Search found 6 matches

by blackaura
2016-11-10T06:45:25-07:00
Forum: Bugs
Topic: convert SIGSEGV on malformed jng file format
Replies: 5
Views: 5498

Re: convert SIGSEGV on malformed jng file format

What I noticed is that the temp file created will be huge >7gb which is roughly the free empty space in the virtual machine. With security policy in place this problem was fixed. I'll add it to my fuzz testing environments to remove these "false positives"
by blackaura
2016-11-10T02:03:28-07:00
Forum: Bugs
Topic: convert SIGSEGV on malformed jng file format
Replies: 5
Views: 5498

Re: convert SIGSEGV on malformed jng file format

this is a dedicated virtual machine for fuzz testing using afl. The output of `identify -list configure` is: Path: /usr/local/lib/ImageMagick-7.0.3//config-Q16HDRI/configure.xml Name Value ------------------------------------------------------------------------------- CC afl-gcc CFLAGS -I/usr ...
by blackaura
2016-11-09T15:49:34-07:00
Forum: Bugs
Topic: convert SIGSEGV on malformed jng file format
Replies: 5
Views: 5498

convert SIGSEGV on malformed jng file format

segmentation fault in convert when a malformed jng file is loaded. convert version: ~# convert -version Version: ImageMagick 7.0.3-6 Q16 x86_64 2016-11-09 http://www.imagemagick.org Copyright: Copyright (C) 1999-2016 ImageMagick Studio LLC License: http://www.imagemagick.org/script/license.php ...
by blackaura
2013-06-06T07:32:59-07:00
Forum: Bugs
Topic: coredump on invalid input to convert
Replies: 5
Views: 4058

Re: coredump on invalid input to convert

Cool, it works like that. Found this during a bug finding exercise using fuzzing
by blackaura
2013-06-06T04:32:23-07:00
Forum: Bugs
Topic: coredump on invalid input to convert
Replies: 5
Views: 4058

Re: coredump on invalid input to convert

I have 16GB of free disk space and the original image is only 631bytes. There were instances where it tried to generate a temporary file of 2T (for example having scale % with a massive number) however in these cases it does not even try to create a temporary file. In the case that there is no space ...
by blackaura
2013-06-06T03:12:47-07:00
Forum: Bugs
Topic: coredump on invalid input to convert
Replies: 5
Views: 4058

coredump on invalid input to convert

Hi, I have been testing the convert command and found out that the following inputs crash 'convert'. I have compiled from source ImageMagick-6.8.5-9. xxx@localhost:~$ convert --version Version: ImageMagick 6.8.5-9 2013-06-05 Q16 http://www.imagemagick.org Copyright: Copyright (C) 1999-2013 ...