https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7086

diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index 34cbdf6e5c5a585a9a915d6e1a711ecc729cf115..2e1d11e0f40a201ceda8cb9fdf622eb796816b3a 100644 (file)
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -1441,7 +1441,8 @@ MagickExport MagickBooleanType DrawClipPath(Image *image,
   (void) CloneString(&clone_info->primitive,value);
   (void) QueryColorCompliance("#ffffff",AllCompliance,&clone_info->fill,
     exception);
-  clone_info->clip_mask=(char *) NULL;
+  if (clone_info->clip_mask != (char *) NULL)
+    clone_info->clip_mask=DestroyString(clone_info->clip_mask);
   status=DrawImage(clip_mask,clone_info,exception);
   (void) SetImageMask(image,WritePixelMask,clip_mask,exception);
   clip_mask=DestroyImage(clip_mask);