out-of-bounds read in coders/viff.c:445 ReadVIFFImage

[moshekaplan]

https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533452

[dlemstra]

This issue seems to link to an issue with the viff coder. We can reproduce that issue and we will work on a fix for it.

Did you add the wrong link or did you set the wrong title?

[moshekaplan]

The wrong title and link. My bad.

[urban-warrior]

Grab the latest from GIT and let us know if the problem is resolved.

[moshekaplan]

Still appears to be present. See poc2: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533452/+attachment/4550180/+files/id%3A000071%2Csig%3A06%2Csrc%3A002008%2Cop%3Aflip1%2Cpos%3A580

[dlemstra]

Can you give it another try?

[urban-warrior]

We cannot reproduce the problem. We have the address sanitizer enabled and it does not return an exception:

convert id-000071,sig-06,src-002008,op-flip1,pos-580 null:
convert: improper image header `id-000071,sig-06,src-002008,op-flip1,pos-580i==' @ error/viff.c/ReadVIFFImage/414.
convert: no images defined `null:' @ error/convert.c/ConvertImageCommand/3241.

[moshekaplan]

You're correct. It appears that this bug was fixed.