From 14f104ac97598234792f73039cf42779de7221d2 Mon Sep 17 00:00:00 2001
From: Carsten Haitzler <raster@rasterman.com>
Date: Sat, 21 Oct 2000 21:47:10 +0000
Subject: [PATCH] pnm loader more paranoid about pnm format checks

SVN revision: 3687
---
 loaders/loader_pnm.c | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/loaders/loader_pnm.c b/loaders/loader_pnm.c
index 88d5c18..501e3a9 100644
--- a/loaders/loader_pnm.c
+++ b/loaders/loader_pnm.c
@@ -52,6 +52,11 @@ load(ImlibImage * im, ImlibProgressFunction progress,
    if (p == '1' || p == '4')
       numbers = 2;      /* bitimages don't have max value */
 
+   if ((p < '1') || (p > '8'))
+     {
+	fclose(f);
+	return 0;	
+     }
    count = 0;
    while (count < numbers)
    {
@@ -106,6 +111,13 @@ load(ImlibImage * im, ImlibProgressFunction progress,
          }
       }
    }
+   if ((w <= 0) || (w > 8192) || 
+       (h <= 0) || (h > 8192) || 
+       (v < 0) || (v > 255))
+     {
+	fclose(f);
+	return 0;
+     }
 
    im->w = w;
    im->h = h;