Bug#622591: crash in ChertVersion::create

[Olly Betts]

On Wed, Apr 13, 2011 at 12:22:28PM -0400, Joey Hess wrote:
> Here is a minimal test case to reproduce this bug. I've gotten all
> content and ikiwiki out of the picture, we're down to 2 perl modules
> and perl itself.
> 
> #!/usr/bin/perl
> use Image::Magick;
> use Search::Xapian;
> $db=Search::Xapian::WritableDatabase->new("/tmp/xap",
> 	Search::Xapian::DB_CREATE());
> 
> Note that order matters. If Search::Xapian is loaded before
> Image::Magic, no crash. This strongly points to an Image::Magick bug to
> me, or possibly, multiple interacting bugs.

Progress!

> ==11278== Conditional jump or move depends on uninitialised value(s)
> ==11278==    at 0x80B5DCB: Perl_re_compile (in /usr/bin/perl)
[...]
> ==11278== Conditional jump or move depends on uninitialised value(s)
> ==11278==    at 0x80B5DCB: Perl_re_compile (in /usr/bin/perl)

Probably just some insane optimisation.  Not an invalid read/write
anyway.

> ==11278== Invalid write of size 2
> ==11278==    at 0x92C0301: ??? (in /lib/libuuid.so.1.3.0)
> ==11278==    by 0x92C122E: uuid_generate (in /lib/libuuid.so.1.3.0)
[...]
> ==11278==  Address 0x30 is not stack'd, malloc'd or (recently) free'd

And then we hit the actual issue.

I'm on VAC for 3 weeks as of later today, but should be in email
contact.  Any upload to fix this might need NMU-ing though.

Cheers,
    Olly