Re: Cve issue discussion

[Bob Friesenhahn <bfriesen () simple dallas tx us>]

On Mon, 7 Aug 2017, Glenn Randers-Pehrson wrote:

> It's not causing a crash, just a delay.  You'll safely get either an OOM
> message or an EOF message.and no memory leak.

On some systems, the memory is not returned from the running process 
to the OS so this results in continued high memory usage.  Allocations 
done using mmap() may be returned to the OS.

For a device like a printer a 2GB allocation might be rejected 
outright, but a smaller allocation might be accepted.

Bob
--
Bob Friesenhahn
bfriesen () simple dallas tx us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/