Changeset 7324

Timestamp:

04/03/12 08:58:43 (14 months ago)

Author:

cristy

Message:

 

File:

• ImageMagick/trunk/MagickCore/profile.c (modified) (1 diff)

ImageMagick/trunk/MagickCore/profile.c

@@ -6697 +6697 @@
       if ((format-1) >= EXIF_NUM_FORMATS)
         break;
-      components=(int) ReadProfileLong(endian,q+4);
+      components=(ssize_t) ((int) ReadProfileLong(endian,q+4));
       number_bytes=(size_t) components*format_bytes[format];
+      if (number_bytes < components)
+        break;  /* prevent overflow */
       if (number_bytes <= 4)
         p=q+8;