From fac6abc2e7d26ededf5f54c4349da115e7393d52 Mon Sep 17 00:00:00 2001 From: Cristy Date: Wed, 19 Sep 2018 17:42:10 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/issues/1323 --- ChangeLog | 2 +- coders/pcx.c | 5 ++--- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/ChangeLog b/ChangeLog index 96c0152d4..93d75ef04 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,5 @@ 2018-09-16 7.0.8-12 Cristy - * Release ImageMagick version 7.0.8-12, GIT revision 14810:8f613ec25:20180916. + * Release ImageMagick version 7.0.8-12, GIT revision 14810:8f613ec25:20180916 2018-09-15 7.0.8-12 Dirk Lemstra * Added support for arithmetic coding to the jpeg encoder: diff --git a/coders/pcx.c b/coders/pcx.c index 984252588..b4779d33d 100644 --- a/coders/pcx.c +++ b/coders/pcx.c @@ -406,10 +406,9 @@ static Image *ReadPCXImage(const ImageInfo *image_info,ExceptionInfo *exception) if (HeapOverflowSanityCheck(pcx_packets, (size_t) pcx_info.planes) != MagickFalse) ThrowPCXException(CorruptImageError,"ImproperImageHeader"); pcx_packets=(size_t) pcx_packets*pcx_info.planes; - if ((size_t) (pcx_info.bits_per_pixel*pcx_info.planes*image->columns) > - (pcx_packets*8U)) + if ((size_t) (pcx_info.bits_per_pixel*pcx_info.planes*image->columns) > (pcx_packets*8U)) ThrowPCXException(CorruptImageError,"ImproperImageHeader"); - if ((MagickSizeType) (pcx_packets/10) > GetBlobSize(image)) + if ((MagickSizeType) (pcx_packets/12) > GetBlobSize(image)) ThrowPCXException(CorruptImageError,"ImproperImageHeader"); scanline=(unsigned char *) AcquireQuantumMemory(MagickMax(image->columns, pcx_info.bytes_per_line),MagickMax(pcx_info.planes,8)*sizeof(*scanline)); -- 2.40.0