| Summary: | tiff2ps - double free or corruption | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Alex Sersen <asersen> |
| Component: | libtiff | Assignee: | Petr Hracek <phracek> |
| Status: | CLOSED WONTFIX | QA Contact: | qe-baseos-daemons |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 5.10 | CC: | hhorak, mmalik, mvadkert, ohudlick, ovasik, thoger |
| Target Milestone: | rc | Keywords: | Reopened, Triaged |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | http://bugzilla.maptools.org/show_bug.cgi?id=1936 | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 460322 | Environment: | |
| Last Closed: | 2013-09-04 15:11:09 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Bug Depends On: | 460322 | ||
| Bug Blocks: | 609948 | ||
|
Description
Alex Sersen
2013-09-04 14:55:42 UTC
It looks there is the same problem on 3.8.2-18.el5_8 # tiffcmp -l quad-jpeg.tif quad-jpeg.tif JPEGLib: Warning, Application transferred too many scanlines. quad-jpeg.tif: EOF at scanline 0 *** glibc detected *** tiffcmp: double free or corruption (!prev): 0x08de1568 *** ======= Backtrace: ========= /lib/libc.so.6[0x4f1d35] /lib/libc.so.6(cfree+0x59)[0x4f5d29] /usr/lib/libtiff.so.3(_TIFFfree+0x1d)[0x7b7addd] tiffcmp[0x8049d7a] /lib/libc.so.6(__libc_start_main+0xdc)[0x49debc] tiffcmp[0x8048861] ======= Memory map: ======== 00469000-00484000 r-xp 00000000 fd:00 12714022 /lib/ld-2.5.so 00484000-00485000 r--p 0001a000 fd:00 12714022 /lib/ld-2.5.so 00485000-00486000 rw-p 0001b000 fd:00 12714022 /lib/ld-2.5.so 00488000-005df000 r-xp 00000000 fd:00 12714183 /lib/libc-2.5.so 005df000-005e1000 r--p 00157000 fd:00 12714183 /lib/libc-2.5.so 005e1000-005e2000 rw-p 00159000 fd:00 12714183 /lib/libc-2.5.so 005e2000-005e5000 rw-p 005e2000 00:00 0 005e7000-0060e000 r-xp 00000000 fd:00 12716914 /lib/libm-2.5.so 0060e000-0060f000 r--p 00026000 fd:00 12716914 /lib/libm-2.5.so 0060f000-00610000 rw-p 00027000 fd:00 12716914 /lib/libm-2.5.so 00619000-0062b000 r-xp 00000000 fd:00 12716923 /lib/libz.so.1.2.3 0062b000-0062c000 rw-p 00011000 fd:00 12716923 /lib/libz.so.1.2.3 00d15000-00d20000 r-xp 00000000 fd:00 12716915 /lib/libgcc_s-4.1.2-20080825.so.1 00d20000-00d21000 rw-p 0000a000 fd:00 12716915 /lib/libgcc_s-4.1.2-20080825.so.1 00d23000-00d44000 r-xp 00000000 fd:00 15871934 /usr/lib/libjpeg.so.62.0.0 00d44000-00d45000 rw-p 00020000 fd:00 15871934 /usr/lib/libjpeg.so.62.0.0 00dfc000-00dfd000 r-xp 00dfc000 00:00 0 [vdso] 07b4a000-07ba1000 r-xp 00000000 fd:00 15885577 /usr/lib/libtiff.so.3.8.2 07ba1000-07ba3000 rw-p 00057000 fd:00 15885577 /usr/lib/libtiff.so.3.8.2 08048000-0804b000 r-xp 00000000 fd:00 15872094 /usr/bin/tiffcmp 0804b000-0804d000 rw-p 00002000 fd:00 15872094 /usr/bin/tiffcmp 08dd0000-08e12000 rw-p 08dd0000 00:00 0 [heap] b7f75000-b7f78000 rw-p b7f75000 00:00 0 b7f7b000-b7f7c000 rw-p b7f7b000 00:00 0 b7f7c000-b7f82000 r--s 00000000 fd:00 15728708 /root/playground/quad-jpeg.tif b7f82000-b7f88000 r--s 00000000 fd:00 15728708 /root/playground/quad-jpeg.tif bff69000-bff7e000 rw-p bffe9000 00:00 0 [stack] Aborted [root@auto-i386-002 playground]# rpm -qa libtiff libtiff-3.8.2-18.el5_8 *** Bug 984240 has been marked as a duplicate of this bug. *** As RHEL-5 is in production phase 2 (and RHEL-5.11 will be production phase 3 and very limited), I strongly doubt it will ever get fixed in RHEL-5. Problem is fixed in RHEL-6. As this is not customer reported but just reported by internal QE, closing WONTFIX for RHEL-5. Feel free to reopen, if you have some justification which will increase the chances for RHEL-5 update. |