Legacy ImageMagick Discussions Archive

Source file: https://www.dropbox.com/s/dgxy397qg9765ot/8c6dd81b?dl=0 To reproduce: convert $filename png:/dev/null Output: Aborted BT: Core was generated by `/home/jodicun/opt/ImageMagick-2014-12-19/utilities/.libs/lt-convert -limit memo'. Program terminated with signal SIGSEGV, Segmentation fault. ...

Source file: https://www.dropbox.com/s/ithh7kzjkzezdlr/a8dae2d0?dl=0 To reproduce: convert $filename png:/dev/null Output: Aborted BT: [New LWP 11007] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated...

I have one more out of miff.c , unsure if they're related. I'll post it up right after this. Source file: https://www.dropbox.com/s/7kc9vsdzxvnq2o4/59a24582?dl=0 To reproduce: convert $filename png:/dev/null Output: Aborted BT: [New LWP 10506] [Thread debugging using libthread_db enabled] Using host...

(Aside: Just did an SVN checkout and noticed there's a syntax error in magick/property.c , look for the line above p-- ) Source file: https://www.dropbox.com/s/4excmklcjg8xf1l/68e4a715?dl=0 To reproduce: convert 68e4a715 png:/dev/null GDB Dump w/ BT: ** ** Process info for /home/jodicun/opt/ImageMag...

I haven't enabled asan on these.

I ran it again and it worked okay this time (?) ... closing this out.

Dies better after the patch, thanks!

Dies better after the patch, thanks!

Dies better after the patch, thanks!

This one seems to ABRT when I run from the command line and SEGV in GDB... odd. This is another one that makes some huge core dumps, even with the resource limits... tried MB and MiB. Source file: https://www.dropbox.com/s/4cmnki2bgajth8g/c990c15b?dl=0 To reproduce: convert -limit memory 128MB -limi...

Source file: https://www.dropbox.com/s/g2rgk2v9cb1giq2/dad2f0d6?dl=0 To reproduce: convert -limit memory 128MiB -limit map 50MiB -limit disk 50MiB dad2f0d6 png:/dev/null GDB Dump w/BT: ** ** Process info for /home/jodicun/opt/ImageMagick-2014-12-19/utilities/.libs/lt-convert - ./core-lt-convert1201-...

The SIGABRT is expected behavior here?


Is there a common guidance text for resource control that you send to project owners?
If not addressed by the owners this would fall under CWE-399 and CWE-400.

Source file: https://www.dropbox.com/s/d99loi4gz2w1q3j/a60cbea7?dl=0 Reproduce: convert a60cbea7 png:/dev/null This one just kind of runs forever... I ctrl+c'ed it and dumped a BT: (gdb) bt #0 0x00007ffff78ad20f in GetImageIndexInList (images=<optimized out>, images@entry=0x42787150) at magick/list....

Source file: https://www.dropbox.com/s/08gplggj9tqkgna/2dad54b8?dl=0 To reproduce: convert 2dad54b8 png:/dev/null Output: Aborted (core dumped) (This ran for about 30 seconds, used up around 827MB of RSS when I was running it) BT: Core was generated by `/home/jodicun/opt/ImageMagick-2014-12-19/utili...

Source file: https://www.dropbox.com/s/ix5zvn2tcnpulk0/c2d64390?dl=0 To reproduce: convert c2d64390 png:/dev/null Output: Aborted (core dumped) NOTE: The core dump took up 6GB of disk space on my machine. It may take a bit to write that out :) It will also take you around 6GB of free RAM to run this...

Seems to work better from here, thanks!