Commit 8def4934c for imagemagick.org
commit 8def4934c79cc425eb71732286011dccbda9a128
Author: Cristy <urban-warrior@imagemagick.org>
Date: Sat May 9 18:53:31 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j3pv-77gf-fw2g
diff --git a/coders/xpm.c b/coders/xpm.c
index 208cbd8e2..cb7d2ae1c 100644
--- a/coders/xpm.c
+++ b/coders/xpm.c
@@ -888,10 +888,14 @@ static MagickBooleanType WritePICONImage(const ImageInfo *image_info,
for (x=0; x < (ssize_t) picon->columns; x++)
{
k=((ssize_t) GetPixelIndex(picon,p) % MaxCixels);
+ if (k < 0)
+ k=0;
symbol[0]=Cixel[k];
for (j=1; j < (ssize_t) characters_per_pixel; j++)
{
k=(((int) GetPixelIndex(picon,p)-k)/MaxCixels) % MaxCixels;
+ if (k < 0)
+ k=0;
symbol[j]=Cixel[k];
}
symbol[j]='\0';