File GraphicsMagick-CVE-2017-14733.patch of Package GraphicsMagick.7782

Index: GraphicsMagick-1.3.25/coders/rle.c
===================================================================
--- GraphicsMagick-1.3.25.orig/coders/rle.c	2017-12-05 19:44:51.396000983 +0100
+++ GraphicsMagick-1.3.25/coders/rle.c	2017-12-05 19:45:26.440584122 +0100
@@ -305,7 +305,8 @@ static Image *ReadRLEImage(const ImageIn
 
     if ((rle_header.Ncolors == 0) ||
         (rle_header.Ncolors == 2) ||
-        ((rle_header.Flags & 0x04) && (rle_header.Ncolors > 254)) ||
+        ((rle_header.Flags & 0x04) &&
+       ((rle_header.Ncolors > 254) || (rle_header.Ncolors < 3))) ||
         (rle_header.Pixelbits != 8))
       ThrowRLEReaderException(CoderError,DataEncodingSchemeIsNotSupported,image);
 
openSUSE Build Service is sponsored by