From 25980041f145afc621233a1c050291231b627c48 Mon Sep 17 00:00:00 2001 From: Cristy Date: Sat, 18 Apr 2026 11:47:24 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p --- MagickCore/display.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) Index: ImageMagick-7.1.0-9/MagickCore/display.c =================================================================== --- ImageMagick-7.1.0-9.orig/MagickCore/display.c +++ ImageMagick-7.1.0-9/MagickCore/display.c @@ -13169,7 +13169,8 @@ static Image *XTileImage(Display *displa if (id < 0) return((Image *) NULL); q=p; - while ((*q != '\xff') && (*q != '\0')) + while ((*q != '\xff') && (*q != '\0') && + ((size_t) (q-p) < sizeof(filename))) q++; (void) CopyMagickString(filename,p,(size_t) (q-p+1)); /* @@ -13260,7 +13261,8 @@ static Image *XTileImage(Display *displa *image_view; q=p; - while ((*q != '\xff') && (*q != '\0')) + while ((*q != '\xff') && (*q != '\0') && + ((size_t) (q-p) < sizeof(filename))) q++; (void) CopyMagickString(filename,p,(size_t) (q-p+1)); p=q;