Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-17254

XPM files crash QImage (write)

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P1: Critical
    • 4.7.4
    • 4.7.1
    • Image formats
    • None
    • 23f9cec65a76e6aa0675ca426f9e4f6717790dbb

    Description

      STEPS LEADING TO PROBLEM:
      anhayryn@ubuntu:~/img-crash$ obexftp -b D8:54:3A:7E:5F:AD -B 9 -U None
      -p 00002054.xpm EXPECTED OUTCOME:
      No crash
      ACTUAL OUTCOME:
      Starting program: /home/anhayryn/imageviewer 00002054.xpm [Thread
      debugging using libthread_db enabled] [New Thread 0xb7d71b70 (LWP
      6686)] Program received signal SIGSEGV, Segmentation fault.
      read_xpm_body (device=<value optimized out>, source=<value optimized out>,
      index=@0x82054c8, state=..., cpp=-2147483648, ncols=4, w=72, h=14, image=
      ...) at image/qxpmhandler.cpp:993
      993 image/qxpmhandler.cpp: No such file or directory.
      in image/qxpmhandler.cpp
      (gdb) info stack
      #0 read_xpm_body (device=<value optimized out>, source=<value optimized out>,
      index=@0x82054c8, state=..., cpp=-2147483648, ncols=4, w=72, h=14,
      image=...) at image/qxpmhandler.cpp:993
      #1 0x0037b1fc in QXpmHandler::readImage (this=0x82054a8, image=0xbffff154)
      at image/qxpmhandler.cpp:1217
      #2 0x0034623c in QImageReader::read (this=0xbffff1b8, image=0xbffff154)
      at image/qimagereader.cpp:1205
      #3 0x00346877 in QImageReader::read (this=0xbffff1b8)
      at image/qimagereader.cpp:1155
      #4 0x00335082 in QImage::load (this=0xbffff24c, fileName=..., format=0x0)
      at image/qimage.cpp:4949
      #5 0x003352fa in QImage::QImage (this=0xbffff24c, fileName=..., format=0x0)
      at image/qimage.cpp:1024
      #6 0x0804cc93 in ImageViewer::ImageViewer() ()
      #7 0x0804d07f in main ()
      (gdb)
      TEST CASE:
      Attached are bunch of XPM's that all crash on desktop ubuntu. Crashes seem to be on write,
      so there are probably security implications.
      FREQUENCY OF OCCURRENCE:
      Always.

      Attachments

        1. fix-proposal.patch
          0.4 kB
        2. xpm-crash.tar.gz
          0.5 kB
        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            rodal Samuel Rødal
            jupakari Juuso Pakarinen
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes