Skip to content

Commit d9ccd82

Browse files
author
Cristy
committed
https://github.com/ImageMagick/ImageMagick/issues/549
1 parent 7beec9a commit d9ccd82

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

Diff for: coders/png.c

+6-2
Original file line numberDiff line numberDiff line change
@@ -4384,6 +4384,8 @@ static Image *ReadOneJNGImage(MngInfo *mng_info,
43844384

43854385
if (length != 0)
43864386
{
4387+
if (length > GetBlobSize(image))
4388+
ThrowReaderException(CorruptImageError,"InsufficientImageDataInFile");
43874389
chunk=(unsigned char *) AcquireQuantumMemory(length+MagickPathExtent,
43884390
sizeof(*chunk));
43894391

@@ -5260,12 +5262,14 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
52605262

52615263
if (length != 0)
52625264
{
5265+
if (length > GetBlobSize(image))
5266+
ThrowReaderException(CorruptImageError,
5267+
"InsufficientImageDataInFile");
52635268
chunk=(unsigned char *) AcquireQuantumMemory(length+
52645269
MagickPathExtent,sizeof(*chunk));
52655270

52665271
if (chunk == (unsigned char *) NULL)
5267-
ThrowReaderException(ResourceLimitError,
5268-
"MemoryAllocationFailed");
5272+
ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
52695273

52705274
for (i=0; i < (ssize_t) length; i++)
52715275
{

0 commit comments

Comments
 (0)