Commit 9fa43c81c for imagemagick.org
commit 9fa43c81c91109010e087c96d799226f72436418
Author: Cristy <urban-warrior@imagemagick.org>
Date: Mon Feb 23 12:03:01 2026 -0500
check for write overflow
diff --git a/MagickCore/blob.c b/MagickCore/blob.c
index a8a473137..c9561719f 100644
--- a/MagickCore/blob.c
+++ b/MagickCore/blob.c
@@ -1646,7 +1646,10 @@ static inline ssize_t WriteBlobStream(Image *image,const size_t length,
if (blob_info->type != BlobStream)
return(WriteBlob(image,length,(const unsigned char *) data));
if (blob_info->offset > (MagickOffsetType) (MAGICK_SSIZE_MAX-length))
- return(0);
+ {
+ errno=EOVERFLOW;
+ return(0);
+ }
extent=(MagickSizeType) (blob_info->offset+(MagickOffsetType) length);
if (extent >= blob_info->extent)
{