From af026fdd3ce08c4865467fe3343dc8d7360af8da Mon Sep 17 00:00:00 2001
From: Andrew Murray <radarhere@users.noreply.github.com>
Date: Mon, 1 Jan 2024 16:06:09 +1100
Subject: [PATCH] Added decompression bomb check to ImageFont.getmask()

---
 src/PIL/ImageFont.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/PIL/ImageFont.py b/src/PIL/ImageFont.py
index 7f0366ddb..78c6b9eca 100644
--- a/src/PIL/ImageFont.py
+++ b/src/PIL/ImageFont.py
@@ -150,6 +150,7 @@ class ImageFont:
                  :py:mod:`PIL.Image.core` interface module.
         """
         _string_length_check(text)
+        Image._decompression_bomb_check(self.font.getsize(text))
         return self.font.getmask(text, mode)
 
     def getbbox(self, text, *args, **kwargs):