[Magick-bugs] Re: Missing error handling for method AcquireSemaphoreInfo()

[Stefan]

Hi ppl!

I've found out, that it really was a concurrency problem.

Wrapping all of the client app's wand constructor and destructor calls in locks fixed it for libmagick9 7:6.2.4.5.dfsg1-0.14 of debian/etch distribution.

(There seems to be a vulnerable access to the global variable 'id' in wand.c function 'AcquireWandId()', line 96
that still exists in version 6.3.5-7.)

Since I can't/won't test the new libmagick 6.3.5-7 where some wand code has changed I can't say if the problem would still occur in this version.

Regards,
Stefan

--
libmagick9 7:6.2.4.5.dfsg1-0.14
debian/linux