After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 155433 - librsvg-2.8.1 segfaults on invalid input (polygon with no points)
librsvg-2.8.1 segfaults on invalid input (polygon with no points)
Status: RESOLVED FIXED
Product: librsvg
Classification: Core
Component: general
unspecified
Other Linux
: High major
: ---
Assigned To: librsvg maintainers
librsvg maintainers
Depends on:
Blocks:
 
 
Reported: 2004-10-14 23:08 UTC by Graeme Humphries
Modified: 2004-12-22 21:47 UTC
See Also:
GNOME target: ---
GNOME version: 2.7/2.8



Description Graeme Humphries 2004-10-14 23:08:20 UTC
If you create an SVG file containing a polygon with no point data (ie,
points=""), librsvg will segfault instead of gracefully ignoring the invalid
object. This occurs on both the commandline rsvg(-view) apps, and when using Eye
of Gnome, which links to this library.

It definately seems like a bad thing for a base Gnome library like this to choke
and die on invalid input.

Here's some simple svg code that triggers the problem when run through EOG or
rsvg-view:

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
"http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
<svg xmlns="http://www.w3.org/2000/svg" width="100" height="100">
    <polygon stroke="none" fill="#000000"
      points="" />
  </g>
</svg>

Putting in any valid point data into points="" causes it to be displayed properly.

I've got a downstream bug with Gentoo about this issue, available at:
http://bugs.gentoo.org/show_bug.cgi?id=67583

According to the linked guidelines, this (crashing) would seem to fall under
Severity: critical, but I'm just putting it at major for the time being. If I
was too cautious, someone can feel free to upgrade it to critical. ;)
Comment 1 Dominic Lachowicz 2004-10-15 00:40:07 UTC
the bug is fixed. please keep the editorializing to a minimum. thank you for the
report.
Comment 2 Dominic Lachowicz 2004-10-15 00:40:39 UTC
mark fixed
Comment 3 Graeme Humphries 2004-10-15 14:56:51 UTC
Sorry, I'm just used to the Gentoo bugzilla, where everyone's a little more
chatty about their bug reporting. ;)

In any case, could you let me know which release this is fixed in, so we can get
it into Gentoo ASAP?