The FreeType Project - Bugs: bug #46256, NULL deref in cid_load_glyph...

You are not allowed to post comments on this tracker with your current authentication level.

bug #46256: NULL deref in cid_load_glyph src/cid/cidgload.c:145:39

Submitter:	Kostya Serebryany <kcc>
Submitted:	Mon 19 Oct 2015 11:56:04 PM UTC
Severity:	3 - Normal	Item Group:	None
Status:	Duplicate	Privacy:	Public
Assigned to:	wl	Open/Closed:	Closed
Planned Release:	2.6.2

Mon 19 Oct 2015 11:57:09 PM UTC, comment #1:  Ah, that's #46250	Kostya Serebryany <kcc>
Mon 19 Oct 2015 11:56:04 PM UTC, original submission:   Found with libFuzzer (not on the bot yet, trying new inputs) ==27320==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000000636696 bp 0x7ffe7ddc3090 sp 0x7ffe7ddc2f00 T0)     #0 0x636695 in cid_load_glyph src/cid/cidgload.c:145:39     #1 0x63288b in cid_slot_load_glyph src/cid/cidgload.c:335:13     #2 0x4ffcf8 in FT_Load_Glyph src/base/ftobjs.c:742:15     #3 0x4d969f in LLVMFuzzerTestOneInput	Kostya Serebryany <kcc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files

file #35236:  crash-89ffb0ca1632532d82c6d93ae7ebfcc2b9c0ac68 added by kcc (2KiB - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List

-email is unavailable- added by wl (Updated the item)

-email is unavailable- added by kcc (Submitted the item)

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 5 latest changes.

Date	Changed by	Updated Field	Previous Value	=>	Replaced by
2015-10-20	wl	Assigned to	None		wl
		Open/Closed	Open		Closed
		Planned Release	None		2.6.2
2015-10-19	kcc	Status	None		Duplicate
2015-10-19	kcc	Attached File	-		Added crash-89ffb0ca1632532d82c6d93ae7ebfcc2b9c0ac68, #35236

Copyright © 2024 Free Software Foundation, Inc.
Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
Page source code