composite -tile overwrites end of string

[Jon]

in processing the arg list -tile is replaced by -sans0 which is 1 char longer and which overwrites the allocated area (caught in vc6 debug version)

the problem is in wand/composite.c where you can fix it by replacing:
(void) CopyMagickString(argv+1,"sans0",MaxTextExtent);
with
(void) CloneString(&argv,(*option == '-') ? "-sans0" : "+sans0");

there are similar issues in:
wand/montage.c (-tile)
wand/display.c (-map)
want/animate.c (-map)

[magick]

Thanks, we added your patch to the ImageMagick Subversion trunk, available sometime tomorrow.