Commit ee4468a8a for imagemagick.org
commit ee4468a8ab0635fcaa9c561e583c56ada3b1b721
Author: Cristy <urban-warrior@imagemagick.org>
Date: Fri Mar 20 21:53:15 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8793-7xv6-82cf
diff --git a/MagickCore/image.c b/MagickCore/image.c
index d4d07c913..7bc5ed580 100644
--- a/MagickCore/image.c
+++ b/MagickCore/image.c
@@ -1739,7 +1739,8 @@ MagickExport size_t InterpretImageFilename(const ImageInfo *image_info,
format_specifier[MagickPathExtent];
size_t
- length = cursor-specifier_start;
+ length = cursor-specifier_start,
+ pattern_length;
ssize_t
count;
@@ -1748,10 +1749,13 @@ MagickExport size_t InterpretImageFilename(const ImageInfo *image_info,
"%%%.*s%c",(int) length,specifier_start,*cursor);
count=FormatLocaleString(pattern,sizeof(pattern),format_specifier,
value);
- if ((count <= 0) || ((p-filename+count) >= MagickPathExtent))
+ pattern_length=strlen(pattern);
+ if ((count <= 0) || ((size_t) count != pattern_length))
+ return(0);
+ if ((p-filename+pattern_length) >= MagickPathExtent)
return(0);
(void) CopyMagickString(p,pattern,MagickPathExtent-(p-filename));
- p+=strlen(pattern);
+ p+=pattern_length;
cursor++;
continue;
}