https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8096

diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index 2a57f6c18d7eae49971598eaaa7df381185dbbac..703a615f7678be4cfa1d81f181a73da2766714c8 100644 (file)
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -2128,6 +2128,9 @@ MagickExport MagickBooleanType DrawImage(Image *image,const DrawInfo *draw_info,
             clip_path=GetNodeByURL(primitive,token);
             if (clip_path != (char *) NULL)
               {
+                if (graphic_context[n]->clipping_mask != (Image *) NULL)
+                  graphic_context[n]->clipping_mask=
+                    DestroyImage(graphic_context[n]->clipping_mask);
                 graphic_context[n]->clipping_mask=DrawClippingMask(image,
                   graphic_context[n],clip_path,exception);
                 clip_path=DestroyString(clip_path);