From 3ed2120f70ee9ff0c6cac2375e5821c52c381b4c Mon Sep 17 00:00:00 2001 From: Cristy Date: Fri, 20 Mar 2026 21:53:12 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8793-7xv6-82cf --- magick/image.c | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) Index: ImageMagick-6.8.8-1/magick/image.c =================================================================== --- ImageMagick-6.8.8-1.orig/magick/image.c +++ ImageMagick-6.8.8-1/magick/image.c @@ -1591,7 +1591,8 @@ MagickExport size_t InterpretImageFilena format_specifier[MaxTextExtent]; size_t - length = cursor-specifier_start; + length = cursor-specifier_start, + pattern_length; ssize_t count; @@ -1600,10 +1601,13 @@ MagickExport size_t InterpretImageFilena "%%%.*s%c",(int) length,specifier_start,*cursor); count=FormatLocaleString(pattern,sizeof(pattern),format_specifier, value); - if ((count <= 0) || ((p-filename+count) >= MaxTextExtent)) + pattern_length=strlen(pattern); + if ((count <= 0) || ((size_t) count != pattern_length)) + return(0); + if ((p-filename+pattern_length) >= MaxTextExtent) return(0); (void) CopyMagickString(p,pattern,MaxTextExtent-(p-filename)); - p+=strlen(pattern); + p+=pattern_length; cursor++; continue; }