The FreeType Project - Bugs: bug #44364, Use-of-uninitialized-value in...
You are not allowed to post comments on this tracker with your current authentication level.
bug #44364: Use-of-uninitialized-value in FT_DivFix
Submitter: | Jun Fang <sanqingsong> | ||
Submitted: | Tue 24 Feb 2015 07:20:11 PM UTC | ||
Severity: | 3 - Normal | Item Group: | Incorrect behaviour |
Status: | Invalid | Privacy: | Public |
Assigned to: | wl | Open/Closed: | Closed |
Planned Release: | None |
Jump to the original submission
Sat 06 Jun 2015 03:52:35 AM UTC, comment #10: |
Werner LEMBERG <wl> |
Mon 30 Mar 2015 01:44:27 PM UTC, comment #9: Another thought: the stack trace quoted by the original reporter has the following paths:
|
Mateusz Jurczyk <j00ru> |
Mon 30 Mar 2015 01:35:21 PM UTC, comment #8: I tried to reproduce this locally using three configurations, all compiled with MemorySanitizer:
|
Mateusz Jurczyk <j00ru> |
Wed 25 Mar 2015 03:20:03 PM UTC, comment #7: Any progress? Also CCing Mateusz. |
Werner LEMBERG <wl> |
Sat 07 Mar 2015 07:22:46 AM UTC, comment #6: Please change Privacy to private. Thanks! |
Jun Fang <sanqingsong> |
Sat 07 Mar 2015 06:07:26 AM UTC, comment #5: Ah, I seem to have incorrectly tried to add a comment a few days ago since it is missing here. Sorry. Writing the comment again.
|
Werner LEMBERG <wl> |
Sat 07 Mar 2015 05:31:05 AM UTC, comment #4: Do you have any updates on this issue? If you need more information, please let me know. |
Jun Fang <sanqingsong> |
Wed 25 Feb 2015 05:58:25 PM UTC, comment #3: I shared the test file fuzz-5.pdf with you in google drive. |
Jun Fang <sanqingsong> |
Tue 24 Feb 2015 10:27:34 PM UTC, comment #2: Thanks for the patch. However, it hides the real problem, since the array in question should always be properly assigned if there is no error.
|
Werner LEMBERG <wl> |
Tue 24 Feb 2015 07:23:53 PM UTC, comment #1: It seems that the test file fuzz-5.pdf is too big to upload. If you need it, please tell me. Let me send it to you in other ways. |
Jun Fang <sanqingsong> |
Tue 24 Feb 2015 07:20:11 PM UTC, original submission:
The original issue was raised in Google chromium project. The version of freetype in chromium is 2.4.8. This issue is existing in the last version of freetype. I attached a patch for your reference.
|
Jun Fang <sanqingsong> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 10 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2020-08-22 | wl | Privacy | Private | Public | |
2015-06-06 | wl | Status | Need Info | Invalid | |
Open/Closed | Open | Closed | |||
2015-03-30 | j00ru | Attached File | - | Added fuzz-5-fonts.zip, #33491 | |
2015-03-25 | wl | Carbon-Copy | - | Added j00ru | |
2015-03-07 | wl | Privacy | Public | Private | |
2015-02-24 | wl | Status | None | Need Info | |
Assigned to | None | wl | |||
2015-02-24 | sanqingsong | Attached File | - | Added diff_t1load.c, #33175 | |
2015-02-24 | sanqingsong | Attached File | - | Added diff_t1load.c, #33174 |
Powered by Savane 3.13-d3ae.
Corresponding source code
Since there was no other reply, I accept Mateusz's analysis (thanks, by the way!), and I'm thus closing this bug report.