[cairo-bugs] [Bug 49089] New: evince crashes with "*** buffer overflow detected ***: evince terminated" while trying to print

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=49089

             Bug #: 49089
           Summary: evince crashes with "*** buffer overflow detected ***:
                    evince terminated" while trying to print
    Classification: Unclassified
           Product: cairo
           Version: 1.12.0
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: pdf backend
        AssignedTo: ajohnson at redneon.com
        ReportedBy: dominique-freedesktop.org at leuenberger.net
         QAContact: cairo-bugs at cairographics.org


Created attachment 60497
  --> https://bugs.freedesktop.org/attachment.cgi?id=60497
Fix the issue.

Originally reported as downstream bug:
https://bugzilla.novell.com/show_bug.cgi?id=758422

_cairo_pdf_surface_add_source_surface allocates unique_id with size
unique_id_length but then copies surface_key.unique_id_length into it.

This causes e.g. evince to crash predictably while trying to print with:
  *** buffer overflow detected ***: evince terminat

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.