...

diff --git a/coders/png.c b/coders/png.c
index 647fbfa8a002d6b3989eef7e1257b66cf4609da5..7cf534a76b7686e1ec0da2139ffa35ec337a9187 100644 (file)
--- a/coders/png.c
+++ b/coders/png.c
@@ -5609,7 +5609,7 @@ static Image *ReadOneMNGImage(MngInfo* mng_info, const ImageInfo *image_info,
             if (length != 0)
               repeat=p[0];
 
-            if (repeat == 3 && length > 8)
+            if (repeat == 3 && length > 9)
               {
                 final_delay=(png_uint_32) mng_get_long(&p[2]);
                 mng_iterations=(png_uint_32) mng_get_long(&p[6]);