The original crash I got was from Debian 5, 32bit x86, running in a vm. I
was able to reproduce it after building from the source package in Debian
(which builds with debug symbols). The stack trace from the crash was
useless however.

What other info do you want? I used the same environment variable as I
posted earlier to trigger.

--
Silvio

On Tue, Jun 7, 2011 at 11:31 PM, Bastien ROUCARIES <
roucaries.bast...@gmail.com> wrote:

> Could you give me a test case ?
>
> On Tue, May 31, 2011 at 4:53 AM, Silvio Cesare <silvio.ces...@gmail.com>
> wrote:
> > Sorry again for the delays.
> >
> > It looks like an off-by-1 in the option parsing code for long options. My
> > patch is is included.
> >
> > --
> > Silvio
> >
> > diff -ru imagemagick-6.3.7.9.dfsg2/magick/option.c
> > imagemagick-6.3.7.9.dfsg2-fix/magick/option.c
> > --- imagemagick-6.3.7.9.dfsg2/magick/option.c   2007-12-13
> > 07:41:12.000000000 +1100
> > +++ imagemagick-6.3.7.9.dfsg2-fix/magick/option.c       2011-05-31
> > 12:31:27.000000000 +1000
> > @@ -1866,7 +1866,7 @@
> >      while (((isspace((int) ((unsigned char) *p)) == 0) && (*p != ','))
> &&
> >             (*p != '\0'))
> >      {
> > -      if ((q-token) >= MaxTextExtent)
> > +      if ((q-token) >= (MaxTextExtent - 1))
> >          break;
> >        *q++=(*p++);
> >      }
> >
> >
> > On Mon, May 30, 2011 at 7:38 PM, Bastien ROUCARIES
> > <roucaries.bast...@gmail.com> wrote:
> >>
> >> Package: imagemagick
> >> Version: 8:6.6.0.4-3
> >>
> >> Could you send me the info asked ?
> >>
> >> Thanks
> >>
> >> Bastien
> >
> >
>

Reply via email to