Commit 45d9ea7b2 for imagemagick.org
commit 45d9ea7b2c886b09433ed1b4e68e90e744a552a1
Author: Cristy <urban-warrior@imagemagick.org>
Date: Thu May 21 06:40:23 2026 -0400
restore
diff --git a/MagickCore/blob.c b/MagickCore/blob.c
index f6a6d7933..d52601c3e 100644
--- a/MagickCore/blob.c
+++ b/MagickCore/blob.c
@@ -3673,6 +3673,13 @@ MagickExport MagickBooleanType OpenBlob(const ImageInfo *image_info,
(void) SetStreamBuffering(image_info,blob_info);
}
}
+ if (IsPathAuthorized(rights,filename) == MagickFalse)
+ {
+ errno=EPERM;
+ (void) ThrowMagickException(exception,GetMagickModule(),
+ PolicyError,"NotAuthorized","`%s'",filename);
+ return(MagickFalse);
+ }
blob_info->status=0;
blob_info->error_number=0;
if (blob_info->type != UndefinedStream)