https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8740

diff --git a/MagickCore/blob.c b/MagickCore/blob.c
index e4bb76c8a6d0475698e76e86b85796c22ae1ccff..bce361eac51658be277ba63570b230232201ca1f 100644 (file)
--- a/MagickCore/blob.c
+++ b/MagickCore/blob.c
@@ -53,6 +53,7 @@
 #include "MagickCore/delegate.h"
 #include "MagickCore/exception.h"
 #include "MagickCore/exception-private.h"
+#include "MagickCore/geometry.h"
 #include "MagickCore/image-private.h"
 #include "MagickCore/list.h"
 #include "MagickCore/locale_.h"
@@ -3142,7 +3143,8 @@ MagickExport MagickBooleanType OpenBlob(const ImageInfo *image_info,
       blob_info->exempt=MagickTrue;
       return(SetStreamBuffering(image_info,image));
     }
-  if (LocaleNCompare(filename,"fd:",3) == 0)
+  if ((LocaleNCompare(filename,"fd:",3) == 0) &&
+      (IsGeometry(filename+3) != MagickFalse))
     {
       char
         fileMode[MagickPathExtent];