#350 SEGV in coders/psd.c:1685

[moshe]

This bug was found while fuzzing graphicsmagick with afl-fuzz

Tested on hg changeset 14720:3b1f1e0c1098

Command: gm convert id:000032,sig:06,src:000100,op:havoc,rep:2 /dev/null

ASAN:SIGSEGV

==7259==ERROR: AddressSanitizer: SEGV on unknown address 0x1f81ff81 (pc 0x088ac4f3 sp 0xbfed6220 bp 0xbfed6ba8 T0)
#0 0x88ac4f2 in WriteWhiteBackground /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/coders/psd.c:1685
#1 0x88ac4f2 in WritePSDImage /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/coders/psd.c:2021
#2 0x824e050 in WriteImage /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/magick/constitute.c:2208
#3 0x824fb98 in WriteImages /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/magick/constitute.c:2351
#4 0x8144026 in ConvertImageCommand /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/magick/command.c:6087
#5 0x8165066 in MagickCommand /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/magick/command.c:8862
#6 0x81ed0dc in GMCommandSingle /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/magick/command.c:17338
#7 0x81ea204 in GMCommand /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/magick/command.c:17391
#8 0x80d4a76 in main /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/utilities/gm.c:61
#9 0xb7537a82 in __libc_start_main /build/buildd/eglibc-2.19/csu/libc-start.c:287
#10 0x80d4904 in _start (/home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/utilities/gm+0x80d4904)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/user/Desktop/graphicsmagick_fuzz_results/graphicsmagick/coders/psd.c:1685 WriteWhiteBackground
==7259==ABORTING

[Bob Friesenhahn]

Fixed by Mercurial changeset 14739:02a6e3c747c0