https://github.com/ImageMagick/ImageMagick/issues/301

ImageMagick · Nov 16, 2016 · 174de08 · 174de08
1 parent 3d243ba
commit 174de08
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/coders/sgi.c b/coders/sgi.c
@@ -335,6 +335,8 @@ static Image *ReadSGIImage(const ImageInfo *image_info,ExceptionInfo *exception)
     if ((iris_info.bytes_per_pixel == 0) || (iris_info.bytes_per_pixel > 2))
       ThrowReaderException(CorruptImageError,"ImproperImageHeader");
     iris_info.dimension=ReadBlobMSBShort(image);
+    if ((iris_info.dimension == 0) || (iris_info.dimension > 3)) 
+      ThrowReaderException(CorruptImageError,"ImproperImageHeader");
     iris_info.columns=ReadBlobMSBShort(image);
     iris_info.rows=ReadBlobMSBShort(image);
     iris_info.depth=ReadBlobMSBShort(image);