90930a6
--- ImageMagick-6.2.8/coders/sgi.c.cve-2006-4144	2006-02-07 22:52:54.000000000 -0500
90930a6
+++ ImageMagick-6.2.8/coders/sgi.c	2006-08-23 02:05:52.000000000 -0400
90930a6
@@ -410,7 +410,11 @@
90930a6
         for (i=0; i < (long) (iris_info.rows*iris_info.depth); i++)
90930a6
           offsets[i]=(ssize_t) ReadBlobMSBLong(image);
90930a6
         for (i=0; i < (long) (iris_info.rows*iris_info.depth); i++)
90930a6
+        {
90930a6
           runlength[i]=ReadBlobMSBLong(image);
90930a6
+          if (runlength[i] >= (4*(size_t) iris_info.columns+10))
90930a6
+            ThrowReaderException(CorruptImageError,"ImproperImageHeader");
90930a6
+        }
90930a6
         /*
90930a6
           Check data order.
90930a6
         */