[Pkg-gmagick-im-team] Bug#671176: security upgrade breaks Read() for me

[Vincent Fourmond]

severity 671176 important
tag 671176 moreinfo
thanks

  Hello,

On Wed, May 2, 2012 at 11:50 AM, Steinar H. Gunderson
<sgunderson at bigfoot.com> wrote:
> I have a PerlMagick application that does essentially (for an Image::Magick
> object):
>
>  $img->Set(size=>'1280x24');
>  $err = $img->Read('xc:white');
>
> After upgrading to 6.6.0.4-3+squeeze2 (the security fix from a few days ago),
> this now breaks, with $err now being
>
>  Exception 435: unable to open image `xc:white':  @ error/blob.c/OpenBlob/2489
>
> Downgrading libmagickcore3 to 6.6.0.4-3 immediately fixes the problem.
> (I don't have -squeeze1 immediately handy, but it's been running fine
> on that version for a while.)

  I don't have the problem:

~/tmp/im cat pm
#!/usr/bin/perl
use Image::Magick;
$p = new Image::Magick;
$p->Set(size=>'1280x24');
$err = $p->Read('xc:white');
print $err
print $p;

~/tmp/im perl pm
Image::Magick=ARRAY(0x1787d48)

~/tmp/im dpkg -l perlmagick libmagickcore3
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                  Version               Description
+++-=====================-=====================-==========================================================
ii  libmagickcore3        8:6.6.0.4-3+squeeze2  low-level image
manipulation library
ii  perlmagick            8:6.6.0.4-3+squeeze2  Perl interface to the
ImageMagick graphics routines


  Moreover, I don't see how any of the changes from +squeeze1 to
+squeeze2 (or, for that matter, from -3 to -3+squeeze2) could trigger
any bug related to the xc image creator (changes are related to the
JPEG properties reading code).

  Either you're telling me only half of the story ;-), or the problem
is linked to a defective install. Did you check the package using
debsums ? Could you provide us with a minimal example that triggers
the problem ?

  Cheers,

      Vincent