Commit 326451aae for imagemagick.org
commit 326451aae51ac2dabc99fe66e063de6ec14cf8c8
Author: Dirk Lemstra <dirk@lemstra.org>
Date: Fri Aug 21 11:20:57 2026 +0200
Fixed double free in non cairo builds (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x)
diff --git a/coders/svg.c b/coders/svg.c
index 2cbd91ecd..879fcc694 100644
--- a/coders/svg.c
+++ b/coders/svg.c
@@ -524,7 +524,7 @@ static Image *RenderRSVGImage(const ImageInfo *image_info,Image *image,
pixel_info=(MemoryInfo *) NULL;
#else
pixel_buffer=rsvg_handle_get_pixbuf(svg_handle);
- rsvg_handle_free(svg_handle);
+ g_object_unref(svg_handle);
image->columns=gdk_pixbuf_get_width(pixel_buffer);
image->rows=gdk_pixbuf_get_height(pixel_buffer);
#endif
@@ -546,8 +546,9 @@ static Image *RenderRSVGImage(const ImageInfo *image_info,Image *image,
{
#if !defined(MAGICKCORE_CAIRO_DELEGATE)
g_object_unref(G_OBJECT(pixel_buffer));
-#endif
+#else
g_object_unref(svg_handle);
+#endif
ThrowReaderException(MissingDelegateError,
"NoDecodeDelegateForThisImageFormat");
}