GraphicsMagick: ProcessMSLScript(): Fix use of memory just freed.

changeset 80dc785ea112 in /hg/GraphicsMagick
details: http://hg.GraphicsMagick.org/hg/GraphicsMagick?cmd=changeset;node=80dc785ea112
summary: ProcessMSLScript(): Fix use of memory just freed.

diffstat:

 ChangeLog          |  4 ++++
 coders/msl.c       |  4 ++--
 www/Changelog.html |  3 +++
 3 files changed, 9 insertions(+), 2 deletions(-)

diffs (45 lines):

diff -r 06dd65d8c01d -r 80dc785ea112 ChangeLog
--- a/ChangeLog	Sat Mar 11 14:57:26 2023 -0600
+++ b/ChangeLog	Sat Mar 11 15:08:43 2023 -0600
@@ -1,5 +1,9 @@
 2023-03-11  Bob Friesenhahn  <[email protected]>
 
+	* coders/msl.c (ProcessMSLScript): Fix use of memory just freed.
+	Addresses SourceForge issue #689 "Heap UAF in gm
+	(magick/utility.c:3792)"
+
 	* coders/identity.c (ReadIdentityImage): Limit 'order' to a
 	maximum of 40, and change to unsigned type in order to avoid
 	undefined arithmetic overflow.
diff -r 06dd65d8c01d -r 80dc785ea112 coders/msl.c
--- a/coders/msl.c	Sat Mar 11 14:57:26 2023 -0600
+++ b/coders/msl.c	Sat Mar 11 15:08:43 2023 -0600
@@ -1,5 +1,5 @@
 /*
-% Copyright (C) 2003 - 2022 GraphicsMagick Group
+% Copyright (C) 2003 - 2023 GraphicsMagick Group
 % Copyright (C) 2002 ImageMagick Studio
 %
 % This program is covered by multiple licenses, which are described in
@@ -4550,7 +4550,7 @@
     {
       DestroyImage(msl_image);
       ThrowException(exception,FileOpenError,UnableToOpenFile,
-                     msl_image->filename);
+                     image_info->filename);
       return(MagickFail);
     }
 
diff -r 06dd65d8c01d -r 80dc785ea112 www/Changelog.html
--- a/www/Changelog.html	Sat Mar 11 14:57:26 2023 -0600
+++ b/www/Changelog.html	Sat Mar 11 15:08:43 2023 -0600
@@ -40,6 +40,9 @@
 <p>2023-03-11  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
 <blockquote>
 <ul class="simple">
+<li><p>coders/msl.c (ProcessMSLScript): Fix use of memory just freed.
+Addresses SourceForge issue #689 &quot;Heap UAF in gm
+(magick/utility.c:3792)&quot;</p></li>
 <li><p>coders/identity.c (ReadIdentityImage): Limit 'order' to a
 maximum of 40, and change to unsigned type in order to avoid
 undefined arithmetic overflow.</p></li>