SIGFPE, Arithmetic exception in MagickCore/quantum.c:687

[Moshe Kaplan]

This bug was found while fuzzing ImageMagick with afl-fuzz

Tested on ImageMagick version Tested on git commit 8bc3ab67d818204fe5f0fe1dc29b873d37360461

Command: magick id:000186,sig:06,src:003522,op:havoc,rep:32 /dev/null

Stack trace:

#0 0x08def18e in SetQuantumDepth (image=<optimized out>, quantum_info=0xb4a01f20, depth=<optimized out>) at MagickCore/quantum.c:687
#1 0x08dec999 in AcquireQuantumInfo (image_info=<optimized out>, image=<optimized out>) at MagickCore/quantum.c:125
#2 0x084e5144 in WriteFITSImage (image_info=0xb5432200, image=0xb4407100, exception=<optimized out>) at coders/fits.c:663
#3 0x08a9e9d9 in WriteImage (image_info=<optimized out>, image=<optimized out>, exception=<optimized out>) at MagickCore/constitute.c:1091
#4 0x08aa23bd in WriteImages (image_info=<optimized out>, images=<optimized out>, filename=<optimized out>, exception=<optimized out>)
    at MagickCore/constitute.c:1309
#5 0x09371db0 in CLINoImageOperator (cli_wand=<optimized out>, option=<optimized out>, arg1n=<optimized out>, arg2n=<optimized out>)
    at MagickWand/operation.c:4697
#6 0x09379bc2 in CLIOption (cli_wand=0xb5c00100, option=<optimized out>) at MagickWand/operation.c:5157
#7 0x091080c4 in ProcessCommandOptions (cli_wand=0xb5c00100, argc=3, argv=<optimized out>, index=<optimized out>)
    at MagickWand/magick-cli.c:526
#8 0x0910a546 in MagickImageCommand (image_info=<optimized out>, argc=<optimized out>, argv=0xbffff0c4, metadata=<optimized out>,
    exception=0x20000000) at MagickWand/magick-cli.c:786
#9 0x0910ea2a in MagickCommandGenesis (image_info=<optimized out>, command=<optimized out>, argc=<optimized out>, argv=<optimized out>,
    metadata=<optimized out>, exception=<optimized out>) at MagickWand/mogrify.c:172
#10 0x080de12e in MagickMain (argc=3, argv=0xbffff0c4) at utilities/magick.c:74
#11 main (argc=<optimized out>, argv=<optimized out>) at utilities/magick.c:85

[Moshe Kaplan (moshekaplan)]

Reported upstream at: https://github.com/ImageMagick/ImageMagick/issues/110

[Launchpad Janitor (janitor)]

This bug was fixed in the package imagemagick - 8:6.9.6.6+dfsg-1ubuntu3

---------------
imagemagick (8:6.9.6.6+dfsg-1ubuntu3) zesty; urgency=medium

  * debian/patches/0020-Revert-GradientImage-change.patch: Revert patch
    per https://github.com/ImageMagick/ImageMagick/issues/316. Thanks
    to Cristy <email address hidden>. Closes LP: #1645406.

 -- Nishanth Aravamudan <email address hidden> Tue, 06 Dec 2016 17:26:36 +0100