[cairo-bugs] [Bug 4505] New: segmentation fault when running gtk (with cairo) application on Solaris 2.8

[bugzilla-daemon at freedesktop.org]

Please do not reply to this email: if you want to comment on the bug, go to    
       
the URL shown below and enter yourcomments there.     
   
https://bugs.freedesktop.org/show_bug.cgi?id=4505          
     
           Summary: segmentation fault when running gtk (with cairo)
                    application on Solaris 2.8
           Product: cairo
           Version: 1.0.0
          Platform: Sun
        OS/Version: Solaris
            Status: NEW
          Severity: major
          Priority: P2
         Component: image backend
        AssignedTo: cworth at cworth.org
        ReportedBy: dumitru.sipos at gmail.com
         QAContact: cairo-bugs at cairographics.org


on Solaris 2.8 gtk applications crash with a SEGMENTATION FAULT.

the problem seems to be located inside file fbcompose.c ($XdotOrg:
xc/programs/Xserver/fb/fbcompose.c,v 1.5 2005/01/13 20:49:21 sandmann Exp $)

inside method  "void fbFetch(PicturePtr pict, int x, int y, int width, CARD32
*buffer)"
 the pointer "fetch" ("fetchProc fetch = fetchProcForPicture(pict);") is not
checked againt zero value and at line 2673 the call: "fetch(bits, x, width,
buffer, indexed);" causes a segmentation fault.

software config:
cairo-1.0.0
gtk+-2.8.3
pango-1.10.0
renderext-0.9
libXrender-0.9.0


backtrace:


      76 Program received signal SIGSEGV, Segmentation fault.
      77 0x00000000 in ?? ()
      78 #0  0x00000000 in ?? ()
      79 #1  0xfe9de844 in fbFetch (pict=0x14d840, x=0, y=1366080, width=0,
buffer=0x35)
      80     at fbcompose.c:2673
      81 #2  0xfe9e0c7c in fbCompositeRect (data=0xffbe44f8,
scanline_buffer=0xffbe4518)
      82     at fbcompose.c:3565
      83 #3  0xfe9e1428 in pixman_compositeGeneral (op=4290659576, pSrc=0x14d930, 
      84     pMask=0x14d520, pDst=0x35, xSrc=152, ySrc=12, xMask=0, yMask=0,
xDst=0, 
      85     yDst=0, width=53, height=9) at fbcompose.c:3677
      86 #4  0xfe9b5958 in _cairo_image_surface_composite (
      87     operator=CAIRO_OPERATOR_OVER, src_pattern=0xffbeab88, 
      88     mask_pattern=0xffbea778, abstract_dst=0x14d8b8, src_x=152, src_y=12, 
      89     mask_x=0, mask_y=0, dst_x=0, dst_y=0, width=53, height=9)
      90     at cairo-image-surface.c:595
      91 #5  0xfe9baee4 in _fallback_composite (operator=CAIRO_OPERATOR_OVER, 
      92     src=0xffbeab88, mask=0xffbea778, dst=0x0, src_x=152, src_y=12,
mask_x=0, 
      93     mask_y=0, dst_x=152, dst_y=12, width=53, height=9) at
cairo-surface.c:800
      94 #6  0xfe9c43c8 in _cairo_ft_scaled_font_show_glyphs (abstract_font=0x18, 
      95     operator=CAIRO_OPERATOR_OVER, pattern=0xffbeab88, surface=0x149ce8, 
      96     source_x=152, source_y=12, dest_x=152, dest_y=12, width=53, height=9, 
      97     glyphs=0x14ce88, num_glyphs=7) at cairo-ft-font.c:2048
      98 #7  0xfe9b0fa4 in _cairo_scaled_font_show_glyphs (scaled_font=0xdc200, 
      99     operator=CAIRO_OPERATOR_OVER, pattern=0xffbeab88, surface=0x149ce8, 
     100     source_x=152, source_y=12, dest_x=152, dest_y=12, width=53, height=9, 
     101     glyphs=0x14ce88, num_glyphs=7) at cairo-font.c:929
     102 #8  0xfe9b422c in _cairo_gstate_show_glyphs_draw_func (closure=0xffbeab60, 
     103     operator=CAIRO_OPERATOR_OVER, src=0xffbeab88, dst=0x149ce8, dst_x=0, 
     104     dst_y=0, extents=0xffbeab70) at cairo-gstate.c:2053
     105 #9  0xfe9b2f88 in _cairo_gstate_clip_and_composite (clip=0x14cdb0, 
     106     operator=CAIRO_OPERATOR_OVER, src=0xffbeab88, 
     107     draw_func=0xfe9b4144 <_cairo_gstate_show_glyphs_draw_func>, 
     108     draw_closure=0xffbeab60, dst=0x149ce8, extents=0xffbeab70)
     109     at cairo-gstate.c:1094
     110 #10 0xfe9b43ac in _cairo_gstate_show_glyphs (gstate=0x14cd20, 
     111     glyphs=0xffbeacf8, num_glyphs=7) at cairo-gstate.c:2131
     112 #11 0xfe9add80 in cairo_show_glyphs (cr=0xdbbc0, glyphs=0xffbeacf8, 
     113     num_glyphs=7) at cairo.c:2158
     114 #12 0xff2c617c in pango_cairo_renderer_get_type ()
     115    from /local/dsipos/app/lib/libpangocairo-1.0.so.0
...          
     
     
--           
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email         
     
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.