Skip to content

Commit f48a0e2

Browse files
committed
Added patches for GHSA-82mp-vp5c-9pf7.
1 parent 59b89b1 commit f48a0e2

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

wand/convert.c

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,7 @@
4646
#include "wand/MagickWand.h"
4747
#include "wand/mogrify-private.h"
4848
#include "magick/exception-private.h"
49+
#include <magick/policy-private.h>
4950
#include "magick/string-private.h"
5051
#include "magick/utility-private.h"
5152

@@ -102,6 +103,8 @@ static MagickBooleanType ConcatenateImages(int argc,char **argv,
102103
/*
103104
Open output file.
104105
*/
106+
if (IsPathAuthorized(WritePolicyRights,argv[argc-1]) == MagickFalse)
107+
ThrowPolicyException(argv[argc-1],MagickFalse);
105108
output=fopen_utf8(argv[argc-1],"wb");
106109
if (output == (FILE *) NULL)
107110
{
@@ -112,6 +115,8 @@ static MagickBooleanType ConcatenateImages(int argc,char **argv,
112115
status=MagickTrue;
113116
for (i=2; i < ((ssize_t) argc-1); i++)
114117
{
118+
if (IsPathAuthorized(ReadPolicyRights,argv[i]) == MagickFalse)
119+
ThrowPolicyException(argv[i],MagickFalse);
115120
input=fopen_utf8(argv[i],"rb");
116121
if (input == (FILE *) NULL)
117122
{

0 commit comments

Comments
 (0)