[cairo] Memleak in _cairo_truetype_reverse_cmap

iasunsea at sina.com iasunsea at sina.com
Thu Jun 22 01:24:57 UTC 2023


when we do poppler fuzzer fusiontest-testcase-pdf_draw_fuzzer-202110250013,we find cairo have detected memory leaks, and we put bugfix-cairo-truetype-reverse-cmap-detected-memory-leaks.patch==445385==ERROR: LeakSanitizer: detected memory leaksDirect leak of 1984 byte(s) in 8 object(s) allocated from:#0 0x66fefd in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3#1 0x12dec10 in _cairo_truetype_reverse_cmap /src/cairo/_builddir/../src/cairo-truetype-subset.c:1304:11#2 0x12de78b in _cairo_truetype_index_to_ucs4 /src/cairo/_builddir/../src/cairo-truetype-subset.c:1423:22#3 0x12db30a in _cairo_sub_font_glyph_lookup_unicode /src/cairo/_builddir/../src/cairo-scaled-font-subsets.c:387:14#4 0x12d88c5 in _cairo_sub_font_map_glyph /src/cairo/_builddir/../src/cairo-scaled-font-subsets.c:595:11#5 0x12d7427 in _cairo_scaled_font_subsets_map_glyph /src/cairo/_builddir/../src/cairo-scaled-font-subsets.c:1001:12#6 0x12fa9cd in _cairo_pdf_operators_emit_cluster /src/cairo/_builddir/../src/cairo-pdf-operators.c:1427:11#7 0x12f99e5 in _cairo_pdf_operators_show_text_glyphs /src/cairo/_builddir/../src/cairo-pdf-operators.c:1527:15#8 0x11ded7f in _cairo_pdf_surface_show_text_glyphs /src/cairo/_builddir/../src/cairo-pdf-surface.c:8860:11#9 0x11ad16a in _cairo_surface_show_text_glyphs /src/cairo/_builddir/../src/cairo-surface.c:2893:15#10 0x11a35de in _cairo_surface_wrapper_show_text_glyphs /src/cairo/_builddir/../src/cairo-surface-wrapper.c:509:14#11 0x11819d7 in _cairo_recording_surface_replay_internal /src/cairo/_builddir/../src/cairo-recording-surface.c:1975:15#12 0x11834f0 in _cairo_recording_surface_replay_region /src/cairo/_builddir/../src/cairo-recording-surface.c:2235:12#13 0x126ea1c in _paint_page /src/cairo/_builddir/../src/cairo-paginated-surface.c:469:11#14 0x126d9be in _cairo_paginated_surface_show_page /src/cairo/_builddir/../src/cairo-paginated-surface.c:583:14#15 0x11acadf in cairo_surface_show_page /src/cairo/_builddir/../src/cairo-surface.c:2506:40#16 0x6a33f0 in LLVMFuzzerTestOneInput /src/poppler/glib/tests/fuzzing/pdf_draw_fuzzer.cc:66:9#17 0x5a91d3 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15#18 0x594942 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6#19 0x59a5e6 in fuzzer::FuzzerDriver(int*, char***, int ()(unsigned char const, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9#20 0x5c3af2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10#21 0x7f29f2cd1b26 in __libc_start_main (/lib64/libc.so.6+0x25b26)SUMMARY: AddressSanitizer: 1984 byte(s) leaked in 8 allocation(s).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.cairographics.org/archives/cairo/attachments/20230622/84c95ba0/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bugfix-cairo-truetype-reverse-cmap-detected-memory-leaks.patch
Type: application/octet-stream
Size: 993 bytes
Desc: not available
URL: <https://lists.cairographics.org/archives/cairo/attachments/20230622/84c95ba0/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fusiontest-testcase-pdf_draw_fuzzer-202110250013
Type: application/octet-stream
Size: 13829 bytes
Desc: not available
URL: <https://lists.cairographics.org/archives/cairo/attachments/20230622/84c95ba0/attachment-0003.obj>


More information about the cairo mailing list