tag 413032 + patch
thanks

Similar problem and fix as with BMP (cf. #413031). No grave security
implications, either.

Daniel.

--- a/coders/icon.c     Sat Mar 03 01:43:46 2007 +0100
+++ b/coders/icon.c     Sun Mar 04 19:13:28 2007 +0100
@@ -196,7 +196,8 @@ static Image *ReadIconImage(const ImageI
     /*
       Verify Icon identifier.
     */
-    (void) SeekBlob(image,icon_file.directory[i].offset,SEEK_SET);
+    if (SeekBlob(image,icon_file.directory[i].offset,SEEK_SET) == -1)
+      ThrowReaderException(CorruptImageError,ImproperImageHeader,image);
     icon_info.size=ReadBlobLSBLong(image);
     icon_info.width=ReadBlobLSBLong(image);
     icon_info.height=ReadBlobLSBLong(image);

Reply via email to