The FreeType Project - Bugs: bug #46572, Use after free in T1_Done_Metrics.
You are not allowed to post comments on this tracker with your current authentication level.
bug #46572: Use after free in T1_Done_Metrics.
Submitter: | bungeman <bungeman> | ||
Submitted: | Mon 30 Nov 2015 03:40:28 PM UTC | ||
Severity: | 3 - Normal | Item Group: | Incorrect behaviour |
Status: | Fixed | Privacy: | Public |
Assigned to: | wl | Open/Closed: | Closed |
Planned Release: | 2.6.3 |
Tue 01 Dec 2015 11:11:27 AM UTC, comment #1: |
Werner LEMBERG <wl> |
Mon 30 Nov 2015 03:40:28 PM UTC, original submission:
Found with libFuzzer at FreeType 4a15013a2988206cb126d6bc550e06f975439a13 while running ftfuzzer.cc, reproduction attached.
|
bungeman <bungeman> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 6 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2015-12-01 | wl | Status | None | Fixed | |
Assigned to | None | wl | |||
Open/Closed | Open | Closed | |||
Planned Release | None | 2.6.3 | |||
2015-11-30 | bungeman | Attached File | - | Added crash-af9d27f31c039d6d22603b30d77608b34149d3a3, #35599 | |
Attached File | - | Added crash-af9d27f31c039d6d22603b30d77608b34149d3a3.txt, #35600 |
Powered by Savane 3.13-d3ae.
Corresponding source code
Thanks for your analysis! Fixed in git, following your guidelines.