[Bug 1539067] [NEW] SIGFPE, Arithmetic exception in MagickCore/quantum.c:687

[Moshe Kaplan]

Public bug reported:

This bug was found while fuzzing ImageMagick with afl-fuzz

Tested on ImageMagick version Tested on git commit
8bc3ab67d818204fe5f0fe1dc29b873d37360461

Command: magick id:000186,sig:06,src:003522,op:havoc,rep:32 /dev/null


Stack trace:

#0  0x08def18e in SetQuantumDepth (image=<optimized out>, quantum_info=0xb4a01f20, depth=<optimized out>) at MagickCore/quantum.c:687
#1  0x08dec999 in AcquireQuantumInfo (image_info=<optimized out>, image=<optimized out>) at MagickCore/quantum.c:125
#2  0x084e5144 in WriteFITSImage (image_info=0xb5432200, image=0xb4407100, exception=<optimized out>) at coders/fits.c:663
#3  0x08a9e9d9 in WriteImage (image_info=<optimized out>, image=<optimized out>, exception=<optimized out>) at MagickCore/constitute.c:1091
#4  0x08aa23bd in WriteImages (image_info=<optimized out>, images=<optimized out>, filename=<optimized out>, exception=<optimized out>)
    at MagickCore/constitute.c:1309
#5  0x09371db0 in CLINoImageOperator (cli_wand=<optimized out>, option=<optimized out>, arg1n=<optimized out>, arg2n=<optimized out>)
    at MagickWand/operation.c:4697
#6  0x09379bc2 in CLIOption (cli_wand=0xb5c00100, option=<optimized out>) at MagickWand/operation.c:5157
#7  0x091080c4 in ProcessCommandOptions (cli_wand=0xb5c00100, argc=3, argv=<optimized out>, index=<optimized out>)
    at MagickWand/magick-cli.c:526
#8  0x0910a546 in MagickImageCommand (image_info=<optimized out>, argc=<optimized out>, argv=0xbffff0c4, metadata=<optimized out>, 
    exception=0x20000000) at MagickWand/magick-cli.c:786
#9  0x0910ea2a in MagickCommandGenesis (image_info=<optimized out>, command=<optimized out>, argc=<optimized out>, argv=<optimized out>, 
    metadata=<optimized out>, exception=<optimized out>) at MagickWand/mogrify.c:172
#10 0x080de12e in MagickMain (argc=3, argv=0xbffff0c4) at utilities/magick.c:74
#11 main (argc=<optimized out>, argv=<optimized out>) at utilities/magick.c:85

** Affects: imagemagick (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to imagemagick in Ubuntu.
https://bugs.launchpad.net/bugs/1539067

Title:
  SIGFPE, Arithmetic exception in MagickCore/quantum.c:687

Status in imagemagick package in Ubuntu:
  New

Bug description:
  This bug was found while fuzzing ImageMagick with afl-fuzz

  Tested on ImageMagick version Tested on git commit
  8bc3ab67d818204fe5f0fe1dc29b873d37360461

  Command: magick id:000186,sig:06,src:003522,op:havoc,rep:32 /dev/null


  Stack trace:

  #0  0x08def18e in SetQuantumDepth (image=<optimized out>, quantum_info=0xb4a01f20, depth=<optimized out>) at MagickCore/quantum.c:687
  #1  0x08dec999 in AcquireQuantumInfo (image_info=<optimized out>, image=<optimized out>) at MagickCore/quantum.c:125
  #2  0x084e5144 in WriteFITSImage (image_info=0xb5432200, image=0xb4407100, exception=<optimized out>) at coders/fits.c:663
  #3  0x08a9e9d9 in WriteImage (image_info=<optimized out>, image=<optimized out>, exception=<optimized out>) at MagickCore/constitute.c:1091
  #4  0x08aa23bd in WriteImages (image_info=<optimized out>, images=<optimized out>, filename=<optimized out>, exception=<optimized out>)
      at MagickCore/constitute.c:1309
  #5  0x09371db0 in CLINoImageOperator (cli_wand=<optimized out>, option=<optimized out>, arg1n=<optimized out>, arg2n=<optimized out>)
      at MagickWand/operation.c:4697
  #6  0x09379bc2 in CLIOption (cli_wand=0xb5c00100, option=<optimized out>) at MagickWand/operation.c:5157
  #7  0x091080c4 in ProcessCommandOptions (cli_wand=0xb5c00100, argc=3, argv=<optimized out>, index=<optimized out>)
      at MagickWand/magick-cli.c:526
  #8  0x0910a546 in MagickImageCommand (image_info=<optimized out>, argc=<optimized out>, argv=0xbffff0c4, metadata=<optimized out>, 
      exception=0x20000000) at MagickWand/magick-cli.c:786
  #9  0x0910ea2a in MagickCommandGenesis (image_info=<optimized out>, command=<optimized out>, argc=<optimized out>, argv=<optimized out>, 
      metadata=<optimized out>, exception=<optimized out>) at MagickWand/mogrify.c:172
  #10 0x080de12e in MagickMain (argc=3, argv=0xbffff0c4) at utilities/magick.c:74
  #11 main (argc=<optimized out>, argv=<optimized out>) at utilities/magick.c:85

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1539067/+subscriptions