Commit f5049954f for imagemagick.org
commit f5049954f12c6fcf090a776767526d2a4708d58b
Author: Dirk Lemstra <dirk@lemstra.org>
Date: Fri Feb 20 15:55:29 2026 +0100
Corrected possible use after free when allocation fails (GHSA-2gq3-ww97-wfjm)
diff --git a/coders/meta.c b/coders/meta.c
index d8a84d20b..13d841d6c 100644
--- a/coders/meta.c
+++ b/coders/meta.c
@@ -273,11 +273,9 @@ static char *super_fgets(char **b, size_t *blen, Image *file)
tlen=(size_t) (q-p);
len<<=1;
buffer=(unsigned char *) ResizeQuantumMemory(p,len+2UL,sizeof(*p));
+ p=(unsigned char *) NULL;
if (buffer == (unsigned char *) NULL)
- {
- p=(unsigned char *) RelinquishMagickMemory(p);
- break;
- }
+ break;
p=buffer;
q=p+tlen;
}
@@ -600,6 +598,7 @@ static char *super_fgets_w(char **b, size_t *blen, Image *file)
tlen=(size_t) (q-p);
len<<=1;
buffer=(unsigned char *) ResizeQuantumMemory(p,len+2,sizeof(*p));
+ p=(unsigned char *) NULL;
if (buffer == (unsigned char *) NULL)
break;
p=buffer;