Commit ae72b12e1 for imagemagick.org

commit ae72b12e114440f10bd1c70c29ae707296bcc109
Author: Cristy <urban-warrior@imagemagick.org>
Date:   Mon Oct 19 18:40:15 2026 -0400

    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2pc3-3339-3qc9

diff --git a/coders/magick.c b/coders/magick.c
index 7f6bc5102..55f5c73f9 100644
--- a/coders/magick.c
+++ b/coders/magick.c
@@ -13214,7 +13214,9 @@ static MagickBooleanType WriteMAGICKImage(const ImageInfo *image_info,
   Image *image,ExceptionInfo *exception)
 {
   char
-    buffer[MagickPathExtent];
+    buffer[MagickPathExtent],
+    *p,
+    *sanitized_filename;

   const char
     *value;
@@ -13231,9 +13233,6 @@ static MagickBooleanType WriteMAGICKImage(const ImageInfo *image_info,
   size_t
     length;

-  char
-    *p;
-
   ssize_t
     i;

@@ -13289,8 +13288,11 @@ static MagickBooleanType WriteMAGICKImage(const ImageInfo *image_info,
       return(status);
     }
   (void) WriteBlobString(image,"/*\n");
+  sanitized_filename=AcquireString(image->filename);
+  (void) SubstituteString(&sanitized_filename,"*/","??");
   (void) FormatLocaleString(buffer,MagickPathExtent,"  %s (%s).\n",
-    image->filename,write_info->magick);
+    sanitized_filename,write_info->magick);
+  sanitized_filename=DestroyString(sanitized_filename);
   (void) DestroyImageInfo(write_info);
   (void) WriteBlobString(image,buffer);
   (void) WriteBlobString(image,"*/\n");