abrt version: 1.1.18 architecture: i686 Attached file: backtrace, 15029 bytes cmdline: display NovopashinMuriel2002_IsTheCriticalReynoldsNumberUniversal.ps component: ImageMagick Attached file: coredump, 4096000 bytes crash_function: __libc_message executable: /usr/bin/display kernel: 2.6.35.13-91.fc14.i686.PAE package: ImageMagick-6.6.4.1-15.fc14 rating: 3 reason: Process /usr/bin/display was killed by signal 6 (SIGABRT) release: Fedora release 14 (Laughlin) time: 1305647536 uid: 1744 How to reproduce ----- I'm running with memcpy checking installed. ImageMagick's StripString improperly uses memcpy() on overlapping regions of memory. It should use memmove() instead. --- ./ImageMagick-6.6.4-1/magick/string.c.memcpy 2010-09-03 10:02:04.000000000 -0600 +++ ./ImageMagick-6.6.4-1/magick/string.c 2011-05-17 09:59:28.440876901 -0600 @@ -2326,7 +2326,7 @@ if (q > p) if ((*q == '\'') || (*q == '"')) q--; - (void) memcpy(message,p,(size_t) (q-p+1)); + (void) memmove(message,p,(size_t) (q-p+1)); message[q-p+1]='\0'; for (p=message; *p != '\0'; p++) if (*p == '\n')
Created attachment 499401 [details] File: backtrace
How initial bug may be reproduced?
You need to be running the ld.preload library from bug 696096. I triggered the crash by using display to display a postscript file.
Can you say if version 6.7.0-2 affected too?
Yes, it is affected too.
http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=18867
Orion, thank you very much for bugreport and help.