...

diff --git a/coders/png.c b/coders/png.c
index d366be3f0b35afa0b4625b3f850d3760150f1766..78d436caa3bd464e71eb574b314fef0709d1af1f 100644 (file)
--- a/coders/png.c
+++ b/coders/png.c
@@ -6185,6 +6185,10 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
 
                 else
                   {
+                    if (loop_iters > GetMagickResourceLimit(ListLengthResource))
+                      loop_iters=GetMagickResourceLimit(ListLengthResource);
+                    if (loop_iters >= 2147483647L)
+                      loop_iters=2147483647L;
                     mng_info->loop_jump[loop_level]=TellBlob(image);
                     mng_info->loop_count[loop_level]=loop_iters;
                   }