Crash on invalid XML profile

"Alexander E. Patrakov" <[email protected]> Sat, 3 Jan 2009 21:46:38 +0500

Newsgroups	gmane.comp.video.image-magick.devel
Message-ID	<[email protected]>

Hello, this image causes the "identify" command to crash by attempting
to DestroyStringInfo(NULL):
http://olympus.ourlife.ru/gallery/data/media/4/_7054831.jpg

Fix:

--- coders/jpeg.c
+++ coders/jpeg.c
@@ -574,7 +574,7 @@
               break;
             p++;
           }
-          if (*p == '\0')
+          if (i < (long) GetStringInfoLength(profile))
             DestroyStringInfo(SplitStringInfo(profile,i+1));
           (void) CopyMagickString(name,"xmp",MaxTextExtent);
         }


-- 
Alexander E. Patrakov