Potential DOS and a few other bug:

[broucaries]

Hi,

I have a potential regression with security implication. Will send to usual adress. Please create ask for CVE (see https://cve.mitre.org/cve/request_id.html).

I have also a few other bug that I will post as answer here. When you have solved the CVE one and other bug could you made a release ASAP ?

Bastien

[mod note: We split your answers into separate topics, you can find the links below]

viewtopic.php?f=3&t=26400
viewtopic.php?f=3&t=26401
viewtopic.php?f=3&t=26402
viewtopic.php?f=3&t=26403
viewtopic.php?f=3&t=26404

[magick]

Here's a fix for the bug you reported:

Code: Select all

513c513
<             (void) DeleteImageProfile(image,next);
---
>             (void) DeleteImageProfile(image,name);
1626c1626
<       (void) ReadProfileByte(&p,&length);
---
>       p++;

[broucaries]

Thanks do you have a CVE ?

[magick]

Looking for a user to volunteer to submit it to CVE. We're very busy this week with ImageMagick development. If no one volunteers, we'll try to find the time, perhaps early next week.