convert crashed with SIGSEGV in DrawAffineImage()

Bug #184397 reported by Adam Dunn
18
This bug affects 1 person
Affects Status Importance Assigned to Milestone
imagemagick (Debian)
Fix Released
Unknown
imagemagick (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: imagemagick

As you can see, this is from an automated crash report, and I was doing multiple things, most of which shouldn't have been using convert (mplayer playing a movie, while make was building something). I'll have to look through my own crash report to find out what happened...

ProblemType: Crash
Architecture: amd64
Date: Sat Jan 19 10:35:47 2008
DistroRelease: Ubuntu 8.04
ExecutablePath: /usr/bin/convert
NonfreeKernelModules: nvidia
Package: imagemagick 7:6.2.4.5.dfsg1-2ubuntu1
PackageArchitecture: amd64
ProcCmdline: convert /home/adam/simon-0.1-alpha-1/images/icons/applications-other.svg xmp:-
ProcCwd: /home/adam
ProcEnviron:
 LANGUAGE=en_CA:en
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11:/usr/games
 LANG=en_CA.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: imagemagick
StacktraceTop:
 DrawAffineImage () from /usr/lib/libMagick.so.9
 DrawPrimitive () from /usr/lib/libMagick.so.9
 DrawImage () from /usr/lib/libMagick.so.9
 ?? () from /usr/lib/libMagick.so.9
 ReadImage () from /usr/lib/libMagick.so.9
Title: convert crashed with SIGSEGV in DrawAffineImage()
Uname: Linux Hopper 2.6.24-4-generic #1 SMP Mon Jan 14 18:19:11 UTC 2008 x86_64 GNU/Linux
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin plugdev scanner video
SegvAnalysis:
 Segfault happened at: 0x7fe28d9290c6 <DrawAffineImage+1718>: mov %ax,-0x2(%rbx)
 PC (0x7fe28d9290c6) ok
 source "%ax" ok
 destination "-0x2(%rbx)" (0x7fe28de75006) in non-writable VMA region: 0x7fe28de75000-0x7fe28deb2000 r--p /tmp/magick-XXpuXCD7
SegvReason: writing VMA /tmp/magick-XXpuXCD7

Tags: apport-crash
Revision history for this message
Adam Dunn (dunnadam) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Symbolic stack trace

StacktraceTop:DrawAffineImage (image=0x871f60, composite=0x99c600, affine=<value optimized out>)
DrawPrimitive (image=0x871f60, draw_info=0x9859e0, primitive_info=0x931bd0)
DrawImage (image=0x871f60, draw_info=0x7a2b70) at magick/draw.c:3037
ReadMVGImage (image_info=0x86dde0, exception=0x7fff96000680) at coders/mvg.c:207
ReadImage (image_info=0x866fa0, exception=0x7fff96000680) at magick/constitute.c:392

Revision history for this message
Apport retracing service (apport) wrote : Symbolic threaded stack trace
Changed in imagemagick:
importance: Undecided → Medium
Revision history for this message
Adam Dunn (dunnadam) wrote :

Upon examining the ProcCmdline, it looks like convert was trying to convert an svg from the new speech-to-text package "simon". I downloaded the simon-0.1-alpha-1 (http://sourceforge.net/project/showfiles.php?group_id=190872) package from sourceforge, tried to compile it, and got this crash. You can get the particular svg file from (http://speech2text.svn.sourceforge.net/viewvc/speech2text/trunk/images/icons/applications-other.svg?revision=226&view=markup). I'm not an svg expert, but the file in question seems to render fine in Firefox 2.0.0.11 and Inkscape 0.45.1. Maybe somebody who knows more about svg can determine if this is the fault of the file, or of imagemagick.

Revision history for this message
Adam Dunn (dunnadam) wrote :

Err, sorry, looks like I wasn't compiling it. The only way I can think of that convert would have been reading that file, is if tracker had requested it to be processed. So the call to convert must have come from trackerd, but that doesn't really affect the bug report.

visibility: private → public
Changed in imagemagick (Ubuntu):
status: New → Triaged
Kees Cook (kees)
description: updated
Changed in imagemagick (Debian):
status: Unknown → Fix Released
Revision history for this message
Fabrice Coutadeur (fabricesp) wrote :

Fix in Debian has been synced since then. Closing as Fix Released.

Changed in imagemagick (Ubuntu):
status: Triaged → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.