https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7428

diff --git a/MagickCore/token.c b/MagickCore/token.c
index cef1c00a84fdb7e1eb526fea448987af9ef943fd..abddc26b0f02ecd5e5d675ec77dc47fd529e72fd 100644 (file)
--- a/MagickCore/token.c
+++ b/MagickCore/token.c
@@ -409,7 +409,8 @@ MagickExport MagickBooleanType GlobExpression(const char *expression,
           status;
 
         status=MagickFalse;
-        pattern+=GetUTFOctets(pattern);
+        while (GetUTFCode(pattern) == '*')
+          pattern+=GetUTFOctets(pattern);
         while ((GetUTFCode(expression) != 0) && (status == MagickFalse))
         {
           status=GlobExpression(expression,pattern,case_insensitive);