From 39e653ead8fb85137f5d5d060ad658150c698486 Mon Sep 17 00:00:00 2001
From: Chong Yidong <cyd@stupidchicken.com>
Date: Sun, 18 Mar 2007 23:09:57 +0000
Subject: [PATCH] (pbm_load): Signal error for invalid image size.

---
 src/image.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/image.c b/src/image.c
index c58e0d4695..b8317b1e98 100644
--- a/src/image.c
+++ b/src/image.c
@@ -5742,6 +5742,14 @@ pbm_load (f, img)
     }
   else
     {
+      if (raw_p && (p + 3 * height * width > end))
+	{
+	  x_destroy_x_image (ximg);
+	  image_error ("Invalid image size in image `%s'",
+		       img->spec, Qnil);
+	  goto error;
+	}
+
       for (y = 0; y < height; ++y)
 	for (x = 0; x < width; ++x)
 	  {
-- 
2.20.1