Commit c69f54e1c for imagemagick.org
commit c69f54e1c8660e45f2ff83c354bf924a946d9356
Author: Cristy <urban-warrior@imagemagick.org>
Date: Thu Aug 27 18:21:58 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92
diff --git a/MagickCore/cache.c b/MagickCore/cache.c
index e1bad764d..77bd4cc73 100644
--- a/MagickCore/cache.c
+++ b/MagickCore/cache.c
@@ -3835,8 +3835,17 @@ static MagickBooleanType OpenPixelCache(Image *image,const MapMode mode,
cache_info->mode=mode;
number_pixels=(MagickSizeType) cache_info->columns*cache_info->rows;
packet_size=MagickMax(cache_info->number_channels,1)*sizeof(Quantum);
- if (image->metacontent_extent != 0)
- packet_size+=cache_info->metacontent_extent;
+ if (cache_info->metacontent_extent != 0)
+ {
+ if (HeapOverflowCheckAdd(packet_size,cache_info->metacontent_extent) != MagickFalse)
+ {
+ cache_info->storage_class=UndefinedClass;
+ cache_info->length=0;
+ ThrowBinaryException(ResourceLimitError,"PixelCacheAllocationFailed",
+ image->filename);
+ }
+ packet_size+=cache_info->metacontent_extent;
+ }
if (CacheOverflowSanityCheckGetSize(number_pixels,packet_size,&length) != MagickFalse)
{
cache_info->storage_class=UndefinedClass;