...

ImageMagick · May 6, 2017 · 5964475 · 5964475
1 parent 82c0f06
commit 5964475
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/coders/xwd.c b/coders/xwd.c
@@ -325,6 +325,8 @@ static Image *ReadXWDImage(const ImageInfo *image_info,ExceptionInfo *exception)
         color;
 
       length=(size_t) header.ncolors;
+      if (length > ((~0UL)/sizeof(*colors)))
+        ThrowReaderException(CorruptImageError,"ImproperImageHeader");
       colors=(XColor *) AcquireQuantumMemory(length,sizeof(*colors));
       if (colors == (XColor *) NULL)
         {