From: Cristy <urban-warrior@imagemagick.org>
Date: Sat, 10 Feb 2018 17:42:08 +0000 (-0500)
Subject: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6196
X-Git-Tag: 7.0.7-23~73
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=a9a16de60d33aa0db5a12babfbe3e0f8470b7098;p=imagemagick

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6196
---

diff --git a/MagickCore/string.c b/MagickCore/string.c
index cafe63c26..41ddad0b0 100644
--- a/MagickCore/string.c
+++ b/MagickCore/string.c
@@ -191,7 +191,8 @@ MagickExport StringInfo *AcquireStringInfo(const size_t length)
       string_info->length+MagickPathExtent,sizeof(*string_info->datum));
   if (string_info->datum == (unsigned char *) NULL)
     ThrowFatalException(ResourceLimitFatalError,"MemoryAllocationFailed");
-  (void) memset(string_info->datum,0,length+MagickPathExtent);
+  (void) memset(string_info->datum,0,(length+MagickPathExtent)*
+    sizeof(*string_info->datum));
   return(string_info);
 }
 
@@ -238,7 +239,8 @@ MagickExport StringInfo *BlobToStringInfo(const void *blob,const size_t length)
     }
   if (blob != (const void *) NULL)
     (void) memcpy(string_info->datum,blob,length);
-  (void) memset(string_info->datum+length,0,MagickPathExtent);
+  (void) memset(string_info->datum+length,0,MagickPathExtent*
+    sizeof(*string_info->datum));
   return(string_info);
 }