https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7313

diff --git a/coders/heic.c b/coders/heic.c
index e4eb8af48763f0bbd290cc3a4f39247ba2cc5dc0..580efbf20667c898ca0b26cad95646948b9dbc1a 100644 (file)
--- a/coders/heic.c
+++ b/coders/heic.c
@@ -416,7 +416,7 @@ static MagickBooleanType ParseIpcoAtom(Image *image, DataBuffer *db,
     if (DBChop(&propDb, db, prop->size) != MagickTrue) {
       ThrowAndReturn("incorrect read size");
     }
-    memcpy(prop->data, propDb.data, prop->size);
+    memcpy(prop->data, propDb.data, prop->size+4);
 
     switch (prop->type) {
       case ATOM('h', 'v', 'c', 'C'):