We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
a potential memory leak bug locates in coders/pcd.c
the bug locates in https://github.com/ImageMagick/ImageMagick/blob/master/coders/pcd.c : DecodeImage() function. the code frament is as follows: we allocate buffer memory, we freed it in normal branch,but forgot free it in exception branch
https://github.com/ImageMagick/ImageMagick/blob/master/coders/pcd.c#L186
buffer=(unsigned char *) AcquireQuantumMemory(0x800,sizeof(*buffer)); if (buffer == (unsigned char *) NULL) ThrowBinaryException(ResourceLimitError,"MemoryAllocationFailed", image->filename);
but we forget free it in https://github.com/ImageMagick/ImageMagick/blob/master/coders/pcd.c#L286
default: { ThrowBinaryException(CorruptImageError,"CorruptImage", image->filename); }
credit: www.vackbot.com ( 墨云科技)
The text was updated successfully, but these errors were encountered:
https://github.com/ImageMagick/ImageMagick/issues/1193
957b639
e8f4f5e
Thanks for the problem report. We can reproduce it and will have a patch to fix it in GIT master branch @ https://github.com/ImageMagick/ImageMagick later today. The patch will be available in the beta releases of ImageMagick @ http://www.imagemagick.org/download/beta/ by sometime tomorrow.
Sorry, something went wrong.
This was assigned CVE-2018-14435.
No branches or pull requests
Prerequisites
Description
a potential memory leak bug locates in coders/pcd.c
Steps to Reproduce
the bug locates in
https://github.com/ImageMagick/ImageMagick/blob/master/coders/pcd.c : DecodeImage() function.
the code frament is as follows: we allocate buffer memory, we freed it in normal branch,but forgot free it in exception branch
https://github.com/ImageMagick/ImageMagick/blob/master/coders/pcd.c#L186
but we forget free it in
https://github.com/ImageMagick/ImageMagick/blob/master/coders/pcd.c#L286
credit: www.vackbot.com ( 墨云科技)
System Configuration
The text was updated successfully, but these errors were encountered: