Commit af16fa8e6 for imagemagick.org
commit af16fa8e6561b8d44041232d207a084cb68dc219
Author: Dirk Lemstra <dirk@lemstra.org>
Date: Sun Jun 14 12:08:38 2026 +0200
Improve the check for GHSA-9xw9-2xcf-6jjg
diff --git a/coders/vicar.c b/coders/vicar.c
index d8f11e51c..69dec6dc3 100644
--- a/coders/vicar.c
+++ b/coders/vicar.c
@@ -378,7 +378,8 @@ static Image *ReadVICARImage(const ImageInfo *image_info,
(void) CloseBlob(image);
return(GetFirstImageInList(image));
}
- number_pixels=(MagickSizeType) image->columns*image->rows;
+ if (HeapOverflowSanityCheckGetSize(image->columns,image->rows,&number_pixels) != MagickFalse)
+ ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
if (number_pixels > GetBlobSize(image))
ThrowReaderException(CorruptImageError,"InsufficientImageDataInFile");
status=SetImageExtent(image,image->columns,image->rows,exception);