[Pkg-gmagick-im-team] Bug#685903: libmagick++5: Fails an assertion due to OpenMP related problem

Willi Mann willi at wm1.at
Sun Aug 26 09:29:16 UTC 2012


Package: libmagick++5
Version: 8:6.7.7.10-3.1
Severity: important
Tags: upstream patch fixed-upstream

On some PNG images, ImageMagick fails with an assertion in the read method.
This happens because ImageMagick does not determine the maximum number of
threads in a uniform way. In my case, this broke a django web application,
so this problem could be used to conduct a DoS attack in some environments.

I have reported the problem upstream at 

http://www.imagemagick.org/discourse-server/viewtopic.php?f=23&t=21741

It turned out that the problem has been fixed after the release that's 
currently in Debian wheezy.

Could this problem be fixed please for wheezy?

Patch extracted from upstream SVN attached.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (900, 'testing'), (300, 'unstable'), (1, 'experimental')
Architecture: i386 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_AT.UTF-8, LC_CTYPE=de_AT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libmagick++5 depends on:
ii  libbz2-1.0         1.0.6-4
ii  libc6              2.13-35
ii  libfontconfig1     2.9.0-7
ii  libfreetype6       2.4.9-1
ii  libgcc1            1:4.7.1-2
ii  libglib2.0-0       2.32.3-1
ii  libgomp1           4.7.1-2
ii  libice6            2:1.0.8-2
ii  libjpeg8           8d-1
ii  liblcms2-2         2.2+git20110628-2.2
ii  liblqr-1-0         0.4.1-2
ii  libltdl7           2.4.2-1.1
ii  liblzma5           5.1.1alpha+20120614-1
ii  libmagickcore5     8:6.7.7.10-3.1
ii  libmagickwand5     8:6.7.7.10-3.1
ii  libsm6             2:1.2.1-2
ii  libstdc++6         4.7.1-2
ii  libtiff4           3.9.6-7
ii  libx11-6           2:1.5.0-1
ii  libxext6           2:1.3.1-2
ii  libxt6             1:1.1.3-1
ii  multiarch-support  2.13-35
ii  zlib1g             1:1.2.7.dfsg-13

libmagick++5 recommends no packages.

libmagick++5 suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cache_view_fix_number_threads.diff
Type: text/x-diff
Size: 1421 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gmagick-im-team/attachments/20120826/d9ad20be/attachment.diff>


More information about the Pkg-gmagick-im-team mailing list