https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30896

ImageMagick · Feb 13, 2021 · b322ab0 · b322ab0
1 parent d886aa5
commit b322ab0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/magick/draw.c b/magick/draw.c
@@ -2245,8 +2245,8 @@ static MagickBooleanType CheckPrimitiveExtent(MVGInfo *mvg_info,
   /*
     Check if there is enough storage for drawing pimitives.
   */
-  extent=(double) mvg_info->offset+pad+PrimitiveExtentPad+1.0;
   quantum=sizeof(**mvg_info->primitive_info);
+  extent=(double) mvg_info->offset+pad+PrimitiveExtentPad*quantum+1.0;
   if (extent <= (double) *mvg_info->extent)
     return(MagickTrue);
   if (extent == (double) CastDoubleToLong(extent))