Bug 2776 - SEGV in putCMYKseparate8bittile()
: SEGV in putCMYKseparate8bittile()
Status: RESOLVED LATER
: libtiff
default
: unspecified
: PC Linux
: P2 enhancement
: ---
Assigned To:
:
:
: migrated_to_gitlab
:
:
  Show dependency treegraph
 
Reported: 2018-02-21 09:46 by
Modified: 2019-10-01 14:21 (History)


Attachments
Crashing test case (convert) (378 bytes, application/octet-stream)
2018-02-21 09:46, Kamil Frankowicz
Details


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2018-02-21 09:46:12
Created an attachment (id=843) [details]
Crashing test case (convert)

Affected:
- libtiff version 4.0.8

To reproduce the problem with ImageMagick:

convert libtiff_sigsegv_putCMYKseparate8bittile /dev/null

ASAN:

==15256==ERROR: AddressSanitizer: SEGV on unknown address 0x62300024cc40 (pc
0x7fc66c3bf3d5 bp 0x7fc65fa0f100 sp 0x7ffe08d7eb18 T0)
    #0 0x7fc66c3bf3d4 in putCMYKseparate8bittile
XYZ/tiff-4.0.8/libtiff/tif_getimage.c:1628
    #1 0x7fc66c3c264a in gtStripSeparate
XYZ/tiff-4.0.8/libtiff/tif_getimage.c:1095
    #2 0x7fc66c3c5746 in TIFFReadRGBAStripExt
XYZ/tiff-4.0.8/libtiff/tif_getimage.c:2887
    #3 0x7fc66e9c55cb in ReadTIFFImage coders/tiff.c:2006
    #4 0x7fc66ddb1783 in ReadImage MagickCore/constitute.c:497
    #5 0x7fc66ddb46e0 in ReadImages MagickCore/constitute.c:866
    #6 0x7fc66d4709d7 in ConvertImageCommand MagickWand/convert.c:641
    #7 0x7fc66d63a89d in MagickCommandGenesis MagickWand/mogrify.c:183
    #8 0x40202c in MagickMain utilities/magick.c:149
    #9 0x7fc66cd5582f in __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #10 0x401668 in _start (/usr/local/bin/magick+0x401668)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV XYZ/tiff-4.0.8/libtiff/tif_getimage.c:1628
putCMYKseparate8bittile
==15256==ABORTING
------- Comment #1 From 2019-10-01 14:21:09 -------
Bugzilla is no longer used for tracking libtiff issues. Remaining open tickets,
such as this one, have been migrated to the libtiff GitLab instance at
https://gitlab.com/libtiff/libtiff/issues .

The migrated tickets have their summary prefixed with [BZ#XXXX] where XXXX is
the initial Bugzilla issue number.