https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7057

diff --git a/coders/rle.c b/coders/rle.c
index 03258073b425e664aeab922c898357d0fbcccee6..5da2136e61f9f117de1bef39e9b36fb8ae73a2d2 100644 (file)
--- a/coders/rle.c
+++ b/coders/rle.c
@@ -287,6 +287,8 @@ static Image *ReadRLEImage(const ImageInfo *image_info,ExceptionInfo *exception)
           3*map_length*sizeof(*colormap));
         if (colormap == (unsigned char *) NULL)
           ThrowRLEException(ResourceLimitError,"MemoryAllocationFailed");
+        (void) memset(colormap,0,number_colormaps*3*map_length*
+          sizeof(*colormap));
         p=colormap;
         for (i=0; i < (ssize_t) number_colormaps; i++)
           for (x=0; x < (ssize_t) map_length; x++)