From 732320314fa533655f8fe97da7700cfb528f8862 Mon Sep 17 00:00:00 2001 From: Dirk Lemstra Date: Mon, 19 Mar 2018 23:01:21 +0100 Subject: [PATCH] Added extra check (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5800). --- coders/pcx.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/coders/pcx.c b/coders/pcx.c index 0c99a5e6e..e56afd134 100644 --- a/coders/pcx.c +++ b/coders/pcx.c @@ -405,6 +405,8 @@ static Image *ReadPCXImage(const ImageInfo *image_info,ExceptionInfo *exception) if ((size_t) (pcx_info.bits_per_pixel*pcx_info.planes*image->columns) > (pcx_packets*8U)) ThrowPCXException(CorruptImageError,"ImproperImageHeader"); + if ((MagickSizeType) pcx_packets > GetBlobSize(image)) + ThrowPCXException(CorruptImageError,"ImproperImageHeader"); scanline=(unsigned char *) AcquireQuantumMemory(MagickMax(image->columns, pcx_info.bytes_per_line),MagickMax(8,pcx_info.planes)*sizeof(*scanline)); pixel_info=AcquireVirtualMemory(pcx_packets,2*sizeof(*pixels)); -- 2.40.0