GraphicsMagick-1.3.20-CVE-2014-1947

Gbp-Pq: Name GraphicsMagick-1.3.20-CVE-2014-1947.patch

diff --git a/coders/psd.c b/coders/psd.c
index bff57724f897465752c2b86f0670e804bf57f826..b9832d56274cb86dda8a0d3d756b72a73c89e067 100644 (file)
--- a/coders/psd.c
+++ b/coders/psd.c
@@ -1719,8 +1719,7 @@ static unsigned int WritePSDImage(const ImageInfo *image_info,Image *image)
     i;
 
   unsigned char
-    *pixels,
-    layer_name[4];
+    *pixels;
 
   unsigned int
     packet_size,
@@ -1944,8 +1943,9 @@ static unsigned int WritePSDImage(const ImageInfo *image_info,Image *image)
             (void) WriteBlob(image, 3, &layer_name[1]);
           */ 
         } else {
-          (void) sprintf((char *) layer_name, "L%02d", layer_count++ );
-          WritePascalString( image, (char*)layer_name, 4 );
+          char layer_name[MaxTextExtent];
+          (void) sprintf(layer_name, "L%02d", layer_count++ );
+          WritePascalString( image, layer_name, 4 );
         }
         tmp_image = tmp_image->next;
       };