Fixed memory leak.

Credit to OSS-Fuzz

diff --git a/coders/miff.c b/coders/miff.c
index ea499ee0ef1716ac2215e22cc0075080bbfc1ff2..dfbc2f591601f3067d52f4016bf487c874a241ff 100644 (file)
--- a/coders/miff.c
+++ b/coders/miff.c
@@ -549,7 +549,11 @@ static Image *ReadMIFFImage(const ImageInfo *image_info,
             *p=(char) c;
           }
           if (comment == (char *) NULL)
-            ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
+            {
+              options=DestroyString(options);
+              ThrowReaderException(ResourceLimitError,
+                "MemoryAllocationFailed");
+            }
           *p='\0';
           (void) SetImageProperty(image,"comment",comment,exception);
           comment=DestroyString(comment);
@@ -900,6 +904,7 @@ static Image *ReadMIFFImage(const ImageInfo *image_info,
                       StringToLong(options));
                     if (profile == (StringInfo *) NULL)
                       {
+                        options=DestroyString(options);
                         profiles=DestroyLinkedList(profiles,
                           RelinquishMagickMemory);
                         ThrowReaderException(ResourceLimitError,

diff --git a/coders/mpc.c b/coders/mpc.c
index 421bf545a81109a8e2977491c9c2e0e58fbba0a0..72f725acb6cec8888a32f71f66c1d8a6a7679462 100644 (file)
--- a/coders/mpc.c
+++ b/coders/mpc.c
@@ -265,7 +265,11 @@ static Image *ReadMPCImage(const ImageInfo *image_info,ExceptionInfo *exception)
             *p=(char) c;
           }
           if (comment == (char *) NULL)
-            ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
+            {
+              options=DestroyString(options);
+              ThrowReaderException(ResourceLimitError,
+                "MemoryAllocationFailed");
+            }
           *p='\0';
           (void) SetImageProperty(image,"comment",comment,exception);
           comment=DestroyString(comment);
@@ -632,6 +636,7 @@ static Image *ReadMPCImage(const ImageInfo *image_info,ExceptionInfo *exception)
                       StringToLong(options));
                     if (profile == (StringInfo *) NULL)
                       {
+                        options=DestroyString(options);
                         profiles=DestroyLinkedList(profiles,
                           RelinquishMagickMemory);
                         ThrowReaderException(ResourceLimitError,