GNOME Bugzilla – Bug 795249
crash on reading malformed PNG
Last modified: 2018-05-22 12:22:02 UTC
another outbound write bug in gegl. the debug information as follows: ======== gdb --args gegl $POC [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". (gegl:201): GEGL-WARNING **: Failed to set operation type gegl:text, using a passthrough op instead (gegl:201): GEGL-WARNING **: Failed to set operation type gegl:text, using a passthrough op instead LIBPNG ERROR: PNG unsigned integer out of range.libpng error: PNG unsigned integer out of range. LIBPNG ERROR: PNG unsigned integer out of range.libpng error: PNG unsigned integer out of range. ** (gegl:201): WARNING **: No display handler operation found for gegl:display LIBPNG ERROR: PNG unsigned integer out of range.libpng error: PNG unsigned integer out of range. [New Thread 0x7fffef432700 (LWP 202)] Thread 1 "gegl" received signal SIGSEGV, Segmentation fault. babl_format_get_bytes_per_pixel (format=0x824871a0) at babl-format.c:538 538 if (format->class_type == BABL_FORMAT) $ bt
+ Trace 238557
======= the poc please refer to : https://github.com/xiaoqx/pocs/blob/master/gegl/gegl-outbound-write-2
Does not crash here libpng balks at the invalid PNG, are you testing git master? pippin@yogy:~/foo$ gegl malformed-png -o /tmp/a.png ** (gegl:9939): WARNING **: 14:37:21.757: gegl:png-load wrong png header ** (gegl:9939): WARNING **: 14:37:21.757: gegl:png-load wrong png header ** (gegl:9939): WARNING **: 14:37:21.757: gegl:png-load wrong png header (gegl:9939): GEGL-WARNING **: 14:37:21.757: Output of gegl:nop 0x55cf2303c0a0 has no format (gegl:9939): GEGL-WARNING **: 14:37:21.758: Output of gegl:nop 0x55cf2303c0a0 has no format (gegl:9939): GEGL-WARNING **: 14:37:21.758: Output of gegl:nop 0x55cf2303c0a0 has no format (gegl:9939): GEGL-WARNING **: 14:37:21.758: gegl-operation.c:157 Eeek: processing 0px rectangle (gegl:9939): GEGL-WARNING **: 14:37:21.758: Output of gegl:nop 0x55cf2303c0a0 has no format (gegl:9939): GEGL-WARNING **: 14:37:21.758: Output of gegl:nop 0x55cf2303c0a0 has no format
Created attachment 370925 [details] malformed PNG possibly causing crash attaching the relevant test file to the bug report
-- GitLab Migration Automatic Message -- This bug has been migrated to GNOME's GitLab instance and has been closed from further activity. You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.gnome.org/GNOME/gegl/issues/65.