[Bug 1218248] Re: DoS: memory corruption while processing GIF comments.

[Ubuntu Foundations Team Bug Bot]

The attachment "Fix-gif-comments.patch" seems to be a patch.  If it
isn't, please remove the "patch" flag from the attachment, remove the
"patch" tag, and if you are a member of the ~ubuntu-reviewers,
unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to imagemagick in Ubuntu.
https://bugs.launchpad.net/bugs/1218248

Title:
  DoS: memory corruption while processing GIF comments.

Status in “imagemagick” package in Ubuntu:
  New
Status in “imagemagick” package in Debian:
  Unknown

Bug description:
  Memory corruption while processing GIF comments. As the result
  malloc's private stuctures are corrupted and it causes SIGABRT and
  application crashes.

  Here is a topic on imagemagick forum: http://www.imagemagick.org
  /discourse-server/viewtopic.php?f=3&t=23921 . You can easily reproduce
  problem with images from this topic.

  
  It was a problem with handling comments. '\0' symbol was places after allocated memory buffer.
  To fix this problem raw memory handling functions was replaced with ConcatenateString.
  Original code that solves this problem: http://trac.imagemagick.org/changeset/8770/ImageMagick/trunk/coders/gif.c

  Patch that solves problem is attached to this bug report and tested in
  Yandex.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1218248/+subscriptions