Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20160927142500.3x26pcrhw5x4nt6s@jwilk.net>
Date: Tue, 27 Sep 2016 16:25:00 +0200
From: Jakub Wilk <jwilk@...lk.net>
To: oss-security@...ts.openwall.com
Subject: Re: ImageMagick identify "d:" hangs

* Bob Friesenhahn <bfriesen@...ple.dallas.tx.us>, 2016-09-27, 08:48:
>>From my own investigations, I used
>
>  identify -debug all "d:"
>
>and see that a temporary file is reported to be created and then the 
>program hangs which no apparent CPU usage.

strace tells me that it waits for input on stdin.
This is a simpler way to make it "hang":

   identify -

-- 
Jakub Wilk

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.