SEGV in coders/viff.c:692:35

[Moshe Kaplan]

ASAN:SIGSEGV
=================================================================
==20118==ERROR: AddressSanitizer: SEGV on unknown address 0x03897358 (pc 0x08865e90 sp 0xbfb87650 bp 0xbfb889f8 T0)
    #0 0x8865e8f in ReadVIFFImage /home/user/Desktop/ImageMagick/coders/viff.c:692:35
    #1 0x8a9438a in ReadImage /home/user/Desktop/ImageMagick/MagickCore/constitute.c:494
    #2 0x8a9c1ff in ReadImages /home/user/Desktop/ImageMagick/MagickCore/constitute.c:844
    #3 0x9371649 in CLINoImageOperator /home/user/Desktop/ImageMagick/MagickWand/operation.c:4663
    #4 0x9379b31 in CLIOption /home/user/Desktop/ImageMagick/MagickWand/operation.c:5157
    #5 0x910713d in ProcessCommandOptions /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:474
    #6 0x910a4b5 in MagickImageCommand /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:786
    #7 0x910e999 in MagickCommandGenesis /home/user/Desktop/ImageMagick/MagickWand/mogrify.c:172
    #8 0x80de12d in MagickMain /home/user/Desktop/ImageMagick/utilities/magick.c:74
    #9 0x80de12d in main /home/user/Desktop/ImageMagick/utilities/magick.c:85
    #10 0xb751ea82 in __libc_start_main /build/buildd/eglibc-2.19/csu/libc-start.c:287
    #11 0x80ddf54 in _start (/usr/local/bin/magick+0x80ddf54)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/user/Desktop/ImageMagick/coders/viff.c:692 ReadVIFFImage
==20118==ABORTING

[Moshe Kaplan (moshekaplan)]

input file to trigger crash

[Moshe Kaplan (moshekaplan)]

This bug was found while fuzzing ImageMagick with afl-fuzz

Tested on git commit 87b213f9e2578611654a74ea0c6014367f4dc2fa

Command: magick $infile /dev/null

[Moshe Kaplan (moshekaplan)]

Reported and fixed upstream at: https://github.com/ImageMagick/ImageMagick/issues/99

[Launchpad Janitor (janitor)]

This bug was fixed in the package imagemagick - 8:6.9.6.6+dfsg-1ubuntu3

---------------
imagemagick (8:6.9.6.6+dfsg-1ubuntu3) zesty; urgency=medium

  * debian/patches/0020-Revert-GradientImage-change.patch: Revert patch
    per https://github.com/ImageMagick/ImageMagick/issues/316. Thanks
    to Cristy <email address hidden>. Closes LP: #1645406.

 -- Nishanth Aravamudan <email address hidden> Tue, 06 Dec 2016 17:26:36 +0100