https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12204

diff --git a/coders/cube.c b/coders/cube.c
index 3e2a54e3e8877959b691f81dc6fd1344d98a7ca8..4f95d6fae97675b5c76360d98c075f60415f4dd4 100644 (file)
--- a/coders/cube.c
+++ b/coders/cube.c
@@ -204,13 +204,13 @@ static Image *ReadCUBEImage(const ImageInfo *image_info,
             char
               *q;
 
+            if (n >= (cube_level*cube_level*cube_level))
+              break;
             q=buffer;
             cube[n].r=StringToDouble(q,&q);
             cube[n].g=StringToDouble(q,&q);
             cube[n].b=StringToDouble(q,&q);
             n++;
-            if (n >= (cube_level*cube_level*cube_level))
-              break;
           }
         else
           if (('+' < *buffer) && (*buffer < ':'))