SEGV in coders/viff.c:692:35

Bug #1537425 reported by Moshe Kaplan
This bug affects 1 person
Affects Status Importance Assigned to Milestone
imagemagick (Ubuntu)
Fix Released

Bug Description

==20118==ERROR: AddressSanitizer: SEGV on unknown address 0x03897358 (pc 0x08865e90 sp 0xbfb87650 bp 0xbfb889f8 T0)
    #0 0x8865e8f in ReadVIFFImage /home/user/Desktop/ImageMagick/coders/viff.c:692:35
    #1 0x8a9438a in ReadImage /home/user/Desktop/ImageMagick/MagickCore/constitute.c:494
    #2 0x8a9c1ff in ReadImages /home/user/Desktop/ImageMagick/MagickCore/constitute.c:844
    #3 0x9371649 in CLINoImageOperator /home/user/Desktop/ImageMagick/MagickWand/operation.c:4663
    #4 0x9379b31 in CLIOption /home/user/Desktop/ImageMagick/MagickWand/operation.c:5157
    #5 0x910713d in ProcessCommandOptions /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:474
    #6 0x910a4b5 in MagickImageCommand /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:786
    #7 0x910e999 in MagickCommandGenesis /home/user/Desktop/ImageMagick/MagickWand/mogrify.c:172
    #8 0x80de12d in MagickMain /home/user/Desktop/ImageMagick/utilities/magick.c:74
    #9 0x80de12d in main /home/user/Desktop/ImageMagick/utilities/magick.c:85
    #10 0xb751ea82 in __libc_start_main /build/buildd/eglibc-2.19/csu/libc-start.c:287
    #11 0x80ddf54 in _start (/usr/local/bin/magick+0x80ddf54)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/user/Desktop/ImageMagick/coders/viff.c:692 ReadVIFFImage

Revision history for this message
Moshe Kaplan (moshekaplan) wrote :

input file to trigger crash

Revision history for this message
Moshe Kaplan (moshekaplan) wrote :

This bug was found while fuzzing ImageMagick with afl-fuzz

Tested on git commit 87b213f9e2578611654a74ea0c6014367f4dc2fa

Command: magick $infile /dev/null

Revision history for this message
Moshe Kaplan (moshekaplan) wrote :
Changed in imagemagick (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package imagemagick - 8:

imagemagick (8: zesty; urgency=medium

  * debian/patches/0020-Revert-GradientImage-change.patch: Revert patch
    per Thanks
    to Cristy <email address hidden>. Closes LP: #1645406.

 -- Nishanth Aravamudan <email address hidden> Tue, 06 Dec 2016 17:26:36 +0100

Changed in imagemagick (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.