https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6014

diff --git a/MagickCore/xml-tree.c b/MagickCore/xml-tree.c
index 7718c29101978b203b3ce6f6ed46edfb04fdb670..245af83ac714b8a9daf9688cfb13750ffe9dcf3a 100644 (file)
--- a/MagickCore/xml-tree.c
+++ b/MagickCore/xml-tree.c
@@ -1534,6 +1534,8 @@ static char *ParseEntities(char *xml,char **entities,int state)
           (void) CopyMagickMemory(xml,xml+i,strlen(xml+i)+1);
         while ((*xml != '\0') && (*xml != ' '))
           xml++;
+        if (*xml == '\0')
+          break;
       }
       xml--;
       if ((xml >= p) && (*xml == ' '))