File ImageMagick-CVE-2017-12140,12644.patch of Package ImageMagick.openSUSE_Leap_42.3_Update

Index: ImageMagick-6.8.8-1/coders/dcm.c
===================================================================
--- ImageMagick-6.8.8-1.orig/coders/dcm.c	2017-12-04 18:21:25.261128743 +0100
+++ ImageMagick-6.8.8-1/coders/dcm.c	2017-12-04 19:50:19.538978651 +0100
@@ -3071,6 +3071,8 @@ static Image *ReadDCMImage(const ImageIn
         else
           if ((quantum != 0) && (length != 0))
             {
+              if (length > GetBlobSize(image))
+                ThrowDCMReaderException(CorruptImageError, "InsufficientImageDataInFile");
               data=(unsigned char *) NULL;
               if (~length >= 1)
                 data=(unsigned char *) AcquireQuantumMemory(length+1,quantum*
openSUSE Build Service is sponsored by