Bug 67583 – librsvg-2.8.1 segfaults on invalid input (polygon with no points)

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Graeme Humphries 2004-10-14 13:24:07 UTC]

If you create an SVG file containing a polygon with no point data (ie, points=""), librsvg will segfault instead of gracefully ignoring the invalid object. This occurs on both the commandline rsvg(-view) apps, and when using Eye of Gnome, which links to this library.

It definately seems like a bad thing for a base Gnome library like this to choke and die on invalid input.

Here's some simple svg code that triggers the problem when run through EOG or rsvg-view:

<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 20010904//EN"
"http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd">
<svg xmlns="http://www.w3.org/2000/svg" width="100" height="100">
    <polygon stroke="none" fill="#000000"
      points="" />
  </g>
</svg>

Putting in any valid point data into points="" causes it to be displayed properly.

Here's my emerge info:

Portage 2.0.50-r11 (default-x86-2004.2, gcc-3.3.4, glibc-2.3.4.20040808-r1, 2.6.8-gentoo-r7)
=================================================================
System uname: 2.6.8-gentoo-r7 i686 AMD Athlon(tm) XP 2200+
Gentoo Base System version 1.5.3
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled]
ccache version 2.3 [enabled]
Autoconf: sys-devel/autoconf-2.59-r5
Automake: sys-devel/automake-1.8.5-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=athlon-xp -Os -mfpmath=sse -pipe"
CHOST="i686-pc-linux-gnu"
COMPILER=""
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3.2/share/config /usr/kde/3.3/share/config:/usr/kde/3.3/env:/usr/kde/3.3/shutdown /usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=athlon-xp -Os -mfpmath=sse -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs ccache distcc fixpackages sandbox"
GENTOO_MIRRORS="http://gentoo.oregonstate.edu http://www.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j6"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dfx 3dnow 3dnowex X aac aalib acpi aim alsa apache2 apm arts avi berkdb bitmap-fonts blender-game bootsplash bzlib calendar cdparanoia cdr crypt cups curl curlwrappers debug devfs26 dts dvd dvdr dvdread encode escreen esd exif f77 faac faad fam fbcon ffmpeg fftw flac foomaticdb freetype freewnn gd gdbm geoip gif gimp gimpprint gnome gphoto2 gpm gs gstreamer gtk gtk2 hal hdf hdf5 image imagemagick imap imlib imlib2 jabber java joystick jpeg kerberos ldap libcaca libg++ libgda libwww live lufsusermount lzo lzw lzw-tiff mad matroska matrox md5sum mdb mikmod mime mixer mmap mmx mmx2 mng mono motif mozcalendar mozilla mozsvg mpeg mpeg4 mplayer msn mysql mysqli ncurses network nls ntlm oggvorbis openal opengl oss pam pdf pdflib perl php pic png pnp psyco pthreads python qt quicktime readline rtc samba sasl sdl shared sharedmem slang sockets speex spell sqlite sse ssl stencil-buffer svg svga t1lib tcltk tcpd theora tiff transcode truetype usb video_cards_matrox wifi x86 xine xinerama xml2 xmms xosd xpm xprint xrandr xv xvid xvmc yahoo yv12 zlib zvbi"

[Comment 1 Joe McCann (RETIRED) 2004-10-14 15:54:12 UTC]

this is something that should be reported upstream. If it already has, post a link to the bug here. If not, you should file a bug upstream then post the link here.

[Comment 2 Graeme Humphries 2004-10-14 16:08:46 UTC]

Alright, reported upstream at:
http://bugzilla.gnome.org/show_bug.cgi?id=155433

[Comment 3 foser (RETIRED) 2004-10-15 08:53:41 UTC]

I personally do not like 'chatty bugs' either, maybe the gentoo forums are, bugzilla is not the place.