[Bug 1537425] [NEW] SEGV in coders/viff.c:692:35

[Moshe Kaplan]

*** This bug is a security vulnerability ***

Public security bug reported:

ASAN:SIGSEGV
=================================================================
==20118==ERROR: AddressSanitizer: SEGV on unknown address 0x03897358 (pc 0x08865e90 sp 0xbfb87650 bp 0xbfb889f8 T0)
    #0 0x8865e8f in ReadVIFFImage /home/user/Desktop/ImageMagick/coders/viff.c:692:35
    #1 0x8a9438a in ReadImage /home/user/Desktop/ImageMagick/MagickCore/constitute.c:494
    #2 0x8a9c1ff in ReadImages /home/user/Desktop/ImageMagick/MagickCore/constitute.c:844
    #3 0x9371649 in CLINoImageOperator /home/user/Desktop/ImageMagick/MagickWand/operation.c:4663
    #4 0x9379b31 in CLIOption /home/user/Desktop/ImageMagick/MagickWand/operation.c:5157
    #5 0x910713d in ProcessCommandOptions /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:474
    #6 0x910a4b5 in MagickImageCommand /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:786
    #7 0x910e999 in MagickCommandGenesis /home/user/Desktop/ImageMagick/MagickWand/mogrify.c:172
    #8 0x80de12d in MagickMain /home/user/Desktop/ImageMagick/utilities/magick.c:74
    #9 0x80de12d in main /home/user/Desktop/ImageMagick/utilities/magick.c:85
    #10 0xb751ea82 in __libc_start_main /build/buildd/eglibc-2.19/csu/libc-start.c:287
    #11 0x80ddf54 in _start (/usr/local/bin/magick+0x80ddf54)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/user/Desktop/ImageMagick/coders/viff.c:692 ReadVIFFImage
==20118==ABORTING

** Affects: imagemagick (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to imagemagick in Ubuntu.
https://bugs.launchpad.net/bugs/1537425

Title:
  SEGV in coders/viff.c:692:35

Status in imagemagick package in Ubuntu:
  New

Bug description:
  ASAN:SIGSEGV
  =================================================================
  ==20118==ERROR: AddressSanitizer: SEGV on unknown address 0x03897358 (pc 0x08865e90 sp 0xbfb87650 bp 0xbfb889f8 T0)
      #0 0x8865e8f in ReadVIFFImage /home/user/Desktop/ImageMagick/coders/viff.c:692:35
      #1 0x8a9438a in ReadImage /home/user/Desktop/ImageMagick/MagickCore/constitute.c:494
      #2 0x8a9c1ff in ReadImages /home/user/Desktop/ImageMagick/MagickCore/constitute.c:844
      #3 0x9371649 in CLINoImageOperator /home/user/Desktop/ImageMagick/MagickWand/operation.c:4663
      #4 0x9379b31 in CLIOption /home/user/Desktop/ImageMagick/MagickWand/operation.c:5157
      #5 0x910713d in ProcessCommandOptions /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:474
      #6 0x910a4b5 in MagickImageCommand /home/user/Desktop/ImageMagick/MagickWand/magick-cli.c:786
      #7 0x910e999 in MagickCommandGenesis /home/user/Desktop/ImageMagick/MagickWand/mogrify.c:172
      #8 0x80de12d in MagickMain /home/user/Desktop/ImageMagick/utilities/magick.c:74
      #9 0x80de12d in main /home/user/Desktop/ImageMagick/utilities/magick.c:85
      #10 0xb751ea82 in __libc_start_main /build/buildd/eglibc-2.19/csu/libc-start.c:287
      #11 0x80ddf54 in _start (/usr/local/bin/magick+0x80ddf54)

  AddressSanitizer can not provide additional info.
  SUMMARY: AddressSanitizer: SEGV /home/user/Desktop/ImageMagick/coders/viff.c:692 ReadVIFFImage
  ==20118==ABORTING

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1537425/+subscriptions