[Pkg-gnome-extras-maintainers] Bug#1149658: gimp: Backticks around SVG crash file-svg plugin

[Bernhard Kuemel]

Package: gimp
Version: 3.0.4-3+deb13u11
Severity: normal
Tags: upstream
X-Debbugs-Cc: bernhard at bksys.at

Dear Maintainer,

   * What led up to the situation?

ChatGPT created an SVG and put it in backticks to display the source rather than the image.

```xml
<svg width="600" height="600" xmlns="http://www.w3.org/2000/svg">
  <style type="text/css"></style>

  <rect x="0" y="0" width="100%" height="100%" fill="white" />

  <!-- Elliptic trajectory: focus at Earth's centre (300,325) -->
  <ellipse cx="300" cy="200" rx="82.916" ry="150"
           fill="none" stroke="green" stroke-width="2" />

  <!-- Parabolic trajectory for constant gravity / flat Earth -->
  <path d="M 185 600 Q 300 -500 415 600"
        fill="none" stroke="red" stroke-width="2" />

  <rect x="0" y="129" width="100%" height="100%" fill="white" />

  <!-- Hidden portions -->
  <ellipse cx="300" cy="200" rx="82.916" ry="150"
           fill="none" stroke="green" stroke-width="2"
           stroke-dasharray="5 5" />

  <path d="M 185 600 Q 300 -500 415 600"
        fill="none" stroke="red" stroke-width="2"
        stroke-dasharray="5 5" />

  <line x1="0" y1="129" x2="600" y2="129"
        stroke="red" stroke-width="2" />

  <!-- Earth -->
  <circle cx="300" cy="325" r="200"
          fill="none" stroke="green" stroke-width="2" />

  <!-- Earth's centre / focus -->
  <circle cx="300" cy="325" r="2" fill="black" />

  <rect x="0" y="0" width="600" height="600"
        stroke="black" stroke-width="3" fill="none" />
</svg>
```

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

I clicked the copy button which also copied the backticks and pasted it in a .svg file.
I opened the image in gimp.

   * What was the outcome of this action?

GIMP Message

Plug-in crashed: "file-svg"
(/usr/lib/x86_64-linux-gnu/gimp/3.0/plug-ins/file-svg/file-svg)

The dying plug-in may have messed up GIMP's internal state. You may want to save your images and restart GIMP to be on the safe side.

GIMP Message

Opening '/home/bernhard/x.svg' failed: Procedure 'file-svg-load' returned no return values

   * What outcome did you expect instead?

A message stating that the image is invalid.



-- System Information:
Debian Release: 13.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.111+deb13-amd64 (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages gimp depends on:
ii  gimp-data            3.0.4-3+deb13u11
ii  gir1.2-gimp-3.0      3.0.4-3+deb13u11
ii  graphviz             2.42.4-3
ii  libaa1               1.4p5-51.1+b1
ii  libappstream-glib8   0.8.3-1
ii  libarchive13t64      3.7.4-4+deb13u1
ii  libasound2t64        1.2.14-1+deb13u1
ii  libbabl-0.1-0        1:0.1.114-2
ii  libbz2-1.0           1.0.8-6
ii  libc6                2.41-12+deb13u4
ii  libcairo2            1.18.4-1+b1
ii  libcfitsio10t64      4.6.2-2
ii  libfontconfig1       2.15.0-2.3
ii  libfreetype6         2.13.3+dfsg-1+deb13u1
ii  libgcc-s1            14.2.0-19
ii  libgdk-pixbuf-2.0-0  2.42.12+dfsg-4+deb13u1
ii  libgegl-0.4-0t64     1:0.4.62-2+deb13u2
ii  libgexiv2-2          0.14.3-1+b1
ii  libgimp-3.0-0        3.0.4-3+deb13u11
ii  libglib2.0-0t64      2.84.4-3~deb13u5
ii  libgomp1             14.2.0-19
ii  libgs10              10.05.1~dfsg-1+deb13u2
ii  libgtk-3-0t64        3.24.49-3
ii  libgudev-1.0-0       238-6
ii  libharfbuzz0b        10.2.0-1+deb13u1
ii  libheif1             1.23.4-1~deb13u1
ii  libjpeg62-turbo      1:2.1.5-4
ii  libjson-glib-1.0-0   1.10.6+ds-2
ii  libjxl0.11           0.11.2-0.1~deb13u2
ii  liblcms2-2           2.16-2+deb13u2
ii  liblzma5             5.8.1-1+deb13u1
ii  libmypaint-1.5-1     1.6.0-4
ii  libopenexr-3-1-30    3.1.13-2
ii  libopenjp2-7         2.5.3-2.1~deb13u2
ii  libpango-1.0-0       1.56.3-1
ii  libpangocairo-1.0-0  1.56.3-1
ii  libpangoft2-1.0-0    1.56.3-1
ii  libpng16-16t64       1.6.48-1+deb13u6
ii  libpoppler-glib8t64  25.03.0-5+deb13u4
ii  librsvg2-2           2.60.0+dfsg-1
ii  librsvg2-common      2.60.0+dfsg-1
ii  libstdc++6           14.2.0-19
ii  libtiff6             4.7.0-3+deb13u3
ii  libwebp7             1.5.0-0.1
ii  libwebpdemux2        1.5.0-0.1
ii  libwebpmux3          1.5.0-0.1
ii  libwmf-0.2-7         0.2.13-1.1+b3
ii  libwmflite-0.2-7     0.2.13-1.1+b3
ii  libx11-6             2:1.8.12-1
ii  libxcursor1          1:1.2.3-1
ii  libxext6             2:1.3.4-1+b3
ii  libxfixes3           1:6.0.0-2+b4
ii  libxmu6              2:1.1.3-3+b4
ii  libxpm4              1:3.5.17-1+deb13u1
ii  python3-gi           3.50.0-4+b1
ii  xdg-utils            1.2.1-2
ii  zlib1g               1:1.3.dfsg+really1.3.1-1+b1

Versions of packages gimp recommends:
ii  ghostscript  10.05.1~dfsg-1+deb13u2

Versions of packages gimp suggests:
pn  gimp-data-extras          <none>
pn  gimp-help-en | gimp-help  <none>
ii  gvfs-backends             1.57.2-2+deb13u1
ii  python3                   3.13.5-1

-- no debconf information