From: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Date: Sat, 27 Sep 2014 07:37:31 +0000 (+0100)
Subject: GraphicsMagick-1.3.20-CVE-2014-1947
X-Git-Tag: archive/raspbian/1.4+really1.3.36+hg16442-1+rpi1~1^2^2~1
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=7de7f5446fecc07342d9911f7ec98e2d13a591e8;p=graphicsmagick.git

GraphicsMagick-1.3.20-CVE-2014-1947


Gbp-Pq: Name GraphicsMagick-1.3.20-CVE-2014-1947.patch
---

diff --git a/coders/psd.c b/coders/psd.c
index bff5772..b9832d5 100644
--- a/coders/psd.c
+++ b/coders/psd.c
@@ -1719,8 +1719,7 @@ static unsigned int WritePSDImage(const ImageInfo *image_info,Image *image)
     i;
 
   unsigned char
-    *pixels,
-    layer_name[4];
+    *pixels;
 
   unsigned int
     packet_size,
@@ -1944,8 +1943,9 @@ static unsigned int WritePSDImage(const ImageInfo *image_info,Image *image)
             (void) WriteBlob(image, 3, &layer_name[1]);
           */ 
         } else {
-          (void) sprintf((char *) layer_name, "L%02d", layer_count++ );
-          WritePascalString( image, (char*)layer_name, 4 );
+          char layer_name[MaxTextExtent];
+          (void) sprintf(layer_name, "L%02d", layer_count++ );
+          WritePascalString( image, layer_name, 4 );
         }
         tmp_image = tmp_image->next;
       };