Search found 467 matches

by broucaries
2014-12-13T16:40:42-07:00
Forum: Bugs
Topic: Stack smashing in convert, compare
Replies: 11
Views: 22232

Re: Stack smashing in convert, compare

It is a bug on openjpeg you could revert the workarround. A cve has been assigned and bug was corrected in libjpeg turbo
by broucaries
2014-12-13T14:37:36-07:00
Forum: Bugs
Topic: SEGV in 64-bit and 32-bit platforms 07c8accc
Replies: 15
Views: 47588

Re: SEGV in 64-bit and 32-bit platforms 07c8accc

Ok I suppose these patch: - http://trac.imagemagick.org/changeset/17112/ImageMagick/branches/ImageMagick-6/coders/dpx.c - http://trac.imagemagick.org/changeset/17166/ImageMagick/branches/ImageMagick-6/coders/pcx.c - http://trac.imagemagick.org/changeset/17132/ImageMagick/branches/ImageMagick-6/coder...
by broucaries
2014-12-13T12:58:08-07:00
Forum: Bugs
Topic: SIGABRT - convert - IM 6.9.0-1 - d54227aa
Replies: 9
Views: 9784

Re: SIGABRT - convert - IM 6.9.0-1 - d54227aa

I also need a patch for this
by broucaries
2014-12-13T12:57:41-07:00
Forum: Bugs
Topic: SIGABRT - convert - IM 6.9.0-1 - d54227aa
Replies: 9
Views: 9784

Re: SIGABRT - convert - IM 6.9.0-1 - d54227aa

It crash under debian bt #0 0x00007ffff7067107 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff70684e8 in __GI_abort () at abort.c:89 #2 0x00007ffff70a5044 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7ffff7197c60 "*** Error in `%s': ...
by broucaries
2014-12-13T12:55:17-07:00
Forum: Bugs
Topic: SIGABRT when converting - IM 6.9.0-0 - 3677a9ec
Replies: 7
Views: 7985

Re: SIGABRT when converting - IM 6.9.0-0 - 3677a9ec

I also need a patch for this one
by broucaries
2014-12-13T12:54:52-07:00
Forum: Bugs
Topic: SIGABRT when converting - IM 6.9.0-0 - 3677a9ec
Replies: 7
Views: 7985

Re: SIGABRT when converting - IM 6.9.0-0 - 3677a9ec

Get this backtrace #0 0x00007ffff7067107 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff70684e8 in __GI_abort () at abort.c:89 #2 0x00007ffff70a5044 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7ffff7197c60 "*** Error in `%s': %s: 0x...
by broucaries
2014-12-13T12:47:29-07:00
Forum: Bugs
Topic: SIGABRT convert - IM 6.9.0-1 - 36b70be2
Replies: 25
Views: 53300

Re: SIGABRT convert - IM 6.9.0-1 - 36b70be2

Backtrace #0 0x00007ffff7067107 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff70684e8 in __GI_abort () at abort.c:89 #2 0x00007ffff70a5044 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7ffff7197c60 "*** Error in `%s': %s: 0x%s ***\n&...
by broucaries
2014-12-13T12:46:07-07:00
Forum: Bugs
Topic: SIGABRT convert - IM 6.9.0-1 - 36b70be2
Replies: 25
Views: 53300

Re: SIGABRT convert - IM 6.9.0-1 - 36b70be2

It crash here on debian system jessie.
by broucaries
2014-12-13T12:42:18-07:00
Forum: Bugs
Topic: SEGV in 64-bit and 32-bit platforms 07c8accc
Replies: 15
Views: 47588

Re: SEGV in 64-bit and 32-bit platforms 07c8accc

Could you send me (possibly encrypted) the patch ?

Could you also send me if not public when we should release ?

Bastien
by broucaries
2014-11-09T23:01:53-07:00
Forum: Bugs
Topic: Stack smashing in convert, compare
Replies: 11
Views: 22232

Re: Stack smashing in convert, compare

Di you check if both imagemagick and libjpeg-6b are compiled with -fstack-protector-all ? Valgrind is really bad at detecting stack issue.

Bastien
by broucaries
2014-11-07T12:20:21-07:00
Forum: Bugs
Topic: Stack smashing in convert, compare
Replies: 11
Views: 22232

Re: Stack smashing in convert, compare

See also on going discussion on http://bugs.debian.org/768369

Magick could you help libjpeg upstream by improving my answer.

Bastien
by broucaries
2014-11-07T12:13:06-07:00
Forum: Bugs
Topic: Stack smashing in convert, compare
Replies: 11
Views: 22232

Re: Stack smashing in convert, compare

BWT it will be nice to compile for regression testing imagemagick with hardening flags

Bastien
by broucaries
2014-11-07T12:12:15-07:00
Forum: Bugs
Topic: Stack smashing in convert, compare
Replies: 11
Views: 22232

Re: Stack smashing in convert, compare

Likely because libjpeg was not hardened
by broucaries
2014-11-03T13:03:33-07:00
Forum: Bugs
Topic: SEGV in 64-bit and 32-bit platforms 07c8accc
Replies: 15
Views: 47588

Re: SEGV in 64-bit and 32-bit platforms 07c8accc

Another security bug (dos) i suppose...
by broucaries
2014-11-03T12:57:55-07:00
Forum: Bugs
Topic: Stack smashing in convert, compare
Replies: 11
Views: 22232

Re: Stack smashing in convert, compare

It is thus a security bug on jpeg library. Could you please report and open a ubuntu bug.

Please also test against lastest debian version..if so i will open a bug (i am the debian imagemagick maintainer)