From 2b4a06cdb9b5b4b8e51247be8b38ea4cbfdfb07c Mon Sep 17 00:00:00 2001 From: Cristy Date: Sat, 18 Apr 2026 11:47:21 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p --- magick/display.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) Index: GraphicsMagick-1.3.45/magick/display.c =================================================================== --- GraphicsMagick-1.3.45.orig/magick/display.c +++ GraphicsMagick-1.3.45/magick/display.c @@ -12491,7 +12491,8 @@ static Image *MagickXTileImage(Display * if (id < 0) return((Image *) NULL); q=p; - while ((*q != '\n') && (*q != '\0')) + while ((*q != '\n') && (*q != '\0') && + ((size_t) (q-p) < sizeof(filename))) q++; (void) strncpy(filename,p,q-p); filename[q-p]='\0'; @@ -12581,7 +12582,8 @@ static Image *MagickXTileImage(Display * for (p=image->directory; *p != '\0'; p++) { q=p; - while ((*q != '\n') && (*q != '\0')) + while ((*q != '\n') && (*q != '\0') && + ((size_t) (q-p) < sizeof(filename))) q++; (void) strncpy(filename,p,q-p); filename[q-p]='\0';