https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6491

diff --git a/ChangeLog b/ChangeLog
index f35dff2e6b669a36079fc1cbc0d31172963425ef..004c8412077efbad98570d8db33ade3a9ce180d5 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,6 +2,8 @@
   * Do not refer to page in OptimizeLayerFrames (reference
     https://github.com/ImageMagick/ImageMagick/pull/987).
   * PerlMagick unit tests pass again.
+  * Fixed numerous use of uninitialized values, integer overflow,
+    memory exceeded, and timeouts (credit to OSS Fuzz).
 
 2018-02-18  7.0.7-23 Cristy  <quetzlzacatenango@image...>
   * Release ImageMagick version 7.0.0-23, GIT revision 22969:c6b3a22b0:20180218.

diff --git a/coders/hdr.c b/coders/hdr.c
index 1feb1a6b083497ee74160a7c584b7dadeb15edce..74dd24c1181e5beed148d0daaf52998241b99ed0 100644 (file)
--- a/coders/hdr.c
+++ b/coders/hdr.c
@@ -403,6 +403,7 @@ static Image *ReadHDRImage(const ImageInfo *image_info,ExceptionInfo *exception)
     sizeof(*pixels));
   if (pixels == (unsigned char *) NULL)
     ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
+  (void) ResetMagickMemory(pixels,0,4*image->columns*sizeof(*pixels));
   for (y=0; y < (ssize_t) image->rows; y++)
   {
     if (image->compression != RLECompression)