From e8ffd7100cc96db5b1324297f078b3e6b12f28eb Mon Sep 17 00:00:00 2001 From: Dirk Lemstra Date: Sun, 1 Apr 2018 18:02:54 +0200 Subject: [PATCH] Added extra check (https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7266) --- coders/psd.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/coders/psd.c b/coders/psd.c index ce5c90859..f0c39d80b 100644 --- a/coders/psd.c +++ b/coders/psd.c @@ -1235,6 +1235,9 @@ static MagickBooleanType ReadPSDChannelZip(Image *image,const size_t channels, (void) LogMagickEvent(CoderEvent,GetMagickModule(), " layer data is ZIP compressed"); + if ((MagickSizeType) compact_size > GetBlobSize(image)) + ThrowBinaryException(CorruptImageError,"UnexpectedEndOfFile", + image->filename); compact_pixels=(unsigned char *) AcquireQuantumMemory(compact_size, sizeof(*compact_pixels)); if (compact_pixels == (unsigned char *) NULL) -- 2.50.1