[Poppler-bugs] [Bug 76445] SEGV in RescaleDrawImage::getRow

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=76445

--- Comment #2 from Antti Husa <a.husa at hushmail.com> ---
Fixed ASAN report with line numbers:

==16970== ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc
0x7ff219a9e9c5 sp 0x7ff216ab5880 bp 0x7ff216ab5900 T3)
AddressSanitizer can not provide additional info.
    #0 0x7ff219a9e9c4 in RescaleDrawImage::getRow(int, unsigned int*)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/CairoOutputDev.cc:2845
    #1 0x7ff219a9f64a in CairoRescaleBox::downScaleImage(unsigned int, unsigned
int, int, int, unsigned short, unsigned short, unsigned short, unsigned short,
_cairo_surface*)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/CairoRescaleBox.cc:338
    #2 0x7ff219a9bd10 in RescaleDrawImage::getSourceImage(Stream*, int, int,
int, int, bool, GfxImageColorMap*, int*)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/CairoOutputDev.cc:2817
    #3 0x7ff219a9bd10 in CairoOutputDev::drawImage(GfxState*, Object*, Stream*,
int, int, GfxImageColorMap*, bool, int*, bool)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/CairoOutputDev.cc:2896
    #4 0x7ff2193a9c53 in Gfx::doImage(Object*, Stream*, bool)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/Gfx.cc:4587
    #5 0x7ff2193ad1b1 in Gfx::opXObject(Object*, int)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/Gfx.cc:4128
    #6 0x7ff21939bc55 in Gfx::go(bool)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/Gfx.cc:712
    #7 0x7ff21939c61f in Gfx::display(Object*, bool)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/Gfx.cc:678
    #8 0x7ff219458be7 in Page::displaySlice(OutputDev*, double, double, int,
bool, bool, int, int, int, int, bool, bool (*)(void*), void*, bool (*)(Annot*,
void*), void*, bool)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/Page.cc:584
    #9 0x7ff219a73812 in _poppler_page_render(_PopplerPage*, _cairo*, bool,
PopplerPrintFlags)
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/glib/poppler-page.cc:362
    #10 0x7ff219cdbf2c in pdf_page_render_cairo
/var/tmp/portage/app-text/zathura-pdf-poppler-0.2.3/work/zathura-pdf-poppler-0.2.3/pdf.c:809
    #11 0x42f947 in render
/var/tmp/portage/app-text/zathura-0.2.1/work/zathura-0.2.1/render.c:183
    #12 0x42f947 in render_job
/var/tmp/portage/app-text/zathura-0.2.1/work/zathura-0.2.1/render.c:37
    #13 0x7ff221f0aea5 (/usr/lib64/libglib-2.0.so.0+0x6fea5)
    #14 0x7ff221f0a4e4 (/usr/lib64/libglib-2.0.so.0+0x6f4e4)
    #15 0x7ff2235bdc07 in __asan::AsanThread::ThreadStart()
/home/aki/opt/fu/work/tmp/gcc-4.8.1/x86_64-unknown-linux-gnu/libsanitizer/asan/../../.././libsanitizer/asan/asan_thread.cc:99
    #16 0x7ff221880f39 in start_thread
/var/tmp/portage/sys-libs/glibc-2.17/work/glibc-2.17/nptl/pthread_create.c:308
    #17 0x7ff2212bdc3c (/lib64/libc.so.6+0xedc3c)
SUMMARY: AddressSanitizer: SEGV
/var/tmp/portage/app-text/poppler-0.24.5/work/poppler-0.24.5/poppler/CairoOutputDev.cc:2845
RescaleDrawImage::getRow(int, unsigned int*)
Thread T3 (pool) created by T0 here:
    #0 0x7ff2235afc5b in __interceptor_pthread_create
/home/aki/opt/fu/work/tmp/gcc-4.8.1/x86_64-unknown-linux-gnu/libsanitizer/asan/../../.././libsanitizer/asan/asan_interceptors.cc:122
    #1 0x7ff221f25941 (/usr/lib64/libglib-2.0.so.0+0x8a941)
==16970== ABORTING

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20140324/385047f9/attachment-0001.html>