File GraphicsMagick-CVE-2017-14341.patch of Package GraphicsMagick.7727

Index: GraphicsMagick-1.2.5/coders/wpg.c
===================================================================
--- GraphicsMagick-1.2.5.orig/coders/wpg.c	2017-11-21 14:48:19.345902204 +0100
+++ GraphicsMagick-1.2.5/coders/wpg.c	2017-11-21 14:49:12.922810948 +0100
@@ -942,6 +942,8 @@ static Image *ReadWPGImage(const ImageIn
           if(i==EOF)
             break;
           Rd_WP_DWORD(image,&Rec.RecordLength);
+          if (Rec.RecordLength > GetBlobSize(image))
+            ThrowReaderException(CorruptImageError,ImproperImageHeader,image);
           if(EOFBlob(image))
             break;
 
openSUSE Build Service is sponsored by