[Pkg-gmagick-im-team] Bug#832416: libimage-magick-q16-perl: Stack smash detected on i386 with perl and Image::Magick

Marvin marvin at posteo.is
Mon Jul 25 10:21:51 UTC 2016


Package: libimage-magick-q16-perl
Version: 8:6.8.9.9-5+deb8u3
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

Perl Skript err.pl:
--snip--
#!/usr/bin/perl
use strict;
use warnings;
use Image::Magick;

my  $image = Image::Magick->new;
$image->Set(size=>'100x100');
$image->ReadImage('xc:white');
$image->Set('pixel[49,49]'=>'red');

exit;
--snip--

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

run Perl Skript

   * What was the outcome of this action?

perl err.pl 
*** stack smashing detected ***: perl terminated
======= Backtrace: =========
/lib/i386-linux-gnu/i686/cmov/libc.so.6(+0x6c773)[0xb756f773]
/lib/i386-linux-gnu/i686/cmov/libc.so.6(__fortify_fail+0x45)[0xb75ffb85]
/lib/i386-linux-gnu/i686/cmov/libc.so.6(+0xfcb3a)[0xb75ffb3a]
/usr/lib/i386-linux-gnu/perl5/5.20/auto/Image/Magick/Q16/Q16.so(_fini+0x0)[0xb73242d4]
/usr/lib/i386-linux-gnu/perl5/5.20/auto/Image/Magick/Q16/Q16.so(+0xc757)[0xb72fb757]
======= Memory map: ========
08048000-08213000 r-xp 00000000 08:03 15575573   /usr/bin/perl
08213000-08214000 r--p 001ca000 08:03 15575573   /usr/bin/perl
08214000-08216000 rw-p 001cb000 08:03 15575573   /usr/bin/perl
096fb000-09824000 rw-p 00000000 00:00 0          [heap]
b66bf000-b66c4000 r-xp 00000000 08:03 15578982   /usr/lib/i386-linux-gnu/libXdmcp.so.6.0.0
b66c4000-b66c5000 rw-p 00004000 08:03 15578982   /usr/lib/i386-linux-gnu/libXdmcp.so.6.0.0
b66c5000-b66c7000 r-xp 00000000 08:03 15578980   /usr/lib/i386-linux-gnu/libXau.so.6.0.0
b66c7000-b66c8000 r--p 00001000 08:03 15578980   /usr/lib/i386-linux-gnu/libXau.so.6.0.0
b66c8000-b66c9000 rw-p 00002000 08:03 15578980   /usr/lib/i386-linux-gnu/libXau.so.6.0.0
b66c9000-b6739000 r-xp 00000000 08:03 2048053    /lib/i386-linux-gnu/libpcre.so.3.13.1
b6739000-b673b000 r--p 0006f000 08:03 2048053    /lib/i386-linux-gnu/libpcre.so.3.13.1
b673b000-b673c000 rw-p 00071000 08:03 2048053    /lib/i386-linux-gnu/libpcre.so.3.13.1
b673c000-b6760000 r-xp 00000000 08:03 15578984   /usr/lib/i386-linux-gnu/libxcb.so.1.1.0
b6760000-b6761000 r--p 00023000 08:03 15578984   /usr/lib/i386-linux-gnu/libxcb.so.1.1.0
b6761000-b6762000 rw-p 00024000 08:03 15578984   /usr/lib/i386-linux-gnu/libxcb.so.1.1.0
b6762000-b678d000 r-xp 00000000 08:03 2048188    /lib/i386-linux-gnu/libpng12.so.0.50.0
b678d000-b678e000 r--p 0002a000 08:03 2048188    /lib/i386-linux-gnu/libpng12.so.0.50.0
b678e000-b678f000 rw-p 0002b000 08:03 2048188    /lib/i386-linux-gnu/libpng12.so.0.50.0
b678f000-b67b5000 r-xp 00000000 08:03 2048159    /lib/i386-linux-gnu/libexpat.so.1.6.0
b67b5000-b67b7000 r--p 00026000 08:03 2048159    /lib/i386-linux-gnu/libexpat.so.1.6.0
b67b7000-b67b8000 rw-p 00028000 08:03 2048159    /lib/i386-linux-gnu/libexpat.so.1.6.0
b67b8000-b68de000 r-xp 00000000 08:03 2048058    /lib/i386-linux-gnu/libglib-2.0.so.0.4200.1
b68de000-b68df000 r--p 00125000 08:03 2048058    /lib/i386-linux-gnu/libglib-2.0.so.0.4200.1
b68df000-b68e0000 rw-p 00126000 08:03 2048058    /lib/i386-linux-gnu/libglib-2.0.so.0.4200.1
b68e0000-b68fc000 r-xp 00000000 08:03 2048004    /lib/i386-linux-gnu/libgcc_s.so.1
b68fc000-b68fd000 rw-p 0001b000 08:03 2048004    /lib/i386-linux-gnu/libgcc_s.so.1
b68fd000-b6915000 r-xp 00000000 08:03 15580601   /usr/lib/i386-linux-gnu/libgomp.so.1.0.0
b6915000-b6916000 rw-p 00017000 08:03 15580601   /usr/lib/i386-linux-gnu/libgomp.so.1.0.0
b6916000-b6920000 r-xp 00000000 08:03 15580071   /usr/lib/i386-linux-gnu/libltdl.so.7.3.0
b6920000-b6921000 r--p 00009000 08:03 15580071   /usr/lib/i386-linux-gnu/libltdl.so.7.3.0
b6921000-b6922000 rw-p 0000a000 08:03 15580071   /usr/lib/i386-linux-gnu/libltdl.so.7.3.0
b6922000-b693c000 r-xp 00000000 08:03 2048101    /lib/i386-linux-gnu/libz.so.1.2.8
b693c000-b693e000 r--p 00019000 08:03 2048101    /lib/i386-linux-gnu/libz.so.1.2.8
b693e000-b693f000 rw-p 0001b000 08:03 2048101    /lib/i386-linux-gnu/libz.so.1.2.8
b693f000-b694f000 r-xp 00000000 08:03 2048036    /lib/i386-linux-gnu/libbz2.so.1.0.4
b694f000-b6951000 r--p 0000f000 08:03 2048036    /lib/i386-linux-gnu/libbz2.so.1.0.4
b6951000-b6952000 rw-p 00011000 08:03 2048036    /lib/i386-linux-gnu/libbz2.so.1.0.4
b6952000-b6a9f000 r-xp 00000000 08:03 15578988   /usr/lib/i386-linux-gnu/libX11.so.6.3.0
b6a9f000-b6aa1000 r--p 0014d000 08:03 15578988   /usr/lib/i386-linux-gnu/libX11.so.6.3.0
b6aa1000-b6aa4000 rw-p 0014f000 08:03 15578988   /usr/lib/i386-linux-gnu/libX11.so.6.3.0
b6aa4000-b6ab7000 r-xp 00000000 08:03 15579072   /usr/lib/i386-linux-gnu/libXext.so.6.4.0
b6ab7000-b6ab8000 r--p 00012000 08:03 15579072   /usr/lib/i386-linux-gnu/libXext.so.6.4.0
b6ab8000-b6ab9000 rw-p 00013000 08:03 15579072   /usr/lib/i386-linux-gnu/libXext.so.6.4.0
b6ab9000-b6b66000 r-xp 00000000 08:03 12068825   /usr/lib/i386-linux-gnu/libfreetype.so.6.11.1
b6b66000-b6b6a000 r--p 000ac000 08:03 12068825   /usr/lib/i386-linux-gnu/libfreetype.so.6.11.1
b6b6a000-b6b6b000 rw-p 000b0000 08:03 12068825   /usr/lib/i386-linux-gnu/libfreetype.so.6.11.1
b6b6b000-b6bab000 r-xp 00000000 08:03 15579063   /usr/lib/i386-linux-gnu/libfontconfig.so.1.8.0
b6bab000-b6bac000 r--p 0003f000 08:03 15579063   /usr/lib/i386-linux-gnu/libfontconfig.so.1.8.0
b6bac000-b6bad000 rw-p 00040000 08:03 15579063   /usr/lib/i386-linux-gnu/libfontconfig.so.1.8.0
b6bad000-b6d81000 r-xp 00000000 08:03 12068392   /usr/lib/i386-linux-gnu/libfftw3.so.3.4.4
b6d81000-b6d8d000 r--p 001d4000 08:03 12068392   /usr/lib/i386-linux-gnu/libfftw3.so.3.4.4
b6d8d000-b6d8e000 rw-p 001e0000 08:03 12068392   /usr/lib/i386-linux-gnu/libfftw3.so.3.4.4
b6d8e000-b6da1000 r-xp 00000000 08:03 12068416   /usr/lib/i386-linux-gnu/liblqr-1.so.0.3.2
b6da1000-b6da2000 rw-p 00012000 08:03 12068416   /usr/lib/i386-linux-gnu/liblqr-1.so.0.3.2
b6da2000-b6dff000 r-xp 00000000 08:03 15579123   /usr/lib/i386-linux-gnu/liblcms2.so.2.0.6
b6dff000-b6e00000 r--p 0005c000 08:03 15579123   /usr/lib/i386-linux-gnu/liblcms2.so.2.0.6
b6e00000-b6e04000 rw-p 0005d000 08:03 15579123   /usr/lib/i386-linux-gnu/liblcms2.so.2.0.6
b6e04000-b6feb000 r-xp 00000000 08:03 12070291   /usr/lib/i386-linux-gnu/libperl.so.5.20.2
b6feb000-b6fef000 r--p 001e6000 08:03 12070291   /usr/lib/i386-linux-gnu/libperl.so.5.20.2
b6fef000-b6ff2000 rw-p 001ea000 08:03 12070291   /usr/lib/i386-linux-gnu/libperl.so.5.20.2
b6ff2000-b7288000 r-xp 00000000 08:03 15576770   /usr/lib/i386-linux-gnu/libMagickCore-6.Q16.so.2.0.0
b7288000-b7293000 r--p 00295000 08:03 15576770   /usr/lib/i386-linux-gnu/libMagickCore-6.Q16.so.2.0.0
b7293000-b72d1000 rw-p 002a0000 08:03 15576770   /usr/lib/i386-linux-gnu/libMagickCore-6.Q16.so.2.0.0
b72d1000-b72ef000 rw-p 00000000 00:00 0 
b72ef000-b733d000 r-xp 00000000 08:03 16179846   /usr/lib/i386-linux-gnu/perl5/5.20/auto/Image/Magick/Q16/Q16.so
b733d000-b733e000 r--p 0004d000 08:03 16179846   /usr/lib/i386-linux-gnu/perl5/5.20/auto/Image/Magick/Q16/Q16.so
b733e000-b7348000 rw-p 0004e000 08:03 16179846   /usr/lib/i386-linux-gnu/perl5/5.20/auto/Image/Magick/Q16/Q16.so
b7348000-b74d1000 r--p 00000000 08:03 15581303   /usr/lib/locale/locale-archive
b74d1000-b74d2000 rw-p 00000000 00:00 0 
b74d2000-b74da000 r-xp 00000000 08:03 2064394    /lib/i386-linux-gnu/i686/cmov/libcrypt-2.19.so
b74da000-b74db000 r--p 00007000 08:03 2064394    /lib/i386-linux-gnu/i686/cmov/libcrypt-2.19.so
b74db000-b74dc000 rw-p 00008000 08:03 2064394    /lib/i386-linux-gnu/i686/cmov/libcrypt-2.19.so
b74dc000-b7503000 rw-p 00000000 00:00 0 
b7503000-b76aa000 r-xp 00000000 08:03 2064391    /lib/i386-linux-gnu/i686/cmov/libc-2.19.so
b76aa000-b76ac000 r--p 001a7000 08:03 2064391    /lib/i386-linux-gnu/i686/cmov/libc-2.19.so
b76ac000-b76ad000 rw-p 001a9000 08:03 2064391    /lib/i386-linux-gnu/i686/cmov/libc-2.19.so
b76ad000-b76b0000 rw-p 00000000 00:00 0 
b76b0000-b76c8000 r-xp 00000000 08:03 2064387    /lib/i386-linux-gnu/i686/cmov/libpthread-2.19.so
b76c8000-b76c9000 r--p 00017000 08:03 2064387    /lib/i386-linux-gnu/i686/cmov/libpthread-2.19.so
b76c9000-b76ca000 rw-p 00018000 08:03 2064387    /lib/i386-linux-gnu/i686/cmov/libpthread-2.19.so
b76ca000-b76cd000 rw-p 00000000 00:00 0 
b76cd000-b7711000 r-xp 00000000 08:03 2064396    /lib/i386-linux-gnu/i686/cmov/libm-2.19.so
b7711000-b7712000 r--p 00043000 08:03 2064396    /lib/i386-linux-gnu/i686/cmov/libm-2.19.so
b7712000-b7713000 rw-p 00044000 08:03 2064396    /lib/i386-linux-gnu/i686/cmov/libm-2.19.so
b7713000-b7716000 r-xp 00000000 08:03 2064395    /lib/i386-linux-gnu/i686/cmov/libdl-2.19.so
b7716000-b7717000 r--p 00002000 08:03 2064395    /lib/i386-linux-gnu/i686/cmov/libdl-2.19.so
b7717000-b7718000 rw-p 00003000 08:03 2064395    /lib/i386-linux-gnu/i686/cmov/libdl-2.19.so
b773f000-b7740000 rw-p 00000000 00:00 0 
b7740000-b7742000 r-xp 00000000 08:03 12070932   /usr/lib/i386-linux-gnu/ImageMagick-6.8.9/modules-Q16/coders/xc.so
b7742000-b7743000 r--p 00001000 08:03 12070932   /usr/lib/i386-linux-gnu/ImageMagick-6.8.9/modules-Q16/coders/xc.so
b7743000-b7744000 rw-p 00002000 08:03 12070932   /usr/lib/i386-linux-gnu/ImageMagick-6.8.9/modules-Q16/coders/xc.so
b7744000-b7746000 rw-p 00000000 00:00 0 
b7746000-b7747000 r-xp 00000000 00:00 0          [vdso]
b7747000-b7749000 r--p 00000000 00:00 0          [vvar]
b7749000-b7768000 r-xp 00000000 08:03 2048510    /lib/i386-linux-gnu/ld-2.19.so
b7768000-b7769000 r--p 0001f000 08:03 2048510    /lib/i386-linux-gnu/ld-2.19.so
b7769000-b776a000 rw-p 00020000 08:03 2048510    /lib/i386-linux-gnu/ld-2.19.so
bf8c2000-bf8e3000 rw-p 00000000 00:00 0          [stack]
Abort

   * What outcome did you expect instead?

No ouput. 
Image::Magick should draw one point into the created image in memory, then perl script should exit without error.

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libimage-magick-q16-perl depends on:
ii  libc6                       2.19-18+deb8u4
ii  libmagickcore-6.q16-2       8:6.8.9.9-5+deb8u3
ii  libperl5.20                 5.20.2-3+deb8u5
ii  perl                        5.20.2-3+deb8u5
ii  perl-base [perlapi-5.20.2]  5.20.2-3+deb8u5

libimage-magick-q16-perl recommends no packages.

Versions of packages libimage-magick-q16-perl suggests:
pn  imagemagick-doc  <none>

-- debconf-show failed



More information about the Pkg-gmagick-im-team mailing list