...

diff --git a/coders/png.c b/coders/png.c
index dd7b3648a2af172739933922ff2a40ea1c123635..758e576721fbddcb1c634eaab4df738093f38a4c 100644 (file)
--- a/coders/png.c
+++ b/coders/png.c
@@ -5739,8 +5739,13 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
                     sizeof(*mng_info->global_plte));
 
                 if (mng_info->global_plte == (png_colorp) NULL)
-                  ThrowReaderException(ResourceLimitError,
-                    "MemoryAllocationFailed");
+                  {
+                    mng_info->global_plte_length=0;
+                    chunk=(unsigned char *) RelinquishMagickMemory(chunk);
+                    mng_info=MngInfoFreeStruct(mng_info);
+                    ThrowReaderException(ResourceLimitError,
+                      "MemoryAllocationFailed");
+                  }
 
                 for (i=0; i < (ssize_t) (length/3); i++)
                 {