bugThe FreeType Project - Bugs: bug #25036, Kpdf crash (using freetype 2.3.7)

 
 

bug #25036: Kpdf crash (using freetype 2.3.7)

Submitted by:  selim ok <selim_ok>
Submitted on:  Mon 08 Dec 2008 12:30:50 AM UTC  
 
Severity: 3 - NormalItem Group: None
Status: DuplicatePrivacy: Public
Assigned to: Werner LEMBERG <wl>Open/Closed: Closed
Planned Release: 2.3.8

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed 10 Dec 2008 04:19:09 AM UTC, comment #4:

I've explicitly told you to try the CVS version, but you
apparently haven't, right?

Your report is a duplicate of bug #24953, AFAICS.
I'm closing this report now -- please reopen in case I'm wrong.

Werner LEMBERG <wl>
Project AdministratorIn charge of this item.
Wed 10 Dec 2008 12:09:13 AM UTC, comment #3:

> With the problematic pdf file, fragment_length exceeds the
> boundary of power_tens array


s/fragment_length/fraction_length/

Fatih Asici <fatih_asici>
Wed 10 Dec 2008 12:06:18 AM UTC, comment #2:

With the problematic pdf file, fragment_length exceeds the boundary of power_tens array. Attached patch adds a control to check if it is greater than 9.

(file #17012)

Fatih Asici <fatih_asici>
Mon 08 Dec 2008 06:40:18 AM UTC, comment #1:

Unfortunately, the information you give is not sufficient.
First of all, you should try the current CVS version of
FreeType and check whether it works. If you do so, don't
forget to compile with -g so that debugging information is
created.

It would also simplify things if you can identify the
problematic font within the PDF file. It is straightforward
then to extract it manually (simply cut out the corresponding
PDF object -- maybe there are tools which can do that for
you). Then run one of the FreeType test programs to reliably
reproduce the problem.

Werner LEMBERG <wl>
Project AdministratorIn charge of this item.
Mon 08 Dec 2008 12:30:50 AM UTC, original submission:

Hi,
in Pardus's Bugzilla reported recently a problem [1] with Kpdf. Kpdf crash while opening a specific file [2] . The problem don't appear when i install an older version of freetype than 2.3.7 .

A debug output with gdb when opening mentioned file:

Program received signal SIGFPE, Arithmetic exception.
[Switching to LWP 7187]
0xb6c81921 in ?? () from /usr/lib/libfreetype.so.6

I hope this informations are sufficient.

Thanks,
Selim

[1]: http://bugs.pardus.org.tr/show_bug.cgi?id=8790 (sorry but it's in turkish)
[2]: http://bugs.pardus.org.tr/attachment.cgi?id=3434

selim ok <selim_ok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #17012:  fix-a-buffer-overflow.patch added by fatih_asici (466B - text/x-patch - Check against the boundary of power_tens array)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by fatih_asici (Updated the item)
  • -unavailable- added by wl (Posted a comment)
  • -unavailable- added by selim_ok (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 6 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed 10 Dec 2008 04:19:09 AM UTCwlStatusNeed Info=>Duplicate
      Open/ClosedOpen=>Closed
      Planned ReleaseNone=>2.3.8
    Wed 10 Dec 2008 12:06:18 AM UTCfatih_asiciAttached File-=>Added fix-a-buffer-overflow.patch, #17012
    Mon 08 Dec 2008 06:40:18 AM UTCwlStatusNone=>Need Info
      Assigned toNone=>wl

    Back to the top


    Powered by Savane 3.1-cleanup1