{"action":"opened","issue":{"url":"https://api.github.com/repos/ImageMagick/ImageMagick/issues/444","repository_url":"https://api.github.com/repos/ImageMagick/ImageMagick","labels_url":"https://api.github.com/repos/ImageMagick/ImageMagick/issues/444/labels{/name}","comments_url":"https://api.github.com/repos/ImageMagick/ImageMagick/issues/444/comments","events_url":"https://api.github.com/repos/ImageMagick/ImageMagick/issues/444/events","html_url":"https://github.com/ImageMagick/ImageMagick/issues/444","id":224530449,"number":444,"title":"memory leak in ReadAAIImage","user":{"login":"bestshow","id":5211744,"avatar_url":"https://avatars2.githubusercontent.com/u/5211744?v=3","gravatar_id":"","url":"https://api.github.com/users/bestshow","html_url":"https://github.com/bestshow","followers_url":"https://api.github.com/users/bestshow/followers","following_url":"https://api.github.com/users/bestshow/following{/other_user}","gists_url":"https://api.github.com/users/bestshow/gists{/gist_id}","starred_url":"https://api.github.com/users/bestshow/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bestshow/subscriptions","organizations_url":"https://api.github.com/users/bestshow/orgs","repos_url":"https://api.github.com/users/bestshow/repos","events_url":"https://api.github.com/users/bestshow/events{/privacy}","received_events_url":"https://api.github.com/users/bestshow/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-04-26T16:41:24Z","updated_at":"2017-04-26T16:41:24Z","closed_at":null,"body":"on ImageMagick 7.0.5-5\r\n\r\nThe ReadAAIImage function in aai.c:165 allows attackers to cause a denial of service (memory leak) via a crafted file.\r\n\r\n#identify $FILE\r\n=================================================================\r\n\r\nDirect leak of 640 byte(s) in 1 object(s) allocated from:\r\n    #0 0x7fba5031ab58 in __interceptor_malloc ../../../../libsanitizer/asan/asan_malloc_linux.cc:62\r\n    #1 0x43ecdb in AcquireMagickMemory MagickCore/memory.c:463\r\n    #2 0x43ed2f in AcquireQuantumMemory MagickCore/memory.c:536\r\n    #3 0x50b069 in ReadAAIImage coders/aai.c:165\r\n    #4 0x7f27a7 in ReadImage MagickCore/constitute.c:497\r\n    #5 0x9e41a7 in ReadStream MagickCore/stream.c:1045\r\n    #6 0x7f1855 in PingImage MagickCore/constitute.c:226\r\n    #7 0x7f1e08 in PingImages MagickCore/constitute.c:327\r\n    #8 0xbb97b4 in IdentifyImageCommand MagickWand/identify.c:319\r\n    #9 0xc10308 in MagickCommandGenesis MagickWand/mogrify.c:183\r\n    #10 0x40f839 in MagickMain utilities/magick.c:149\r\n    #11 0x40fa06 in main utilities/magick.c:180\r\n    #12 0x7fba4b629b34 in __libc_start_main (/lib64/libc.so.6+0x21b34)\r\n\r\n640 byte(s) leaked in 1 allocation(s).\r\n\r\ntestcase:https://github.com/bestshow/p0cs/blob/master/memory-leak-in-ReadAAIImage-6.aai\r\nAuthor: ADLab of Venustech\r\n"}}
{"actor":{"display_login":"bestshow"}}