Commit f290440cd for imagemagick.org

commit f290440cd388eb455a4be64bd3e1749986c8d877
Author: Naveed Khan <164054284+rootvector2@users.noreply.github.com>
Date:   Tue Nov 3 21:13:32 2026 +0530

    terminate the xcf magic buffer before reading the version (#9088)

diff --git a/coders/xcf.c b/coders/xcf.c
index e4955619c..8e51dc729 100644
--- a/coders/xcf.c
+++ b/coders/xcf.c
@@ -1115,7 +1115,7 @@ static MagickBooleanType ReadOneLayer(const ImageInfo *image_info,Image* image,
 static Image *ReadXCFImage(const ImageInfo *image_info,ExceptionInfo *exception)
 {
   char
-    magick[14];
+    magick[14+1];

   Image
     *image;
@@ -1158,10 +1158,11 @@ static Image *ReadXCFImage(const ImageInfo *image_info,ExceptionInfo *exception)
       image=DestroyImageList(image);
       return((Image *) NULL);
     }
-  count=ReadBlob(image,sizeof(magick),(unsigned char *) magick);
-  if ((count != sizeof(magick)) ||
+  count=ReadBlob(image,14,(unsigned char *) magick);
+  if ((count != 14) ||
       (LocaleNCompare((char *) magick,"gimp xcf",8) != 0))
     ThrowReaderException(CorruptImageError,"ImproperImageHeader");
+  magick[14]='\0';
   (void) memset(&doc_info,0,sizeof(XCFDocInfo));
   doc_info.version=StringToUnsignedLong(magick+10);
   doc_info.width=ReadBlobMSBLong(image);