File GraphicsMagick-CVE-2016-8862.patch of Package GraphicsMagick.6323
From aea6c6507f55632829e6432f8177a084a57c9fcc Mon Sep 17 00:00:00 2001
From: Cristy <urban-warrior@imagemagick.org>
Date: Fri, 7 Oct 2016 17:01:22 -0400
Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/issues/271
---
coders/rle.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: GraphicsMagick-1.2.5/coders/rle.c
===================================================================
--- GraphicsMagick-1.2.5.orig/coders/rle.c 2016-11-09 22:12:29.267372314 +0100
+++ GraphicsMagick-1.2.5/coders/rle.c 2016-11-09 22:14:21.849242088 +0100
@@ -154,6 +154,9 @@ static Image *ReadRLEImage(const ImageIn
size_t
count;
+ size_t
+ one;
+
unsigned char
background_color[256],
*colormap,
@@ -209,7 +212,11 @@ static Image *ReadRLEImage(const ImageIn
number_planes=ReadBlobByte(image);
bits_per_pixel=ReadBlobByte(image);
number_colormaps=ReadBlobByte(image);
- map_length=1 << ReadBlobByte(image);
+ map_length=(unsigned char) ReadBlobByte(image);
+ if (map_length >= 32)
+ ThrowReaderException(CorruptImageError,ImproperImageHeader,image);
+ one=1;
+ map_length=one << map_length;
if ((number_planes == 0) || (number_planes == 2) || (bits_per_pixel != 8) ||
(image->columns == 0))
ThrowReaderException(CoderError,DataEncodingSchemeIsNotSupported,image);