The FreeType Project - Bugs: bug #41309, Use of uninitialized memory in...
You are not allowed to post comments on this tracker with your current authentication level.
bug #41309: Use of uninitialized memory in ps_parser_load_field, t42_parse_font_matrix and t1_parse_font_matrix
Submitter: | Mateusz Jurczyk <j00ru> | ||
Submitted: | Wed 22 Jan 2014 07:42:09 PM UTC | ||
Severity: | 3 - Normal | Item Group: | Crash |
Status: | Fixed | Privacy: | Public |
Assigned to: | wl | Open/Closed: | Closed |
Planned Release: | 2.5.3 |
Thu 23 Jan 2014 07:15:58 AM UTC, comment #1: |
Werner LEMBERG <wl>![]() ![]() |
Wed 22 Jan 2014 07:42:09 PM UTC, original submission:
There are three different use-of-uninitialized-memory conditions in psobjs.c, t42parse.c and t1load.c.
While only MSan log messages are shown below, the issues can also be reproduced with valgrind (confirmed), though with less informative warning messages.
MemorySanitizer logs:
==14397== WARNING: MemorySanitizer: use-of-uninitialized-value
Uninitialized value was created by an allocation of 'temp' in the stack frame of function 'ps_parser_load_field'
SUMMARY: MemorySanitizer: use-of-uninitialized-value freetype2/src/base/ftcalc.c:78 FT_RoundFix
Uninitialized value was created by an allocation of 'temp' in the stack frame of function 't42_parse_font_matrix'
SUMMARY: MemorySanitizer: use-of-uninitialized-value freetype2/src/base/ftcalc.c:560 FT_DivFix
Uninitialized value was created by an allocation of 'temp' in the stack frame of function 't1_parse_font_matrix'
SUMMARY: MemorySanitizer: use-of-uninitialized-value freetype2/src/base/ftcalc.c:560 FT_DivFix |
Mateusz Jurczyk <j00ru>![]() |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 8 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2014-01-23 | wl | Status | None | ![]() |
Fixed |
Privacy | Private | ![]() |
Public | ||
Assigned to | None | ![]() |
wl | ||
Open/Closed | Open | ![]() |
Closed | ||
Planned Release | None | ![]() |
2.5.3 | ||
2014-01-22 | j00ru | Attached File | - | ![]() |
Added msan_uninit-mem_7ffcbb6681bf_2488_Verdana.pfr, #30344 |
Attached File | - | ![]() |
Added msan_uninit-mem_7f13afca61bf_3006_bin01st.t42, #30345 | ||
Attached File | - | ![]() |
Added msan_uninit-mem_7ff02c9f50e7_1579_DejaVuSansMono.t42, #30346 |
Fixed in git, thanks.