SIGABRT - lt-convert - IM6 SVN - coders/miff.c:599 - a8dae2d0

[JodieC]

Source file:
https://www.dropbox.com/s/ithh7kzjkzezdlr/a8dae2d0?dl=0

To reproduce:

Code: Select all

convert $filename png:/dev/null

Output:
Aborted

BT:

Code: Select all

[New LWP 11007]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `/home/jodicun/opt/ImageMagick-2014-12-19/utilities/.libs/lt-convert -limit memo'.
Program terminated with signal SIGABRT, Aborted.
#0  0x00007ffff6e87bb9 in __GI_raise (sig=sig@entry=0x6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
#0  0x00007ffff6e87bb9 in __GI_raise (sig=sig@entry=0x6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007ffff6e8afc8 in __GI_abort () at abort.c:89
#2  0x00007ffff78b4051 in MagickSignalHandler (signal_number=0x6) at magick/magick.c:1171
#3  <signal handler called>
#4  0x00007ffff6e87bb9 in __GI_raise (sig=sig@entry=0x6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#5  0x00007ffff6e8afc8 in __GI_abort () at abort.c:89
#6  0x00007ffff6ec4e14 in __libc_message (do_abort=do_abort@entry=0x1, fmt=fmt@entry=0x7ffff6fd35a8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#7  0x00007ffff6ecfb77 in malloc_printerr (action=<optimized out>, str=0x7ffff6fcf79d "realloc(): invalid next size", ptr=<optimized out>) at malloc.c:4996
#8  0x00007ffff6ed33b7 in _int_realloc (av=<optimized out>, oldp=0x64f770, oldsize=<optimized out>, nb=<optimized out>) at malloc.c:4234
#9  0x00007ffff6ed4a49 in __GI___libc_realloc (oldmem=0x64f780, bytes=0x9000) at malloc.c:3029
#10 0x00007ffff78b76c3 in ResizeMagickMemory (memory=0x64f780, size=<optimized out>) at magick/memory.c:1140
#11 0x00007ffff78b772c in ResizeQuantumMemory (memory=<optimized out>, count=<optimized out>, quantum=<optimized out>) at magick/memory.c:1205
#12 0x00007ffff79ba628 in ReadMIFFImage (image_info=0x610b50, exception=0x605010) at coders/miff.c:599
#13 0x00007ffff780d898 in ReadImage (image_info=image_info@entry=0x609330, exception=exception@entry=0x605010) at magick/constitute.c:547
#14 0x00007ffff780e8d3 in ReadImages (image_info=image_info@entry=0x609330, exception=exception@entry=0x605010) at magick/constitute.c:850
#15 0x00007ffff7477948 in ConvertImageCommand (image_info=0x609330, argc=0xf, argv=0x603fc0, metadata=0x0, exception=0x605010) at wand/convert.c:622
#16 0x00007ffff74e5a98 in MagickCommandGenesis (image_info=image_info@entry=0x605190, command=0x400880 <ConvertImageCommand@plt>, argc=argc@entry=0xf, argv=argv@entry=0x7fffffffde18, metadata=metadata@entry=0x0, exception=exception@entry=0x605010) at wand/mogrify.c:168
#17 0x0000000000400907 in ConvertMain (argv=0x7fffffffde18, argc=0xf) at utilities/convert.c:81
#18 main (argc=0xf, argv=0x7fffffffde18) at utilities/convert.c:92

System Details:
AMD64
Distributor ID: Ubuntu
Description: Ubuntu 14.04.1 LTS
Release: 14.04
Codename: trusty

ImageMagick 6 compiled from SVN checkout 20150106.

Found with American Fuzzy Lop ( http://lcamtuf.coredump.cx/afl/ )

[magick]

We can reproduce the problem you posted and have a patch in ImageMagick 6.9.0-4 Beta available by sometime tomorrow. Thanks.