https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6584

diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index a1a9a0ec405b7618fa63c39a0bf5826676619a43..5b8513521168a118e3f81f3105af5895f21e77de 100644 (file)
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -1781,7 +1781,7 @@ MagickExport MagickBooleanType DrawImage(Image *image,const DrawInfo *draw_info,
       ThrowBinaryException(ResourceLimitError,"MemoryAllocationFailed",
         image->filename);
     }
-  number_points=8192+6*BezierQuantum+360;
+  number_points=16384;
   primitive_info=(PrimitiveInfo *) AcquireQuantumMemory((size_t) number_points,
     sizeof(*primitive_info));
   if (primitive_info == (PrimitiveInfo *) NULL)