GraphicsMagick: ReadBlobString(): Fix stack overflow which occur...

changeset 4f2c06830ec3 in /hg/GraphicsMagick
details: http://hg.GraphicsMagick.org/hg/GraphicsMagick?cmd=changeset;node=4f2c06830ec3
summary: ReadBlobString(): Fix stack overflow which occured to recent implementation changes.

diffstat:

 ChangeLog                              |  7 +++++++
 VisualMagick/installer/inc/version.isx |  4 ++--
 magick/blob.c                          |  2 +-
 magick/version.h                       |  4 ++--
 www/Changelog.html                     |  9 +++++++++
 5 files changed, 21 insertions(+), 5 deletions(-)

diffs (70 lines):

diff -r 7b165ce82542 -r 4f2c06830ec3 ChangeLog
--- a/ChangeLog	Sun Oct 30 13:22:52 2022 -0500
+++ b/ChangeLog	Mon Oct 31 11:06:49 2022 -0500
@@ -1,3 +1,10 @@
+2022-10-31  Bob Friesenhahn  <[email protected]>
+
+	* magick/blob.c (ReadBlobString): Fix oss-fuzz issue 52917
+	"graphicsmagick:coder_TXT_fuzzer: Stack-buffer-overflow in
+	ReadBlobString", which occurs due to a bug added in yesterday's
+	ReadBlobString() changes.
+
 2022-10-30  Bob Friesenhahn  <[email protected]>
 
 	* magick/blob.c (ReadBlobString): Use fgets() in order to get much
diff -r 7b165ce82542 -r 4f2c06830ec3 VisualMagick/installer/inc/version.isx
--- a/VisualMagick/installer/inc/version.isx	Sun Oct 30 13:22:52 2022 -0500
+++ b/VisualMagick/installer/inc/version.isx	Mon Oct 31 11:06:49 2022 -0500
@@ -10,5 +10,5 @@
 
 #define public MagickPackageName "GraphicsMagick"
 #define public MagickPackageVersion "1.4"
-#define public MagickPackageVersionAddendum ".020221030"
-#define public MagickPackageReleaseDate "snapshot-20221030"
+#define public MagickPackageVersionAddendum ".020221031"
+#define public MagickPackageReleaseDate "snapshot-20221031"
diff -r 7b165ce82542 -r 4f2c06830ec3 magick/blob.c
--- a/magick/blob.c	Sun Oct 30 13:22:52 2022 -0500
+++ b/magick/blob.c	Mon Oct 31 11:06:49 2022 -0500
@@ -4606,7 +4606,7 @@
       }
     default :
       {
-        for (i=0; i < MaxTextExtent; i++)
+        for (i=0; i < (MaxTextExtent-2); i++)
           {
             c=ReadBlobByte(image);
             if (c == EOF)
diff -r 7b165ce82542 -r 4f2c06830ec3 magick/version.h
--- a/magick/version.h	Sun Oct 30 13:22:52 2022 -0500
+++ b/magick/version.h	Mon Oct 31 11:06:49 2022 -0500
@@ -38,8 +38,8 @@
 #define MagickLibVersion  0x272400
 #define MagickLibVersionText  "1.4"
 #define MagickLibVersionNumber 27,24,0
-#define MagickChangeDate   "20221030"
-#define MagickReleaseDate  "snapshot-20221030"
+#define MagickChangeDate   "20221031"
+#define MagickReleaseDate  "snapshot-20221031"
 
 /*
   The MagickLibInterfaceNewest and MagickLibInterfaceOldest defines
diff -r 7b165ce82542 -r 4f2c06830ec3 www/Changelog.html
--- a/www/Changelog.html	Sun Oct 30 13:22:52 2022 -0500
+++ b/www/Changelog.html	Mon Oct 31 11:06:49 2022 -0500
@@ -37,6 +37,15 @@
 </div>
 
 <div class="document">
+<p>2022-10-31  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
+<blockquote>
+<ul class="simple">
+<li><p>magick/blob.c (ReadBlobString): Fix oss-fuzz issue 52917
+&quot;graphicsmagick:coder_TXT_fuzzer: Stack-buffer-overflow in
+ReadBlobString&quot;, which occurs due to a bug added in yesterday's
+ReadBlobString() changes.</p></li>
+</ul>
+</blockquote>
 <p>2022-10-30  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
 <blockquote>
 <ul class="simple">