https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5891

diff --git a/MagickCore/fx.c b/MagickCore/fx.c
index c62f568009a289385c97a238db77d8fd95c69774..75cea78a46e687df0888db65b7203e1ff4eee869 100644 (file)
--- a/MagickCore/fx.c
+++ b/MagickCore/fx.c
@@ -2334,8 +2334,8 @@ static double FxEvaluateSubexpression(FxInfo *fx_info,
         }
         default:
         {
-          gamma=alpha*FxEvaluateSubexpression(fx_info,channel,x,y,p,depth,beta,
-            exception);
+          gamma=alpha*FxEvaluateSubexpression(fx_info,channel,x,y,++p,depth,
+            beta,exception);
           return(gamma);
         }
       }