Commit 25980041f for imagemagick.org
commit 25980041f145afc621233a1c050291231b627c48
Author: Cristy <urban-warrior@imagemagick.org>
Date: Sat Apr 18 11:47:24 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p
diff --git a/MagickCore/display.c b/MagickCore/display.c
index bbd9eb320..bbeeced69 100644
--- a/MagickCore/display.c
+++ b/MagickCore/display.c
@@ -13192,7 +13192,8 @@ static Image *XTileImage(Display *display,XResourceInfo *resource_info,
if (id < 0)
return((Image *) NULL);
q=p;
- while ((*q != '\xff') && (*q != '\0'))
+ while ((*q != '\xff') && (*q != '\0') &&
+ ((size_t) (q-p) < sizeof(filename)))
q++;
(void) CopyMagickString(filename,p,(size_t) (q-p+1));
/*
@@ -13285,7 +13286,8 @@ static Image *XTileImage(Display *display,XResourceInfo *resource_info,
*image_view;
q=p;
- while ((*q != '\xff') && (*q != '\0'))
+ while ((*q != '\xff') && (*q != '\0') &&
+ ((size_t) (q-p) < sizeof(filename)))
q++;
(void) CopyMagickString(filename,p,(size_t) (q-p+1));
p=q;