From 5bc30bca36d7deb3bb1b239d163e92a1c3a98b0a Mon Sep 17 00:00:00 2001 From: Dirk Lemstra Date: Sat, 3 Feb 2018 10:59:52 +0100 Subject: [PATCH] Added missing decrement of length https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5334 Credit OSS Fuzz --- MagickCore/profile.c | 1 + 1 file changed, 1 insertion(+) diff --git a/MagickCore/profile.c b/MagickCore/profile.c index 4ad7245fc..7133225d4 100644 --- a/MagickCore/profile.c +++ b/MagickCore/profile.c @@ -1856,6 +1856,7 @@ static MagickBooleanType Sync8BimProfile(Image *image,StringInfo *profile) if ((count > (ssize_t) length) || (count < 0)) return(MagickFalse); p+=count; + length-=count; if ((*p & 0x01) == 0) (void) ReadProfileByte(&p,&length); count=(ssize_t) ReadProfileMSBLong(&p,&length); -- 2.40.0