From 2fdef015ff68b55635af55bd6dff7b9468203688 Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Thu, 4 Dec 2014 13:53:04 +0100
Subject: [PATCH] loader_tga.c: Properly signal if decoding uncompressed BGRA
 data failed

Required to reject id:000134,src:000105,op:havoc,rep:32.
---
 src/modules/loaders/loader_tga.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/src/modules/loaders/loader_tga.c b/src/modules/loaders/loader_tga.c
index e040ac0..23d6f15 100644
--- a/src/modules/loaders/loader_tga.c
+++ b/src/modules/loaders/loader_tga.c
@@ -356,8 +356,14 @@ load(ImlibImage * im, ImlibProgressFunction progress,
                   else
                      dataptr = im->data + (y * im->w);
 
-                  for (x = 0; (x < im->w) && (bufptr + bpp / 8 <= bufend); x++) /* for each pixel in the row */
+                  for (x = 0; (x < im->w); x++) /* for each pixel in the row */
                     {
+                       if (bufptr + bpp / 8 > bufend)
+                         {
+                           munmap(seg, ss.st_size);
+                           close(fd);
+                           return 0;
+                         }
                        switch (bpp)
                          {