bugThe FreeType Project - Bugs: bug #47514, timeout in pfr_lookup_bitmap_data

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #47514: timeout in pfr_lookup_bitmap_data

Submitter:  Kostya Serebryany <kcc>
Submitted:  Thu 24 Mar 2016 01:08:11 AM UTC
   
 
Severity:  3 - Normal Item Group:  None
Status:  Fixed Privacy:  Public
Assigned to:  wl Open/Closed:  Closed
Planned Release:  2.6.4

Tue 29 Mar 2016 04:59:51 PM UTC, comment #5: 

Confirmed, no more easy-to-find timeouts.

 Kostya Serebryany <kcc>
Group Member
Tue 29 Mar 2016 07:15:57 AM UTC, comment #4: 

Should be really fixed this time :-)

 Werner LEMBERG <wl>
Group administrator
Mon 28 Mar 2016 05:41:35 PM UTC, comment #3: 

Looks like at least one similar timeout remains, attaching more repros.

(file #36785)

 Kostya Serebryany <kcc>
Group Member
Sat 26 Mar 2016 09:43:12 PM UTC, comment #2: 

Now fixed in git.  Thanks for the report!

 Werner LEMBERG <wl>
Group administrator
Thu 24 Mar 2016 01:20:59 AM UTC, comment #1: 

Smaller repro.

(file #36740)

 Kostya Serebryany <kcc>
Group Member
Thu 24 Mar 2016 01:08:11 AM UTC, original submission:  

Applying libFuzzer (src/tools/ftfuzzer/ftfuzzer.cc)
to fonts from https://github.com/twardoch/test-fonts/
finds the following timeout, repro attached:

    #5 0x66fe5d in pfr_lookup_bitmap_data src/pfr/pfrsbit.c:298:18
    #6 0x66fe5d in pfr_slot_load_bitmap src/pfr/pfrsbit.c:583
    #7 0x66fe5d in pfr_slot_load src/pfr/pfrobjs.c:345
    #8 0x522f59 in FT_Load_Glyph src/base/ftobjs.c:713:17
    #9 0x4e5e37 in LLVMFuzzerTestOneInput

 Kostya Serebryany <kcc>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #36785:  more-timeouts.tgz added by kcc (4KiB - application/x-compressed-tar)
file #36740:  timeout-4df1d37650dcf2c15675a49576125bc4df4b7c20 added by kcc (956B - application/octet-stream)
file #36739:  timeout-b254b09332dd0c88f165b873e6e14f8f42afe84b added by kcc (257KiB - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by wl (Posted a comment)
  • -email is unavailable- added by kcc (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 9 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-03-29 wl StatusNone Fixed
    2016-03-28 kcc Attached File- Added more-timeouts.tgz, #36785
        StatusFixed None
    2016-03-26 wl StatusNone Fixed
        Assigned toNone wl
        Open/ClosedOpen Closed
        Planned ReleaseNone 2.6.4
    2016-03-24 kcc Attached File- Added timeout-4df1d37650dcf2c15675a49576125bc4df4b7c20, #36740
    2016-03-24 kcc Attached File- Added timeout-b254b09332dd0c88f165b873e6e14f8f42afe84b, #36739

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.14-d582.
    Corresponding source code