Infinite loop in ClonePixelCacheRepository (MagickCore/cache.c:3266)

[Moshe Kaplan]

Imagemagick from github.

Stack trace:

#0 0x0837347f in WritePixelCacheRegion (cache_info=<optimized out>, cache_info=<optimized out>, offset=<optimized out>, length=<optimized out>, buffer=<optimized out>) at ../ImageMagick_git/MagickCore/cache.c:3266
#1 WritePixelCachePixels (cache_info=0x8858ff8, nexus_info=0x884e070, exception=<optimized out>) at ../ImageMagick_git/MagickCore/cache.c:5281
#2 0x083701e1 in ClonePixelCacheRepository (clone_info=0x8858ff8, cache_info=0xbffed320, exception=<optimized out>) at ../ImageMagick_git/MagickCore/cache.c:677
#3 0x0836f820 in OpenPixelCache (image=0x8855d08, mode=<optimized out>, exception=<optimized out>) at ../ImageMagick_git/MagickCore/cache.c:3590
#4 0x0837165c in GetImagePixelCache (image=0x8855d08, clone=<optimized out>, exception=0x88321d8) at ../ImageMagick_git/MagickCore/cache.c:1579
#5 0x083748fc in SyncImagePixelCache (image=0xb696f040, exception=0xbfcc4) at ../ImageMagick_git/MagickCore/cache.c:5002
#6 0x08066777 in SetImageExtent (image=0xb696f040, columns=<optimized out>, rows=<optimized out>, exception=0xbfcc4) at ../ImageMagick_git/MagickCore/image.c:2445
#7 0x08214ce8 in ReadPCXImage (image_info=<optimized out>, exception=0x88321d8) at ../ImageMagick_git/coders/pcx.c:382
#8 0x083a63fd in ReadImage (image_info=<optimized out>, exception=0x88321d8) at ../ImageMagick_git/MagickCore/constitute.c:494
#9 0x083a825f in ReadImages (image_info=<optimized out>, filename=<optimized out>, exception=<optimized out>) at ../ImageMagick_git/MagickCore/constitute.c:847
#10 0x08653324 in CLINoImageOperator (cli_wand=0x0, option=<optimized out>, arg1n=<optimized out>, arg2n=0x0) at ../ImageMagick_git/MagickWand/operation.c:4656
#11 0x086553e6 in CLIOption (cli_wand=0x8837bf0, option=0x868c621 "-read") at ../ImageMagick_git/MagickWand/operation.c:5150
#12 0x0859fe2c in ProcessCommandOptions (cli_wand=<optimized out>, argc=<optimized out>, argv=<optimized out>, index=<optimized out>) at ../ImageMagick_git/MagickWand/magick-cli.c:474
#13 0x085a0c55 in MagickImageCommand (image_info=<optimized out>, argc=0x3, argv=0xbffff0f4, metadata=<optimized out>, exception=<optimized out>) at ../ImageMagick_git/MagickWand/magick-cli.c:786
#14 0x085d06f3 in MagickCommandGenesis (image_info=<optimized out>, command=<optimized out>, argc=<optimized out>, argv=<optimized out>, metadata=0x0, exception=0x88321d8) at ../ImageMagick_git/MagickWand/mogrify.c:172
#15 0x08052897 in MagickMain (argc=<optimized out>, argv=0xbffff0f4) at ../ImageMagick_git/utilities/magick.c:76
#16 main (argc=<optimized out>, argv=0xbffff0f4) at ../ImageMagick_git/utilities/magick.c:89

[Moshe Kaplan (moshekaplan)]

Triggered by running: magick ClonePixelCacheRepository_infinite_loop /dev/null

[Moshe Kaplan (moshekaplan)]

This file also triggers the bug.

[Moshe Kaplan (moshekaplan)]

This sample may also be related to this issue.