The FreeType Project - Bugs: bug #45661, invalid shift and memory access...
You are not allowed to post comments on this tracker with your current authentication level.
bug #45661: invalid shift and memory access within misaligned address
Submitter: | Dingbao Xie <xiedingbao> | ||
Submitted: | Thu 30 Jul 2015 08:56:31 PM UTC | ||
Severity: | 3 - Normal | Item Group: | None |
Status: | Fixed | Privacy: | Public |
Assigned to: | wl | Open/Closed: | Closed |
Planned Release: | 2.6.2 |
Thu 11 Feb 2016 06:47:32 AM UTC, comment #5: |
Werner LEMBERG <wl> |
Tue 04 Aug 2015 03:15:21 PM UTC, comment #4: I do not know where I get wrong ideas. |
Alexei Podtelezhnikov <podtelez> |
Tue 04 Aug 2015 04:14:19 AM UTC, comment #3:
|
Werner LEMBERG <wl> |
Mon 03 Aug 2015 05:53:18 PM UTC, comment #2: Replacing left-shifts with multiplications only removes the waring. The signed left shifts are defined when the result fits and undefined when it does not. The replacement with multiplication can still overflow in an undefined manner. So the real fix should involve checking the range of values to be shifted or multiplied. |
Alexei Podtelezhnikov <podtelez> |
Sat 01 Aug 2015 07:24:16 AM UTC, comment #1: Thanks for the report. I'v fixed some left-shift issues in the git repository. However, I don't have a 64bit machine so I don't see the alignment problem, unfortunately.
|
Werner LEMBERG <wl> |
Thu 30 Jul 2015 08:56:31 PM UTC, original submission:
I found several undefined behavior in freetype-2.6 with afl-fuzzer.
|
Dingbao Xie <xiedingbao> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 7 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2016-02-11 | wl | Status | Need Info | Fixed | |
Open/Closed | Open | Closed | |||
Planned Release | None | 2.6.2 | |||
2015-08-01 | wl | Status | None | Need Info | |
Assigned to | None | wl | |||
2015-07-30 | xiedingbao | Attached File | - | Added example1.c, #34558 | |
Attached File | - | Added malformed_font.zip, #34559 |
Powered by Savane 3.13-758e.
Corresponding source code
I no longer get any clang errors with current git (now testing on 64bit) thus I'm closing this bug report.