https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=32726

diff --git a/MagickCore/token.c b/MagickCore/token.c
index a9199258c7d282345be64c87a2d3c1818d5f9e30..b3ea883a1120f02e67189faa074fe6202f63225a 100644 (file)
--- a/MagickCore/token.c
+++ b/MagickCore/token.c
@@ -301,7 +301,7 @@ MagickExport void GetNextToken(const char *start,const char **end,
     }
   }
   token[i]='\0';
-  if (LocaleNCompare(token,"url(",4) == 0)
+  if ((LocaleNCompare(token,"url(",4) == 0) && (strlen(token) > 4))
     {
       ssize_t
         offset;