Search found 6 matches
- 2016-11-10T06:45:25-07:00
- Forum: Bugs
- Topic: convert SIGSEGV on malformed jng file format
- Replies: 5
- Views: 5498
Re: convert SIGSEGV on malformed jng file format
What I noticed is that the temp file created will be huge >7gb which is roughly the free empty space in the virtual machine. With security policy in place this problem was fixed. I'll add it to my fuzz testing environments to remove these "false positives"
- 2016-11-10T02:03:28-07:00
- Forum: Bugs
- Topic: convert SIGSEGV on malformed jng file format
- Replies: 5
- Views: 5498
Re: convert SIGSEGV on malformed jng file format
this is a dedicated virtual machine for fuzz testing using afl. The output of `identify -list configure` is: Path: /usr/local/lib/ImageMagick-7.0.3//config-Q16HDRI/configure.xml Name Value ------------------------------------------------------------------------------- CC afl-gcc CFLAGS -I/usr ...
- 2016-11-09T15:49:34-07:00
- Forum: Bugs
- Topic: convert SIGSEGV on malformed jng file format
- Replies: 5
- Views: 5498
convert SIGSEGV on malformed jng file format
segmentation fault in convert when a malformed jng file is loaded. convert version: ~# convert -version Version: ImageMagick 7.0.3-6 Q16 x86_64 2016-11-09 http://www.imagemagick.org Copyright: Copyright (C) 1999-2016 ImageMagick Studio LLC License: http://www.imagemagick.org/script/license.php ...
- 2013-06-06T07:32:59-07:00
- Forum: Bugs
- Topic: coredump on invalid input to convert
- Replies: 5
- Views: 4058
Re: coredump on invalid input to convert
Cool, it works like that. Found this during a bug finding exercise using fuzzing
- 2013-06-06T04:32:23-07:00
- Forum: Bugs
- Topic: coredump on invalid input to convert
- Replies: 5
- Views: 4058
Re: coredump on invalid input to convert
I have 16GB of free disk space and the original image is only 631bytes. There were instances where it tried to generate a temporary file of 2T (for example having scale % with a massive number) however in these cases it does not even try to create a temporary file. In the case that there is no space ...
- 2013-06-06T03:12:47-07:00
- Forum: Bugs
- Topic: coredump on invalid input to convert
- Replies: 5
- Views: 4058
coredump on invalid input to convert
Hi, I have been testing the convert command and found out that the following inputs crash 'convert'. I have compiled from source ImageMagick-6.8.5-9. xxx@localhost:~$ convert --version Version: ImageMagick 6.8.5-9 2013-06-05 Q16 http://www.imagemagick.org Copyright: Copyright (C) 1999-2013 ...