https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6406

diff --git a/coders/mat.c b/coders/mat.c
index 24cd32d2f1622b8da60a7da05c01b4889dcb640c..ba96f8fc9307e087ed36177c6fd0210dc2d42239 100644 (file)
--- a/coders/mat.c
+++ b/coders/mat.c
@@ -877,7 +877,6 @@ static Image *ReadMATImage(const ImageInfo *image_info,ExceptionInfo *exception)
   int sample_size;
   MagickOffsetType filepos=0x80;
   BlobInfo *blob;
-  size_t one;
 
   unsigned int (*ReadBlobXXXLong)(Image *image);
   unsigned short (*ReadBlobXXXShort)(Image *image);
@@ -1162,8 +1161,7 @@ RestoreMSCWarning
     (void) sample_size;
     image->columns = MATLAB_HDR.SizeX;
     image->rows = MATLAB_HDR.SizeY;
-    one=1;
-    image->colors = one << image->depth;
+    image->colors = GetQuantumRange(image->depth);
     if (image->columns == 0 || image->rows == 0)
       goto MATLAB_KO;
     if((unsigned long)ldblk*MATLAB_HDR.SizeY > MATLAB_HDR.ObjectSize)