bugThe FreeType Project - Bugs: bug #19536, Emboldden rendering with a sbit...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #19536: Emboldden rendering with a sbit font makes glibc detected in freetype 2.3.3

Submitter:  sangu <sangu>
Submitted:  Fri 06 Apr 2007 04:29:55 AM UTC
   
 
Severity:  5 - Blocker Item Group:  Crash
Status:  Fixed Privacy:  Public
Assigned to:  freetype Open/Closed:  Closed
Planned Release:  2.3.4

Fri 06 Apr 2007 07:04:51 AM UTC, comment #1: 

Thanks for the report; I can confirm this.
Using valgrind for

  ftview 14 Monaco.dfont

I get

==9814== Invalid write of size 1
==9814==    at 0x401D360: memset (mc_replace_strmem.c:479)
==9814==    by 0x80590F1: ft_bitmap_assure_buffer (ftbitmap.c:169)
==9814==    by 0x80593EB: FT_Bitmap_Embolden (ftbitmap.c:278)
==9814==    by 0x805D8DC: FT_GlyphSlot_Embolden (ftsynth.c:135)
==9814==    by 0x80498AA: Render_Embolden (ftview.c:237)
==9814==    by 0x804B329: main (ftview.c:1116)
==9814==  Address 0x45B9B5A is 0 bytes after a block of size 18 alloc'd
==9814==    at 0x401B4E9: malloc (vg_replace_malloc.c:149)
==9814==    by 0x80D1695: ft_alloc (ftsystem.c:74)
==9814==    by 0x80588F2: ft_mem_qalloc (ftutil.c:76)
==9814==    by 0x8058893: ft_mem_alloc (ftutil.c:55)
==9814==    by 0x80502EA: ft_glyphslot_alloc_bitmap (ftobjs.c:289)
==9814==    by 0x80968F7: tt_sbit_decoder_alloc_bitmap (ttsbit0.c:340)
==9814==    by 0x8096A20: tt_sbit_decoder_load_byte_aligned (ttsbit0.c:427)
==9814==    by 0x8097176: tt_sbit_decoder_load_bitmap (ttsbit0.c:749)
==9814==    by 0x8097881: tt_sbit_decoder_load_image (ttsbit0.c:928)
==9814==    by 0x80978C9: tt_face_load_sbit_image (ttsbit0.c:960)
==9814==    by 0x8061957: load_sbit_image (ttgload.c:1661)
==9814==    by 0x8061D34: TT_Load_Glyph (ttgload.c:1870)

Werner LEMBERG <wl>
Group administrator
Fri 06 Apr 2007 04:29:55 AM UTC, original submission:  

1. Load a sbit font with ftview
2. Change font size 14 on ftview.
3. Click space bar on ftview (rendering emboldeed text)

$ ftview ppem /usr/share/fonts/hanyang/Dotum.ttf
* glibc detected * ftview: free(): invalid next size (fast): 0x0841e0e8 *
======= Backtrace: =========
/lib/libc.so.6[0x48dbed]
/lib/libc.so.6(cfree+0x90)[0x491210]
/usr/lib/libfreetype.so.6[0x37808d]
/usr/lib/libfreetype.so.6(ft_mem_free+0x1a)[0x37b86a]
/usr/lib/libfreetype.so.6(FT_Bitmap_Done+0x39)[0x381329]
/usr/lib/libfreetype.so.6[0x382256]
/usr/lib/libfreetype.so.6(FT_Done_Glyph+0x34)[0x382354]
ftview[0x804c6fa]
ftview[0x804b12b]
/lib/libc.so.6(__libc_start_main+0xe0)[0x43bef0]
ftview[0x8049971]
======= Memory map: ========
00110000-00113000 r-xp 00000000 08:09 7157012    /lib/libdl-2.5.90.so
00113000-00114000 r-xp 00002000 08:09 7157012    /lib/libdl-2.5.90.so
00114000-00115000 rwxp 00003000 08:09 7157012    /lib/libdl-2.5.90.so
00115000-0011d000 r-xp 00000000 08:09 7645468    /usr/lib/libXrender.so.1.3.0
0011d000-0011e000 rwxp 00007000 08:09 7645468    /usr/lib/libXrender.so.1.3.0
0027f000-00283000 r-xp 00000000 08:09 7652807    /usr/lib/libXfixes.so.3.1.0
00283000-00284000 rwxp 00003000 08:09 7652807    /usr/lib/libXfixes.so.3.1.0
002d5000-002d7000 r-xp 00000000 08:09 7647568    /usr/lib/libXau.so.6.0.0
002d7000-002d8000 rwxp 00001000 08:09 7647568    /usr/lib/libXau.so.6.0.0
002d8000-002dd000 r-xp 00000000 08:09 7659116    /usr/lib/libXdmcp.so.6.0.0
002dd000-002de000 rwxp 00004000 08:09 7659116    /usr/lib/libXdmcp.so.6.0.0
002fb000-00322000 r-xp 00000000 08:09 7157014    /lib/libm-2.5.90.so
00322000-00323000 r-xp 00026000 08:09 7157014    /lib/libm-2.5.90.so
00323000-00324000 rwxp 00027000 08:09 7157014    /lib/libm-2.5.90.so
00324000-0032d000 r-xp 00000000 08:09 7652370    /usr/lib/libXcursor.so.1.0.2
0032d000-0032e000 rwxp 00008000 08:09 7652370    /usr/lib/libXcursor.so.1.0.2
00371000-003f4000 r-xp 00000000 08:09 7649033    /usr/lib/libfreetype.so.6.3.14
003f4000-003f8000 rwxp 00082000 08:09 7649033    /usr/lib/libfreetype.so.6.3.14
00426000-00574000 r-xp 00000000 08:09 7155309    /lib/libc-2.5.90.so
00574000-00576000 r-xp 0014e000 08:09 7155309    /lib/libc-2.5.90.so
00576000-00577000 rwxp 00150000 08:09 7155309    /lib/libc-2.5.90.so
00577000-0057a000 rwxp 00577000 00:00 0
005cd000-005e8000 r-xp 00000000 08:09 7155191    /lib/ld-2.5.90.so
005e8000-005e9000 r-xp 0001a000 08:09 7155191    /lib/ld-2.5.90.so
005e9000-005ea000 rwxp 0001b000 08:09 7155191    /lib/ld-2.5.90.so
006b9000-006c4000 r-xp 00000000 08:09 7155192    /lib/libgcc_s-4.1.2-20070403.so.1
006c4000-006c5000 rwxp 0000a000 08:09 7155192    /lib/libgcc_s-4.1.2-20070403.so.1
00710000-00711000 r-xp 00710000 00:00 0          [vdso]
00b6b000-00b7d000 r-xp 00000000 08:09 7160353    /lib/libz.so.1.2.3
00b7d000-00b7e000 rwxp 00011000 08:09 7160353    /lib/libz.so.1.2.3
00c93000-00d91000 r-xp 00000000 08:09 7649541    /usr/lib/libX11.so.6.2.0
00d91000-00d95000 rwxp 000fe000 08:09 7649541    /usr/lib/libX11.so.6.2.0
08048000-08059000 r-xp 00000000 08:09 7652513    /usr/bin/ftview
08059000-0805a000 rw-p 00011000 08:09 7652513    /usr/bin/ftview
0805a000-0805f000 rw-p 0805a000 00:00 0
08223000-0843f000 rw-p 08223000 00:00 0
b7100000-b7121000 rw-p b7100000 00:00 0
b7121000-b7200000 ---p b7121000 00:00 0
b7236000-b7e62000 r--p 00000000 08:09 915389     /usr/share/fonts/hanyang/Dotum.ttf
b7e62000-b7f28000 rw-p b7e62000 00:00 0
b7f3c000-b7f3d000 rw-p b7f3c000 00:00 0
bf924000-bf93a000 rw-p bf924000 00:00 0

See Also : https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235479

 sangu <sangu>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by wl (Posted a comment)
  • -email is unavailable- added by sangu (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 6 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-04-06 wl StatusConfirmed Fixed
        Open/ClosedOpen Closed
    2007-04-06 wl StatusNone Confirmed
    2007-04-06 wl Severity3 - Normal 5 - Blocker
        Assigned toNone freetype
        Planned ReleaseNone 2.3.4

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-8a8d.
    Corresponding source code