Commit 1eefab41b for imagemagick.org
commit 1eefab41bc0ab1c6c2c1fd3e4a49e3ee1849751d
Author: Cristy <urban-warrior@imagemagick.org>
Date: Thu Jan 15 17:34:46 2026 -0500
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5vx3-wx4q-6cj8
diff --git a/PerlMagick/quantum/quantum.pm b/PerlMagick/quantum/quantum.pm
index 1dd5921fa..74cc8168f 100644
--- a/PerlMagick/quantum/quantum.pm
+++ b/PerlMagick/quantum/quantum.pm
@@ -6,7 +6,7 @@ package Image::Magick::Q16HDRI;
# You may not use this file except in compliance with the License. You may
# obtain a copy of the License at
#
-# https://imagemagick.org/script/license.php
+# https://imagemagick.org/license/
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
diff --git a/coders/msl.c b/coders/msl.c
index fa2976456..5b182b592 100644
--- a/coders/msl.c
+++ b/coders/msl.c
@@ -7088,6 +7088,12 @@ static void MSLEndElement(void *context,const xmlChar *tag)
{
if (LocaleCompare((const char *) tag,"comment") == 0 )
{
+ if (msl_info->image[n] == (Image *) NULL)
+ {
+ ThrowMSLException(OptionError,"NoImagesDefined",
+ (const char *) tag);
+ break;
+ }
(void) DeleteImageProperty(msl_info->image[n],"comment");
if (msl_info->content == (char *) NULL)
break;
@@ -7137,6 +7143,12 @@ static void MSLEndElement(void *context,const xmlChar *tag)
{
if (LocaleCompare((const char *) tag,"label") == 0 )
{
+ if (msl_info->image[n] == (Image *) NULL)
+ {
+ ThrowMSLException(OptionError,"NoImagesDefined",
+ (const char *) tag);
+ break;
+ }
(void) DeleteImageProperty(msl_info->image[n],"label");
if (msl_info->content == (char *) NULL)
break;