[cairo-bugs] [Bug 31657] New: Unbounded recording surface -> image surface fill accesses uninitialized memory

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=31657

           Summary: Unbounded recording surface -> image surface fill
                    accesses uninitialized memory
           Product: cairo
           Version: 1.10.1
          Platform: Other
        OS/Version: Linux (All)
            Status: NEW
          Severity: normal
          Priority: medium
         Component: image backend
        AssignedTo: cworth at cworth.org
        ReportedBy: mike at filespanker.com
         QAContact: cairo-bugs at cairographics.org


Drawing onto an unbounded recording surface, then painting from it onto an
image surface, accesses uninitialized memory somewhere down in pixman. 
Assigning to image backend component out of ignorance.

Giving a bounding rectangle to cairo_recording_surface_create() does not have
the issue.

I extracted this test case out of a much more complicated path that started
returning CAIRO_STATUS_NO_MEMORY for modestly sized surfaces (whose dimensions
ballooned somewhere between Cairo extents and the pixman composite code).

I've attached a testcase and an abbreviated valgrind log.  

Cairo 1.10.0-163-g31e116f
pixman-0.20.0-21-gda0176e

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.