GraphicsMagick: coders/jnx.c JNX decoder is also vulnerable agai...

changeset cdfed27904cc in /hg/GraphicsMagick
details: http://hg.GraphicsMagick.org/hg/GraphicsMagick?cmd=changeset;node=cdfed27904cc
summary: coders/jnx.c JNX decoder is also vulnerable against image size injection.

diffstat:

 ChangeLog    |  6 ++++++
 coders/jnx.c |  2 ++
 2 files changed, 8 insertions(+), 0 deletions(-)

diffs (32 lines):

diff -r 7e7556380183 -r cdfed27904cc ChangeLog
--- a/ChangeLog	Tue Nov 07 07:56:34 2023 -0600
+++ b/ChangeLog	Wed Nov 08 00:03:54 2023 +0100
@@ -1,3 +1,7 @@
+2023-11-08  Fojtik Jaroslav  <[email protected]>
+
+	* coders/jnx.c JNX decoder is also vulnerable against size injection.
+
 2023-11-07  Bob Friesenhahn  <[email protected]>
 
 	* magick/colorspace.c (RGBTransformImage): Move cast in
@@ -5,6 +9,8 @@
 	expressed in SourceForge issue #730 "Recent colorspace conversion
 	change".
 
+2023-11-07  Fojtik Jaroslav  <[email protected]>
+
 	* coders/wpg.c Revert
 	* coders/mat.c Prevent against geometry injection.
 
diff -r 7e7556380183 -r cdfed27904cc coders/jnx.c
--- a/coders/jnx.c	Tue Nov 07 07:56:34 2023 -0600
+++ b/coders/jnx.c	Wed Nov 08 00:03:54 2023 +0100
@@ -263,6 +263,8 @@
   logging = LogMagickEvent(CoderEvent, GetMagickModule(), "enter");
 
   image = AllocateImage(image_info);
+  image->rows = 0;
+  image->columns = 0;
   status = OpenBlob(image_info, image, ReadBinaryBlobMode, exception);
   if (status == False)
     ThrowReaderException(FileOpenError, UnableToOpenFile, image);