Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using uninitialized variable in ImageMagick/coders/mat.c #1221

Closed
boo0m opened this issue Jul 20, 2018 · 5 comments
Closed

Using uninitialized variable in ImageMagick/coders/mat.c #1221

boo0m opened this issue Jul 20, 2018 · 5 comments
Labels

Comments

@boo0m
Copy link

boo0m commented Jul 20, 2018

Prerequisites

  • [Y] I have written a descriptive issue title
  • [Y] I have verified that I am using the latest version of ImageMagick
  • [Y] I have searched open and closed issues to ensure it has not already been reported

Description

The code in ImageMagick/coders/mat.c use uninitialized variable.
line 609: MagickBooleanType status;
line 637: run into while (EOFBlob(image) == MagickFalse)
there have some break condition in the loop.
if ((ldblk > 9999) || (ldblk < 0)) break;
if (HDR.Type[3] != 0) break; /* Data format */
line 828: if (status == MagickFalse) The code use uninitialized variable if break from loop.

urban-warrior pushed a commit to ImageMagick/ImageMagick6 that referenced this issue Jul 21, 2018
@urban-warrior
Copy link
Contributor

Thanks for the problem report. We can reproduce it and will have a patch to fix it in GIT master branch @ https://github.com/ImageMagick/ImageMagick later today. The patch will be available in the beta releases of ImageMagick @ https://www.imagemagick.org/download/beta/ by sometime tomorrow.

@boo0m
Copy link
Author

boo0m commented Jul 21, 2018

@urban-warrior Thank you for you reply. Would you please assign a cve for this bug?

@urban-warrior
Copy link
Contributor

We count on users that submit a flaw to generate the CVE.

@dlemstra dlemstra added the bug label Jul 21, 2018
@mdhaneef
Copy link

is there any poc for this

@nohmask
Copy link

nohmask commented Jul 25, 2018

This was assigned CVE-2018-14551.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

5 participants