https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6495

diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index bea28ab0c29c0822fd8b51299e17f5dbc3453f42..f0301ad5f3cb9f14363a0a049abeb0e015762f03 100644 (file)
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -96,6 +96,7 @@
   (void) ThrowMagickException(exception,GetMagickModule(),DrawError, \
     "NonconformingDrawingPrimitiveDefinition","`%s'",token); \
   status=MagickFalse; \
+  break; \
 }
 \f
 /*
@@ -5876,6 +5877,8 @@ static size_t TracePath(PrimitiveInfo *primitive_info,const char *path,
             end.y=(double) (attribute == (int) 'T' ? y : point.y+y);
             points[i]=end;
           }
+          if (status == MagickFalse)
+            break;
           if (strchr("QqTt",last_attribute) == (char *) NULL)
             {
               points[0]=point;