File ImageMagick-CVE-2016-6823.patch of Package ImageMagick.3353
Index: ImageMagick-6.8.9-8/coders/bmp.c
===================================================================
--- ImageMagick-6.8.9-8.orig/coders/bmp.c 2016-10-10 19:22:34.547702545 +0200
+++ ImageMagick-6.8.9-8/coders/bmp.c 2016-10-10 19:22:35.051710382 +0200
@@ -1687,6 +1687,9 @@ static MagickBooleanType WriteBMPImage(c
bmp_info.file_size+=extra_size;
bmp_info.offset_bits+=extra_size;
}
+ if ((image->columns != (signed int) image->columns) ||
+ (image->rows != (signed int) image->rows))
+ ThrowWriterException(ImageError,"WidthOrHeightExceedsLimit");
bmp_info.width=(ssize_t) image->columns;
bmp_info.height=(ssize_t) image->rows;
bmp_info.planes=1;