https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5761

diff --git a/coders/palm.c b/coders/palm.c
index 50861e70f5d30bdd11f1061146d03f6a6cd54cff..c98c81e072d240dcf595be112a03d84f6bc3b408 100644 (file)
--- a/coders/palm.c
+++ b/coders/palm.c
@@ -256,9 +256,10 @@ static Image *ReadPALMImage(const ImageInfo *image_info,
     *q;
 
   size_t
+    bits_per_pixel,
     bytes_per_row,
     flags,
-    bits_per_pixel,
+    extent,
     version,
     nextDepthOffset,
     transparentIndex,
@@ -405,10 +406,11 @@ static Image *ReadPALMImage(const ImageInfo *image_info,
     status=SetImageExtent(image,image->columns,image->rows,exception);
     if (status == MagickFalse)
       return(DestroyImageList(image));
-    one_row=(unsigned char *) AcquireQuantumMemory(MagickMax(bytes_per_row,
-      2*image->columns),sizeof(*one_row));
+    extent=MagickMax(bytes_per_row,2*image->columns);
+    one_row=(unsigned char *) AcquireQuantumMemory(extent,sizeof(*one_row));
     if (one_row == (unsigned char *) NULL)
       ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
+    (void) ResetMagickMemory(one_row,0,extent*sizeof(*one_row));
     last_row=(unsigned char *) NULL;
     if (compressionType == PALM_COMPRESSION_SCANLINE)
       {