Petr Gajdos
7045d324ee
* CVE-2018-9135 [bsc#1087825]
+ ImageMagick-CVE-2018-9135.patch
OBS-URL: https://build.opensuse.org/package/show/graphics/ImageMagick?expand=0&rev=356
13 lines
371 B
Diff
13 lines
371 B
Diff
--- a/coders/webp.c
|
|
+++ b/coders/webp.c
|
|
@@ -181,6 +181,8 @@ static MagickBooleanType IsWEBPImageLossless(const unsigned char *stream,
|
|
/*
|
|
Read simple header.
|
|
*/
|
|
+ if (length <= VP8_CHUNK_INDEX)
|
|
+ return(MagickFalse);
|
|
if (stream[VP8_CHUNK_INDEX] != EXTENDED_HEADER)
|
|
return(stream[VP8_CHUNK_INDEX] == LOSSLESS_FLAG ? MagickTrue : MagickFalse);
|
|
/*
|
|
|