[Pkg-gmagick-im-team] Bug#923697: imagemagick-6.q16: evaluate-sequence on different size images: crash in Buster, fine in Stretch

[Gert]

Package: imagemagick-6.q16
Version: 8:6.9.10.23+dfsg-2
Severity: normal

Dear Maintainer,
When I take 2 images of differing size, and run the following:

$ convert-im6.q16 small.pbm large.pbm -evaluate-sequence mean -verbose info:

I get an error+crash.
It only seems to happen when the small image is specified first.
What the error is, can vary depending on the width difference.
Some that I have seen:

convert: malloc.c:4028: _int_malloc: Assertion `(unsigned long) (size) >=
(unsigned long) (nb)' failed.
free(): invalid next size (normal)
double free or corruption (!prev)
free(): invalid pointer

I ran 1 image combination (see attachments) in gdb:

$ gdb convert-im6.q16
- - - 8< - - -
Reading symbols from convert-im6.q16...Reading symbols from
/usr/lib/debug/.build-
id/2b/5e71c569934692f8816b4709c5f9f068648044.debug...done.
done.
(gdb) set pagination 0
(gdb) run small.pbm large.pbm -evaluate-sequence mean -verbose info:
Starting program: /usr/bin/convert-im6.q16 small.pbm large.pbm -evaluate-
sequence mean -verbose info:
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
free(): invalid pointer

Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50      ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) quit

It worked fine when I was running Stretch, when I downgrade imagemagick-6.q16
to the Stretch version it still works.
Thank you,
Gert



-- Package-specific info:
ImageMagick program version
---------------------------
animate:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
compare:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
convert:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
composite:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
conjure:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
display:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
identify:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
import:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
mogrify:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
montage:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org
stream:  ImageMagick 6.9.10-23 Q16 x86_64 20190101 https://imagemagick.org

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (700, 'testing'), (500, 'testing-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-2-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=nl_NL.UTF-8, LC_CTYPE=nl_NL.UTF-8 (charmap=UTF-8), LANGUAGE=nl_NL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages imagemagick-6.q16 depends on:
ii  hicolor-icon-theme     0.17-2
ii  libc6                  2.28-7
ii  libmagickcore-6.q16-6  8:6.9.10.23+dfsg-2
ii  libmagickwand-6.q16-6  8:6.9.10.23+dfsg-2

Versions of packages imagemagick-6.q16 recommends:
ii  ghostscript                  9.26a~dfsg-2
pn  libmagickcore-6.q16-6-extra  <none>
ii  netpbm                       2:10.0-15.3+b2

Versions of packages imagemagick-6.q16 suggests:
pn  autotrace               <none>
pn  cups-bsd | lpr | lprng  <none>
ii  curl                    7.64.0-1
pn  enscript                <none>
ii  ffmpeg                  7:4.1.1-1
ii  gimp                    2.10.8-2
pn  gnuplot                 <none>
pn  grads                   <none>
pn  graphviz                <none>
ii  groff-base              1.22.4-2
pn  hp2xx                   <none>
pn  html2ps                 <none>
pn  imagemagick-doc         <none>
pn  libwmf-bin              <none>
ii  mplayer                 2:1.3.0-8+b4
pn  povray                  <none>
pn  radiance                <none>
ii  sane-utils              1.0.27-3.1
pn  texlive-base-bin        <none>
pn  transfig                <none>
pn  ufraw-batch             <none>
ii  xdg-utils               1.1.3-1

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: small.pbm
Type: image/x-portable-bitmap
Size: 53 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gmagick-im-team/attachments/20190303/b19577fa/attachment.pbm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: large.pbm
Type: image/x-portable-bitmap
Size: 53 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gmagick-im-team/attachments/20190303/b19577fa/attachment-0001.pbm>