Page 1 of 1
Backport of security bug and problem
Posted: 2014-12-27T12:50:58-07:00
by broucaries
Hi,
http://trac.imagemagick.org/changeset/17297 is problematic.
Try convert rose: rose.xpm
then display rose.xpm
Have you an idea ?
Bastien
Re: Backport of security bug and problem
Posted: 2014-12-27T13:04:57-07:00
by magick
We reverted this patch in Subversion until we can investigate and come up with a proper patch. Thanks for alerting us to the problem.
Re: Backport of security bug and problem
Posted: 2014-12-28T06:36:26-07:00
by broucaries
The original reporter propose a new patch:
https://bugs.debian.org/773980
What do you think ?
Bastien
Re: Backport of security bug and problem
Posted: 2014-12-28T07:01:22-07:00
by magick
That patch works along with a slight mod to CopyXPMColor():
Code: Select all
static size_t CopyXPMColor(char *destination,const char *source,size_t length)
{
register const char
*p;
p=source;
while (length-- && (*p != '\0'))
*destination++=(*p++);
if (length != 0)
*destination='\0';
return((size_t) (p-source));
}