To reproduce:
Code: Select all
convert 5c825062 png:/dev/null
Code: Select all
Aborted (core dumped)
Code: Select all
Program terminated with signal SIGABRT, Aborted.
#0 0x00007ffff604ebb9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1 0x00007ffff6051fc8 in __GI_abort () at abort.c:89
#2 0x00007ffff73a17a5 in MagickSignalHandler (signal_number=6) at magick/magick.c:1171
#3 <signal handler called>
#4 0x00007ffff604ebb9 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#5 0x00007ffff6051fc8 in __GI_abort () at abort.c:89
#6 0x00007ffff73a17a5 in MagickSignalHandler (signal_number=11) at magick/magick.c:1171
#7 <signal handler called>
#8 ReadRLEImage (image_info=0x60f050, exception=0x605990) at coders/rle.c:540
#9 0x00007ffff6ebf78a in ReadImage (image_info=image_info@entry=0x609ea0, exception=exception@entry=0x605990) at magick/constitute.c:547
#10 0x00007ffff6ec311b in ReadImages (image_info=0x609ea0, exception=0x605990) at magick/constitute.c:853
#11 0x00007ffff66dc8d2 in ConvertImageCommand (image_info=0x609ea0, argc=3, argv=0x605010, metadata=0x0, exception=0x605990) at wand/convert.c:622
#12 0x00007ffff68d3a7e in MagickCommandGenesis (image_info=0x605b10, command=0x400a30 <ConvertImageCommand@plt>, argc=3, argv=0x7fffffffdbe8, metadata=<optimized out>, exception=0x605990) at wand/mogrify.c:168
#13 0x0000000000400b9f in ConvertMain (argv=0x7fffffffdbe8, argc=3) at utilities/convert.c:81
#14 main (argc=3, argv=0x7fffffffdbe8) at utilities/convert.c:92
#15 0x00007ffff6039ec5 in __libc_start_main (main=0x400b20 <main>, argc=3, argv=0x7fffffffdbe8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffdbd8) at libc-start.c:287
#16 0x0000000000400bf3 in _start ()
AMD64
Distributor ID: Ubuntu
Description: Ubuntu 14.04.1 LTS
Release: 14.04
Codename: trusty
Software: ImageMagick 6.9.0-1 Beta compiled from source.
Also SEGV on IM 6.7.7.10-6ubuntu3 on Ubuntu 14.04.1 amd64 box
Found with American Fuzzy Lop ( http://lcamtuf.coredump.cx/afl/ )
One core dump down, 4711 more to go.