[Pkg-gmagick-im-team] Bug#836958: imagemagick-common: PHP processing of animated GIF is broken

[Vladimir Finko]

Package: imagemagick-common
Version: 8:6.8.9.9-5+deb8u4
Severity: normal

Dear Maintainer,

After updating from 8:6.8.9.9-5+deb8u3 the following error occurred.

In a glance, after certain animated gif image processing in PHP script the further execution of any external calls via `popen()` or `proc_open()` functions leads to the error. The example error  message is "PHP Warning:  popen(ls,w): Cannot allocate memory".

And actually it doesn't matter what external call you want to execute. It could be even simple system commands like `ls` or `pwd`. For the moment of `popen()` the system has more that enough available memory (tested on 4GB virtual machine and 2GB of system memory was free).
Expected results are certainly just the output of external call.

The simplest reproducing script can be found at the link

https://gist.github.com/fvovan/bc431af28c5c59b44e665928fbcb5ee5
You can put any animated gif image there which size is bigger than 80-100kB

Thanks for investigating this.
Regards,

-- System Information:
Debian Release: 8.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages imagemagick-common depends on:
ii  dpkg  1.17.27

imagemagick-common recommends no packages.

imagemagick-common suggests no packages.

-- Configuration Files:
/etc/ImageMagick-6/policy.xml changed:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policymap [
	<!ELEMENT policymap (policy)+>
	<!ELEMENT policy (#PCDATA)>
	<!ATTLIST policy domain (delegate|coder|filter|path|resource) #IMPLIED>
	<!ATTLIST policy name CDATA #IMPLIED>
	<!ATTLIST policy rights CDATA #IMPLIED>
	<!ATTLIST policy pattern CDATA #IMPLIED>
	<!ATTLIST policy value CDATA #IMPLIED>
]>
<policymap>
	<policy domain="coder" rights="none" pattern="EPHEMERAL" />
	<policy domain="coder" rights="none" pattern="HTTPS" />
	<policy domain="coder" rights="none" pattern="HTTP" />
	<policy domain="coder" rights="none" pattern="URL" />
	<policy domain="coder" rights="none" pattern="FTP" />
	<policy domain="coder" rights="none" pattern="MVG" />
	<policy domain="coder" rights="none" pattern="MSL" />
	<policy domain="coder" rights="none" pattern="TEXT" />
	<policy domain="coder" rights="none" pattern="LABEL" />
	<policy domain="coder" rights="none" pattern="SHOW" />
	<policy domain="coder" rights="none" pattern="WIN" />
	<policy domain="coder" rights="none" pattern="PLT" />
	<policy domain="path" rights="none" pattern="@*" />
</policymap>


-- no debconf information