Segfault in ReadRLEImage (coders/rle.c:334)

Bug #1496649 reported by Moshe Kaplan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ImageMagick
Fix Released
Undecided
Unassigned
imagemagick (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

magick rle.c_334_invalid_dereference.rle /dev/null

gdb$ bt
#0 0x08271eb2 in ReadRLEImage (image_info=<optimized out>, exception=0xbfff6bae) at ../ImageMagick_git/coders/rle.c:334
#1 0x083a63fd in ReadImage (image_info=<optimized out>, exception=0x88321d8) at ../ImageMagick_git/MagickCore/constitute.c:494
#2 0x083a825f in ReadImages (image_info=<optimized out>, filename=<optimized out>, exception=<optimized out>) at ../ImageMagick_git/MagickCore/constitute.c:847
#3 0x08653324 in CLINoImageOperator (cli_wand=0x0, option=<optimized out>, arg1n=<optimized out>, arg2n=0x0) at ../ImageMagick_git/MagickWand/operation.c:4656
#4 0x086553e6 in CLIOption (cli_wand=0x8837bf0, option=0x868c621 "-read") at ../ImageMagick_git/MagickWand/operation.c:5150
#5 0x0859fe2c in ProcessCommandOptions (cli_wand=<optimized out>, argc=<optimized out>, argv=<optimized out>, index=<optimized out>) at ../ImageMagick_git/MagickWand/magick-cli.c:474
#6 0x085a0c55 in MagickImageCommand (image_info=<optimized out>, argc=0x3, argv=0xbffff0f4, metadata=<optimized out>, exception=<optimized out>) at ../ImageMagick_git/MagickWand/magick-cli.c:786
#7 0x085d06f3 in MagickCommandGenesis (image_info=<optimized out>, command=<optimized out>, argc=<optimized out>, argv=<optimized out>, metadata=0x0, exception=0x88321d8) at ../ImageMagick_git/MagickWand/mogrify.c:172
#8 0x08052897 in MagickMain (argc=<optimized out>, argv=0xbffff0f4) at ../ImageMagick_git/utilities/magick.c:76
#9 main (argc=<optimized out>, argv=0xbffff0f4) at ../ImageMagick_git/utilities/magick.c:89

=> 0x8271eb2 <ReadRLEImage+3250>: mov BYTE PTR [edi],cl
   0x8271eb4 <ReadRLEImage+3252>: inc edi
   0x8271eb5 <ReadRLEImage+3253>: inc esi
   0x8271eb6 <ReadRLEImage+3254>: dec ebx
   0x8271eb7 <ReadRLEImage+3255>: jne 0x8271e90 <ReadRLEImage+3216>
   0x8271eb9 <ReadRLEImage+3257>: movzx ecx,WORD PTR ds:0x8819d96
   0x8271ec0 <ReadRLEImage+3264>: mov esi,DWORD PTR ds:0x87fa718
   0x8271ec6 <ReadRLEImage+3270>: xor ecx,0x9ac0
--------------------------------------------------------------------------------
0x08271eb2 in ReadRLEImage (image_info=<optimized out>, exception=0xbfff6bae) at ../ImageMagick_git/coders/rle.c:334
334 *p++=background_color[j];

Revision history for this message
Moshe Kaplan (moshekaplan) wrote :
Revision history for this message
broucaries (roucaries-bastien+bugs) wrote :
Changed in imagemagick:
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package imagemagick - 8:6.9.6.6+dfsg-1ubuntu3

---------------
imagemagick (8:6.9.6.6+dfsg-1ubuntu3) zesty; urgency=medium

  * debian/patches/0020-Revert-GradientImage-change.patch: Revert patch
    per https://github.com/ImageMagick/ImageMagick/issues/316. Thanks
    to Cristy <email address hidden>. Closes LP: #1645406.

 -- Nishanth Aravamudan <email address hidden> Tue, 06 Dec 2016 17:26:36 +0100

Changed in imagemagick (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.