From a4642512df99b296d289b4089c18455d772820d0 Mon Sep 17 00:00:00 2001 From: Cristy Date: Mon, 11 Feb 2019 19:58:52 -0500 Subject: [PATCH] =?utf8?q?Heap=20buffer-overflow=20when=20processing=20a?= =?utf8?q?=20SVG=20image=20including=20a=20broken=20comment=20like=20"/*"?= =?utf8?q?=20in=20an=20attribute=20value=20(credit=20Nicolas=20Gr=C3=A9goi?= =?utf8?q?re)?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit --- coders/svg.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/coders/svg.c b/coders/svg.c index cd2085378..0663f715e 100644 --- a/coders/svg.c +++ b/coders/svg.c @@ -678,12 +678,12 @@ static void SVGStripString(const MagickBooleanType trim,char *message) *q++=(*p); } *q='\0'; - if (trim != MagickFalse) + length=strlen(message); + if ((trim != MagickFalse) && (length != 0)) { /* Remove whitespace. */ - length=strlen(message); p=message; while (isspace((int) ((unsigned char) *p)) != 0) p++; -- 2.40.0