bugThe FreeType Project - Bugs: bug #52092, SIGSEGV crash in premultiply_data...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #52092: SIGSEGV crash in premultiply_data (sfnt/pngshim.c)

Submitter:  Jonathan Kew <jfkthame>
Submitted:  Fri 22 Sep 2017 09:52:26 PM UTC
   
 
Severity:  3 - Normal Item Group:  Crash
Status:  Fixed Privacy:  Public
Assigned to:  wl Open/Closed:  Closed
Planned Release:  2.9

Sun 24 Sep 2017 03:39:24 PM UTC, comment #1: 

Patch applied to git, thanks!

Werner LEMBERG <wl>
Group administrator
Fri 22 Sep 2017 09:52:26 PM UTC, original submission:  

After updating FreeType in the mozilla tree to 2.8.1, we have seen a number of crash reports indicating a SIGSEGV failure in the new vectorized code in premultiply_data, added in c9d7c03fa1b5c6244759ade814c546da04080646.

See https://crash-stats.mozilla.com/report/index/ae81e0ff-d8e3-467e-930d-ec0690170922 (and other reports available by querying crash-stats for the premultiply_data signature).

I have not yet been able to reproduce such a crash locally, and don't have a specific testcase, but it looks suspiciously as though there may be a flaw that can be revealed, perhaps by a particular edge-case in some font data.

Sorry this isn't more concrete, but I thought it should be reported ASAP to at least raise awareness of a possible issue here.

Jonathan Kew <jfkthame>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #41887:  ft-premultiply-patch added by jfkthame (3KiB - application/octet-stream - Suggested patch, unless it can be guaranteed that rowbytes is never small enough for this to be an issue)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by wl (Updated the item)
  • -email is unavailable- added by wl
  • -email is unavailable- added by jfkthame (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 8 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-09-24 wl StatusNone Fixed
        PrivacyPrivate Public
        Assigned toNone wl
        Open/ClosedOpen Closed
        Planned ReleaseNone 2.9
    2017-09-24 jfkthame Attached File- Added ft-premultiply-patch, #41887
    2017-09-24 wl PrivacyPublic Private
    2017-09-23 wl Carbon-Copy- Added behdad

    Back to the top

    Powered by Savane 3.13-caa5.
    Corresponding source code