Avoid overflow when parsing PSD resource blocks

ImageMagick · May 6, 2016 · 15dd190 · 15dd190
1 parent dcdd212
commit 15dd190
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/coders/psd.c b/coders/psd.c
@@ -643,7 +643,7 @@ static void ParseImageResourceBlocks(Image *image,
     p=PushShortPixel(MSBEndian,p,&id);
     p=PushShortPixel(MSBEndian,p,&short_sans);
     p=PushLongPixel(MSBEndian,p,&count);
-    if (p+count > blocks+length)
+    if ((p+count) > (blocks+length-16))
       return;
     switch (id)
     {