...

diff --git a/coders/pict.c b/coders/pict.c
index fd79a6e36483d7332209ae2024139bf0b292a242..31273b61873761a8abc9b2a56bcad5c377626f99 100644 (file)
--- a/coders/pict.c
+++ b/coders/pict.c
@@ -1341,7 +1341,7 @@ static Image *ReadPICTImage(const ImageInfo *image_info,
             if (length == 0)
               break;
             (void) ReadBlobMSBLong(image);
-            length-=4;
+            length-=MagickMin(length,4);
             if (length == 0)
               break;
             info=(unsigned char *) AcquireQuantumMemory(length,sizeof(*info));
@@ -1351,7 +1351,8 @@ static Image *ReadPICTImage(const ImageInfo *image_info,
             if (count != (ssize_t) length)
               {
                 info=(unsigned char *) RelinquishMagickMemory(info);
-                ThrowReaderException(ResourceLimitError,"UnableToReadImageData");
+                ThrowReaderException(ResourceLimitError,
+                  "UnableToReadImageData");
               }
             switch (type)
             {