bugThe FreeType Project - Bugs: bug #52092, SIGSEGV crash in premultiply_data...

 
 

bug #52092: SIGSEGV crash in premultiply_data (sfnt/pngshim.c)

Submitted by:  Jonathan Kew <jfkthame>
Submitted on:  Fri 22 Sep 2017 09:52:26 PM UTC  
 
Severity: 3 - NormalItem Group: Crash
Status: FixedPrivacy: Public
Assigned to: Werner LEMBERG <wl>Open/Closed: Closed
Planned Release: 2.8.2

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 24 Sep 2017 03:39:24 PM UTC, comment #1:

Patch applied to git, thanks!

Werner LEMBERG <wl>
Project AdministratorIn charge of this item.
Fri 22 Sep 2017 09:52:26 PM UTC, original submission:

After updating FreeType in the mozilla tree to 2.8.1, we have seen a number of crash reports indicating a SIGSEGV failure in the new vectorized code in premultiply_data, added in c9d7c03fa1b5c6244759ade814c546da04080646.

See https://crash-stats.mozilla.com/report/index/ae81e0ff-d8e3-467e-930d-ec0690170922 (and other reports available by querying crash-stats for the premultiply_data signature).

I have not yet been able to reproduce such a crash locally, and don't have a specific testcase, but it looks suspiciously as though there may be a flaw that can be revealed, perhaps by a particular edge-case in some font data.

Sorry this isn't more concrete, but I thought it should be reported ASAP to at least raise awareness of a possible issue here.

Jonathan Kew <jfkthame>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #41887:  ft-premultiply-patch added by jfkthame (3KiB - application/octet-stream - Suggested patch, unless it can be guaranteed that rowbytes is never small enough for this to be an issue)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by wl (Updated the item)
  • -unavailable- added by wl
  • -unavailable- added by jfkthame (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 8 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 24 Sep 2017 03:39:24 PM UTCwlStatusNone=>Fixed
      PrivacyPrivate=>Public
      Assigned toNone=>wl
      Open/ClosedOpen=>Closed
      Planned ReleaseNone=>2.8.2
    Sun 24 Sep 2017 03:20:30 PM UTCjfkthameAttached File-=>Added ft-premultiply-patch, #41887
    Sun 24 Sep 2017 02:31:32 PM UTCwlPrivacyPublic=>Private
    Sat 23 Sep 2017 12:01:19 AM UTCwlCarbon-Copy-=>Added behdad

    Back to the top


    Powered by Savane 3.1-cleanup1