...

diff --git a/coders/png.c b/coders/png.c
index 7e39e5a07327d20161fea72d7657eafe32390151..582254dbb7a927b369a1841ecaa24b3da8588cf7 100644 (file)
--- a/coders/png.c
+++ b/coders/png.c
@@ -3510,6 +3510,8 @@ static Image *ReadOnePNGImage(MngInfo *mng_info,
           if (SyncAuthenticPixels(image,exception) == MagickFalse)
             break;
         }
+        if (y < (long) image->rows)
+          break;
 
         if (num_passes != 1)
           {
@@ -3685,7 +3687,9 @@ static Image *ReadOnePNGImage(MngInfo *mng_info,
               break;
           }
       }
-
+      quantum_scanline=(Quantum *) RelinquishMagickMemory(quantum_scanline);
+      if (y < (long) image->rows)
+        break;
       if (num_passes != 1)
         {
           status=SetImageProgress(image,LoadImageTag,pass,num_passes);
@@ -3693,8 +3697,6 @@ static Image *ReadOnePNGImage(MngInfo *mng_info,
           if (status == MagickFalse)
             break;
         }
-
-      quantum_scanline=(Quantum *) RelinquishMagickMemory(quantum_scanline);
     }
 
     image->alpha_trait=found_transparent_pixel ? BlendPixelTrait :