New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
null pointer dereference in BenchmarkOpenCLDevices #791
Comments
|
Thanks for the problem report. We can reproduce it and will have a patch to fix it in GIT master branch @ https://github.com/ImageMagick/ImageMagick later today. The patch will be available in the beta releases of ImageMagick @ https://www.imagemagick.org/download/beta/ by sometime tomorrow. |
|
Can you link the fixing commit(s)? Not seeing them in the history. |
|
It is this commit: d2b87b4 |
|
Great thanks! |
|
The commit was linked to the wrong issue (#792). And that issue was not yet fixed so I just pushed some changes to resolve that. |
|
This was assigned CVE-2017-18210. |
Here is the critical code: (in BenchmarkOpenCLDevices)
AcquireMagickCLEnv(...) may return NULL, so the following operations on the "testEnv" will dereference null pointer to cause memory error.
The text was updated successfully, but these errors were encountered: