...

diff --git a/ChangeLog b/ChangeLog
index a1fc4b8cd2746ff2663cfcd30904c30d05aae36b..9e8a2b7dc6b793f225a5aab6ea609431aa538c1d 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,8 @@
 2019-03-11  7.0.8-34 Cristy  <quetzlzacatenango@image...>
   * Associate one lock with each resource.
   * Report exception if opening TIFF did not work out.
+  * Fixed numerous use of uninitialized values, integer overflow, memory
+    exceeded, and timeouts (credit to OSS Fuzz).
 
 2019-03-10  7.0.8-33 Cristy  <quetzlzacatenango@image...>
   * Release ImageMagick version 7.0.8-33, GIT revision 15401:c805e3205:20190310

diff --git a/coders/svg.c b/coders/svg.c
index d78172a5d04c297a56c9a494ebe38e9e48d846db..6cc261df005d199b26ca4343eb1e5379e8c715c4 100644 (file)
--- a/coders/svg.c
+++ b/coders/svg.c
@@ -1622,7 +1622,7 @@ static void SVGStartElement(void *context,const xmlChar *name,
               char
                 *text;
 
-              text=EscapeString(svg_info->text,'\'');
+              text=EscapeString(svg_info->text,'\"');
               (void) FormatLocaleFile(svg_info->file,"text %g,%g \"%s\"\n",
                 svg_info->bounds.x-svg_info->center.x,svg_info->bounds.y-
                 svg_info->center.y,text);
@@ -2847,7 +2847,7 @@ static void SVGEndElement(void *context,const xmlChar *name)
                 *text;
 
               SVGStripString(MagickTrue,svg_info->text);
-              text=EscapeString(svg_info->text,'\'');
+              text=EscapeString(svg_info->text,'\"');
               (void) FormatLocaleFile(svg_info->file,"text 0,0 \"%s\"\n",text);
               text=DestroyString(text);
               *svg_info->text='\0';
@@ -2865,7 +2865,7 @@ static void SVGEndElement(void *context,const xmlChar *name)
                 *text;
 
               (void) FormatLocaleFile(svg_info->file,"class \"tspan\"\n");
-              text=EscapeString(svg_info->text,'\'');
+              text=EscapeString(svg_info->text,'\"');
               (void) FormatLocaleFile(svg_info->file,"text %g,%g \"%s\"\n",
                 svg_info->bounds.x-svg_info->center.x,svg_info->bounds.y-
                 svg_info->center.y,text);