--- trunk/SDL_image/IMG_gif.c 2007/12/28 08:17:23 3461 +++ trunk/SDL_image/IMG_gif.c 2007/12/28 16:43:56 3462 @@ -418,6 +418,10 @@ static int stack[(1 << (MAX_LWZ_BITS)) * 2], *sp; register int i; + /* Fixed buffer overflow found by Michael Skladnikiewicz */ + if (input_code_size > MAX_LWZ_BITS) + return -1; + if (flag) { set_code_size = input_code_size; code_size = set_code_size + 1;