File GraphicsMagick-CVE-2016-7529.patch of Package GraphicsMagick.7893
From a2e1064f288a353bc5fef7f79ccb7683759e775c Mon Sep 17 00:00:00 2001
From: Cristy <urban-warrior@imagemagick.org>
Date: Sat, 30 Jan 2016 09:51:24 -0500
Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/issues/104
---
coders/xcf.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
Index: GraphicsMagick-1.3.25/coders/xcf.c
===================================================================
--- GraphicsMagick-1.3.25.orig/coders/xcf.c 2016-05-30 19:19:54.000000000 +0200
+++ GraphicsMagick-1.3.25/coders/xcf.c 2016-11-29 15:01:13.928094890 +0100
@@ -352,7 +352,7 @@ static MagickPassFail load_tile (Image*
}
}
- xcfdata = xcfodata = MagickAllocateMemory(XCFPixelPacket *,data_length);
+ xcfdata = xcfodata = MagickAllocateMemory(XCFPixelPacket *,Max(data_length,tile_image->columns*tile_image->rows));
graydata = (unsigned char *) xcfdata; /* used by gray and indexed */
if (xcfdata == (XCFPixelPacket *) NULL)