Bug 145432 – media-libs/libpng-1.2.12 - double free or corruption on broken png

• Product: Gentoo Linux
• Status: RESOLVED NEEDINFO

[Description Ricardo Markiewicz 2006-08-28 19:27:46 UTC]

Today amsn stop working. In the console I can read : 
libpng warning: Ignoring bad adaptive filter type
libpng warning: Extra compressed data.
libpng warning: Extra compression data
*** glibc detected *** double free or corruption (!prev): 0x08ae7098 ***

and amsn hangup with sigsev. Running an strace y discover that one png was broken in the amsn cache, and causing the program crash. Removing the broken file fix the problem, but I think that libpng has a bug handling broken files.

This happend with libpng-1.2.12 and libpng-1.2.12-r1
Portage 2.1-r2 (default-linux/x86/no-nptl, gcc-3.4.6, glibc-2.3.6-r4, 2.6.17-gentoo-r4 i686)
=================================================================
System uname: 2.6.17-gentoo-r4 i686 AMD Athlon(TM) XP 2400+
Gentoo Base System version 1.12.4
ccache version 2.3 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-lang/python:     2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i386-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -pipe"
CHOST="i386-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/ /usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -march=athlon-xp -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.localhost.net.ar/ "
LINGUAS="es en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 3dnow 3dnowext X a52 aac alsa apm avi bash-completion beagle berkdb bitmap-fonts bzip2 cairo cdr cli crypt cups curl dbus djvu dlloader dvd dvdr dvdread dvi eds emboss encode exif firefox flac foomaticdb fortran gdbm gif glitz gnome gstreamer gtk gtk2 hal imlib ipv6 isdnlog jpeg jpeg2k libg++ libwww mad mikmod mmx mmxext mono motif mp3 mpeg nautilus ncurses nls nvidia ogg opengl oss pam pcre pdflib perl png pppd python quicktime readline reflection sdl session spell spl sse ssl svg tcpd theora tiff truetype truetype-fonts type1-fonts vorbis xml xmms xorg xv xvid zlib elibc_glibc input_devices_keyboard input_devices_mouse input_devices_evdev kernel_linux linguas_es linguas_en userland_GNU video_cards_nvidia video_cards_nv"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Ricardo Markiewicz 2006-08-28 19:31:21 UTC]

Created attachment 95337 [details]
strace of amsn crashing

[Comment 2 SpanKY 2006-08-29 14:35:03 UTC]

post the png as an attachment that made it crash

[Comment 3 SpanKY 2006-11-15 06:51:09 UTC]

get back to us