https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7504

diff --git a/coders/png.c b/coders/png.c
index f9be58a469e4d6e7270747a7d1f01376b43c909e..d4bab3a2645b85b4f24d1aab46b10b54cf875dfb 100644 (file)
--- a/coders/png.c
+++ b/coders/png.c
@@ -4534,6 +4534,8 @@ static Image *ReadOneJNGImage(MngInfo *mng_info,
             break;
           chunk[i]=(unsigned char) c;
         }
+        for ( ; i < (ssize_t) length; i++)
+          chunk[i]='\0';
 
         p=chunk;
       }