Commit d3af057fb for imagemagick.org
commit d3af057fb9d3666762ca3731c2360f544f607f88
Author: Cristy <urban-warrior@imagemagick.org>
Date: Sat Mar 21 12:09:33 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mw3m-pqr2-qv7c
diff --git a/MagickCore/display.c b/MagickCore/display.c
index 17fef77d5..bbd9eb320 100644
--- a/MagickCore/display.c
+++ b/MagickCore/display.c
@@ -6704,14 +6704,21 @@ static DisplayCommand XImageWindowCommand(Display *display,
if ((key_symbol >= XK_0) && (key_symbol <= XK_9))
{
+ size_t
+ length;
+
if (((last_symbol < XK_0) || (last_symbol > XK_9)))
{
*delta='\0';
resource_info->quantum=1;
}
last_symbol=key_symbol;
- delta[strlen(delta)+1]='\0';
- delta[strlen(delta)]=Digits[key_symbol-XK_0];
+ length=strlen(delta);
+ if (length < MagickPathExtent)
+ {
+ delta[length]=Digits[key_symbol-XK_0];
+ delta[length+1]='\0';
+ }
resource_info->quantum=StringToLong(delta);
return(NullCommand);
}