File GraphicsMagick-CVE-2016-8862.patch of Package GraphicsMagick.6323

From aea6c6507f55632829e6432f8177a084a57c9fcc Mon Sep 17 00:00:00 2001
From: Cristy <urban-warrior@imagemagick.org>
Date: Fri, 7 Oct 2016 17:01:22 -0400
Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/issues/271

---
 coders/rle.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Index: GraphicsMagick-1.2.5/coders/rle.c
===================================================================
--- GraphicsMagick-1.2.5.orig/coders/rle.c	2016-11-09 22:12:29.267372314 +0100
+++ GraphicsMagick-1.2.5/coders/rle.c	2016-11-09 22:14:21.849242088 +0100
@@ -154,6 +154,9 @@ static Image *ReadRLEImage(const ImageIn
   size_t
     count;
 
+  size_t
+    one;
+
   unsigned char
     background_color[256],
     *colormap,
@@ -209,7 +212,11 @@ static Image *ReadRLEImage(const ImageIn
     number_planes=ReadBlobByte(image);
     bits_per_pixel=ReadBlobByte(image);
     number_colormaps=ReadBlobByte(image);
-    map_length=1 << ReadBlobByte(image);
+    map_length=(unsigned char) ReadBlobByte(image);
+    if (map_length >= 32)
+      ThrowReaderException(CorruptImageError,ImproperImageHeader,image);
+    one=1;
+    map_length=one << map_length;
     if ((number_planes == 0) || (number_planes == 2) || (bits_per_pixel != 8) ||
         (image->columns == 0))
       ThrowReaderException(CoderError,DataEncodingSchemeIsNotSupported,image);
openSUSE Build Service is sponsored by