Skip to content

File (detected as bmp) fails to open, consumes a lot of memory #2696

Description

@skanejohan

Prerequisites

  • I have written a descriptive issue title
  • I have verified that I am running the latest version of ImageSharp
  • I have verified if the problem exist in both DEBUG and RELEASE mode
  • I have searched open and closed issues to ensure it has not already been reported

ImageSharp version

3.1.3

Other ImageSharp packages and versions

N/A

Environment (Operating system, version and so on)

Windows 11

.NET Framework version

.net 8

Description

The attached (zipped) file, 126 bytes long, gives an out-of-memory error when I try to open it with the following code:

using FileStream stream = File.OpenRead("00271-imageworsener-leftshift");
SixLabors.ImageSharp.Image.Load(stream);

I believe there is a problem with the image dimensions - BmpDecoderCore.ReadImageHeaders sets this.infoHeader.Width and this.infoHeader.Height to very high values which tries to create a huge image in BmpDecoderCore.Decode().

Steps to Reproduce

See description.

Images

00271-imageworsener-leftshift.zip

Activity

  1. JimBobSquarePants commented on Mar 13, 2024

    @JimBobSquarePants
    Member

    Can you please re-upload the zip file. GitHub is showing varnish cache errors when I try to download it.

  2. skanejohan commented on Mar 13, 2024

    @skanejohan
    Author
  3. skanejohan commented on Mar 13, 2024

    @skanejohan
    Author

    Our testers reported this, and it turns out the file is from a test set used to test ImageMagick - https://github.com/rip1s/Fuzzing-ImageMagick

  4. JimBobSquarePants commented on Mar 20, 2024

    @JimBobSquarePants
    Member

    Thanks, I'll look at this today.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions