[Pkg-gmagick-im-team] Bug#876482: imagemagick: Generates wrong image with annotate (missing character, , strange lines)

[Johann Vieselthaler]

Package: imagemagick
Version: 8:6.7.7.10-5+deb7u16
Severity: normal
Tags: newcomer


I have a problem generating text with the annotate command since update 
from 8:6.7.7.10-5+deb7u4 to 8:6.7.7.10-5+deb7u16.
Version 8:6.7.7.10-5+deb7u4 works correctly, version 
8:6.7.7.10-5+deb7u16 does not.

The text in the generated image is wrong. Some lines are missing. One 
line is drawn from the end of the text back to the beginning.
You can reproduce it with the following command:
convert -size 320x100 xc:white -font times-bold.ttf -pointsize 72 -fill 
white -stroke black -strokewidth 1  -annotate +25+65 'Anthony' 
font_stroke_3.jpg
It's important to use the attached font, since with some other fonts the 
problem occurs, with others not.

I can give you some additional clue, where to look for the bug:
The difference between version 8:6.7.7.10-5+deb7u4 and version 
8:6.7.7.10-5+deb7u16 are approximately 260 patches (located in the 
directory debian/patches/ if you have installed the debian sources)
I identified patch 
0221-CVE-2017-10928-1-4-Prepare-fix-for-CVE-2017-10928-Ensure-token-does-not-overflow.patch 
as the source of the bug.
If you compile the package from debian sources without that patch, the 
bug is gone. With that patch included, bug is there.
So for now I use the self compiled library without patch 0221.



-- System Information:
Debian Release: 7.11 (Wheezy)
Architecture: amd64 (x86_64)
Foreign Architectures: i386

imagemagick recommends no packages.

imagemagick suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: times-bold.ttf
Type: application/x-font-ttf
Size: 333900 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gmagick-im-team/attachments/20170922/1626e0e9/attachment-0001.bin>