Bug 87517 - Repeatable libjpeg crash
Summary: Repeatable libjpeg crash
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: libjpeg
Version: 8.0
Hardware: i686
OS: Linux
medium
low
Target Milestone: ---
Assignee: Matthias Clasen
QA Contact:
URL: http://www.prophecy.net.nz/crash.jpg.gz
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2003-03-28 03:33 UTC by jonny robertson
Modified: 2007-04-18 16:52 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2004-05-12 21:36:31 UTC
Embargoed:


Attachments (Terms of Use)

Description jonny robertson 2003-03-28 03:33:05 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2) Gecko/20021202

Description of problem:
Specific jpg I have can repeatably crash applications that use libjpeg to render
the image (gqview, nautilis etc.).



Version-Release number of selected component (if applicable):
libjpeg-6b-21

How reproducible:
Always

Steps to Reproduce:
1. run gqview or nautilis
2. browse to directory where 'bad' jpeg is located (dload from supplied URL)
3.
    

Actual Results:  Program received signal SIGSEGV, Segmentation fault.
0x405bd5a0 in ycck_cmyk_convert (cinfo=0xc6, input_buf=0x8147870, input_row=1,
output_buf=0xbfffdce4, num_rows=0) at jdcolor.c:278
278           outptr[0] = range_limit[MAXJSAMPLE - (y + Crrtab[cr])];   /* red */


Expected Results:  Should just complain about a corrupt jpeg.

Additional info:

libjpeg seems to handle this image okay on RH 7.3.

Comment 1 Matthias Clasen 2004-05-12 21:36:31 UTC
The URL is dangling. Can't reproduce or fix this without the offending
image...

Comment 2 Mark Henson 2004-05-12 21:43:59 UTC
The URL has been fixed.

Comment 3 jonny robertson 2004-05-12 22:04:39 UTC
I can't reproduce this in FC1 anyway (libjpeg-6b-29).... guess it was
fixed upstream at some point.  Feel free to leave it closed if you want.



Note You need to log in before you can comment on or make changes to this bug.