File GraphicsMagick-CVE-2016-7519.patch of Package GraphicsMagick.6323

Index: GraphicsMagick-1.3.21/coders/rle.c
===================================================================
--- GraphicsMagick-1.3.21.orig/coders/rle.c	2016-10-05 16:33:15.446333977 +0200
+++ GraphicsMagick-1.3.21/coders/rle.c	2016-10-05 16:35:03.324019881 +0200
@@ -345,7 +345,9 @@ static Image *ReadRLEImage(const ImageIn
     if ((number_pixels*number_planes_filled) != (size_t) (number_pixels*number_planes_filled))
       ThrowReaderException(ResourceLimitError,MemoryAllocationFailed,image);
     rle_pixels_length=number_pixels*number_planes_filled;
-    rle_pixels=MagickAllocateArray(unsigned char *,number_pixels,
+    if (image->rows > (image->columns*image->rows))
+      ThrowReaderException(CorruptImageError,ImproperImageHeader,image);
+    rle_pixels=MagickAllocateArray(unsigned char *,image->columns*image->rows,
                                    Max(number_planes,4));
     if (rle_pixels == (unsigned char *) NULL)
       {