X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/52a9d23e2c11c62e411e6c5f1b4f514507aad1c1..fc7119505840b4156c5a13f1dab0cafbf3af2700:/doc/bugs/imagemagick_6.9.8_test_suite_failure.mdwn

diff --git a/doc/bugs/imagemagick_6.9.8_test_suite_failure.mdwn b/doc/bugs/imagemagick_6.9.8_test_suite_failure.mdwn
index 847ad5811..d6af77111 100644
--- a/doc/bugs/imagemagick_6.9.8_test_suite_failure.mdwn
+++ b/doc/bugs/imagemagick_6.9.8_test_suite_failure.mdwn
@@ -44,3 +44,28 @@ t/img.t, like so:
 
 Is this is a known problem and is there maybe a fix for this issue?
 
+> This was not a known bug before your report. It looks as though every
+> time we use `Image::Magick->Read(":foo.png")`, which is (or was)
+> ImageMagick's syntax for opening a file of unknown type without
+> interpreting a prefix containing `:` as a special directive instead
+> of part of the filename, it fails.
+>
+> Please try re-running the test with better diagnostics using
+> [commit 4ace7dbb7](http://source.ikiwiki.branchable.com/?p=source.git;a=commitdiff;h=4ace7dbb7)
+> and report what it says. --[[smcv]]
+
+>> I see the same issue on Fedora, with ImageMagic 6.9.9-19:
+>> 
+>>     #   Failed test at t/img.t line 119.
+>>     #          got: 'no image: Exception 435: unable to open image `:t/tmp/out/imgconversions/10x-redsquare.png': No such file or directory @ error/blob.c/OpenBlob/2701'
+>>     #     expected: '10x10'
+>>     [...]
+>> 
+>> So it seems, that an empty coder prefix is not accepted anymore. To me it seems that [this commit](https://github.com/ImageMagick/ImageMagick/commit/4bc9b6b) changed the behavior. Unfortunately, the commit message doens't tell us about the reasons behind. The commit is included from version 6.9.8-3 on.
+
+>>> This should now be [[fixed|done]] in git and in the next release.
+>>> The test failure does not indicate a loss of functionality, unless
+>>> you are using uncommon image formats enabled with
+>>> `img_allowed_formats: [everything]`, which is a potential security
+>>> vulnerability because it exposes the attack surface of all
+>>> ImageMagick decoder modules. --[[smcv]]