1713f8c00 100644 --- a/MagickCore/property.c +++ b/MagickCore/property.c @@ -1306,6 +1306,8 @@ static MagickBooleanType GetEXIFProperty(const Image *image, break; components=(ssize_t) ((int) ReadPropertyLong(endian,q+4)); number_bytes=(size_t) components*tag_bytes[format]; + if (number_bytes < components) + break; /* prevent overflow */ if (number_bytes <= 4) p=q+8; else -- 2.40.0