Null Dereference in jbig.c:2954

[Moshe Kaplan]

Program received signal SIGSEGV, Segmentation fault.

Crash found with CERT BFF
Running: convert crash.bie /dev/null

0xb7fcdddf in jbg_dec_getimage (s=0xbfff6420, plane=0x0) at jbig.c:2954
2954 return s->lhp[s->d & 1][plane];

Stack Trace:
#0 0xffffffff in jbg_dec_getimage (s=0xbfff6420, plane=0x0) at jbig.c:2954
#1 0xffffffff in ReadJBIGImage (image_info=0x805e458, exception=0x80538d8) at coders/jbig.c:225
#2 0xffffffff in ReadImage (image_info=0x805a350, exception=0x80538d8) at magick/constitute.c:547
#3 0xffffffff in ReadImages (image_info=0x805a350, exception=0x80538d8) at magick/constitute.c:853
#4 0xffffffff in ConvertImageCommand (image_info=0x2, argc=0x3, argv=0x8054ce8, metadata=0x0, exception=0x80538d8) at wand/convert.c:622
#5 0xffffffff in MagickCommandGenesis (image_info=0x8056248, command=0x8048620 <ConvertImageCommand@plt>, argc=0x3, argv=0xbfffefe4, metadata=0x0, exception=0x80538d8) at wand/mogrify.c:168
#6 0x080486ec in main (argv=0xbfffefe4, argc=<optimized out>) at utilities/convert.c:81
#7 0x080486ec in main (argc=0x3, argv=0xbfffefe4) at utilities/convert.c:92