https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6681

diff --git a/coders/mpc.c b/coders/mpc.c
index ee95e6f84c30eab147729b840827410aed9f1ca4..97d33c6d1c87e464c03bf2121dc8e1c51ab94471 100644 (file)
--- a/coders/mpc.c
+++ b/coders/mpc.c
@@ -784,7 +784,7 @@ static Image *ReadMPCImage(const ImageInfo *image_info,ExceptionInfo *exception)
         (image->compression == UndefinedCompression) ||
         (image->columns == 0) || (image->rows == 0) ||
         (image->number_channels > MaxPixelChannels) ||
-        (image->number_meta_channels > MaxPixelChannels) ||
+        (image->number_meta_channels > (MaxPixelChannels-8)) ||
         ((image->number_channels+image->number_meta_channels) >= MaxPixelChannels))
       {
         if (profiles != (LinkedListInfo *) NULL)