From ee4468a8ab0635fcaa9c561e583c56ada3b1b721 Mon Sep 17 00:00:00 2001 From: Cristy Date: Fri, 20 Mar 2026 21:53:15 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8793-7xv6-82cf --- MagickCore/image.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) Index: ImageMagick-7.1.1-43/MagickCore/image.c =================================================================== --- ImageMagick-7.1.1-43.orig/MagickCore/image.c +++ ImageMagick-7.1.1-43/MagickCore/image.c @@ -1734,7 +1734,8 @@ MagickExport size_t InterpretImageFilena format_specifier[MagickPathExtent]; size_t - length = cursor-specifier_start; + length = cursor-specifier_start, + pattern_length; ssize_t count; @@ -1743,10 +1744,13 @@ MagickExport size_t InterpretImageFilena "%%%.*s%c",(int) length,specifier_start,*cursor); count=FormatLocaleString(pattern,sizeof(pattern),format_specifier, value); - if ((count <= 0) || ((p-filename+count) >= MagickPathExtent)) + pattern_length=strlen(pattern); + if ((count <= 0) || ((size_t) count != pattern_length)) + return(0); + if ((p-filename+pattern_length) >= MagickPathExtent) return(0); (void) CopyMagickString(p,pattern,MagickPathExtent-(p-filename)); - p+=strlen(pattern); + p+=pattern_length; cursor++; continue; }