--- updates/3/imagemagick/current/SOURCES/imagemagick-CVE-2014-8355.patch 2014/11/14 02:43:59 796946 +++ updates/3/imagemagick/current/SOURCES/imagemagick-CVE-2014-8355.patch 2014/11/14 03:11:38 796947 @@ -45,10 +45,10 @@ @@ -387,6 +389,9 @@ static Image *ReadPCXImage(const ImageIn pcx_packets=(size_t) image->rows*pcx_info.bytes_per_line* pcx_info.planes; - pcx_pixels=(unsigned char *) AcquireQuantumMemory(pcx_packets, + if ((size_t) (pcx_info.bits_per_pixel*pcx_info.planes*image->columns) > + (pcx_packets*8U)) + ThrowReaderException(CorruptImageError,"ImproperImageHeader"); + pcx_pixels=(unsigned char *) AcquireQuantumMemory(pcx_packets, sizeof(*pcx_pixels)); scanline=(unsigned char *) AcquireQuantumMemory(MagickMax(image->columns, pcx_info.bytes_per_line),MagickMax(8,pcx_info.planes)*sizeof(*scanline));