prevent possible ssize overflow

ImageMagick · Jan 15, 2025 · 8cbd11e · 8cbd11e
1 parent bf1e656
commit 8cbd11e
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/magick/transform.c b/magick/transform.c
@@ -686,24 +686,28 @@ MagickExport Image *CropImage(const Image *image,const RectangleInfo *geometry,
     }
   if ((page.x < 0) && (bounding_box.x >= 0))
     {
-      page.width+=page.x-bounding_box.x;
+      page.width=CastDoubleToUnsigned((double) page.width+page.x-
+        bounding_box.x);
       page.x=0;
     }
   else
     {
-      page.width-=bounding_box.x-page.x;
+      page.width=CastDoubleToUnsigned((double) page.width-(bounding_box.x-
+        page.x));
       page.x-=bounding_box.x;
       if (page.x < 0)
         page.x=0;
     }
   if ((page.y < 0) && (bounding_box.y >= 0))
     {
-      page.height+=page.y-bounding_box.y;
+      page.height=CastDoubleToUnsigned((double) page.height+page.y-
+        bounding_box.y);
       page.y=0;
     }
   else
     {
-      page.height-=bounding_box.y-page.y;
+      page.height=CastDoubleToUnsigned((double) page.height-(bounding_box.y-
+        page.y));
       page.y-=bounding_box.y;
       if (page.y < 0)
         page.y=0;