https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7508

diff --git a/coders/heic.c b/coders/heic.c
index df48726ce5d28b1b1d6d9b45444246ad0b5bc9dc..19c0fbdb4d2eef424e0ec548256a069fe6fe9d1d 100644 (file)
--- a/coders/heic.c
+++ b/coders/heic.c
@@ -336,6 +336,8 @@ static MagickBooleanType ParseHvcCAtom(HEICItemProp *prop, ExceptionInfo *except
   p = prop->data;
 
   size = prop->size;
+  if (size >= MAX_HVCC_ATOM_SIZE)
+    ThrowAndReturn("hvcC atom is too long");
   memcpy(buffer, prop->data, size);
 
   pos = 22;