File ImageMagick-CVE-2017-9409.patch of Package ImageMagick.openSUSE_Leap_42.3_Update

diff --git a/coders/mpc.c b/coders/mpc.c
index 2b8e6ab92f..8088da4925 100644
--- a/coders/mpc.c
+++ b/coders/mpc.c
@@ -872,12 +872,16 @@ static Image *ReadMPCImage(const ImageInfo *image_info,ExceptionInfo *exception)
               ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
             count=ReadBlob(image,packet_size*image->colors,colormap);
             if (count != (ssize_t) (packet_size*image->colors))
-              ThrowReaderException(CorruptImageError,
-                "InsufficientImageDataInFile");
+              {
+                colormap=(unsigned char *) RelinquishMagickMemory(colormap);
+                ThrowReaderException(CorruptImageError,
+                  "InsufficientImageDataInFile");
+              }
             p=colormap;
             switch (depth)
             {
               default:
+                colormap=(unsigned char *) RelinquishMagickMemory(colormap);
                 ThrowReaderException(CorruptImageError,
                   "ImageDepthNotSupported");
               case 8:

openSUSE Build Service is sponsored by