OLD | NEW |
| (Empty) |
1 ================================================================= | |
2 ==9140==ERROR: AddressSanitizer: global-buffer-overflow on address 0x00000117762
8 at pc 0x000000a65431 bp 0x7ffd28194d30 sp 0x7ffd28194d28 | |
3 READ of size 1 at 0x000001177628 thread T0 | |
4 #0 0xa65430 in convert_to_8(unsigned int, unsigned int) /tmp/skia/out/Debug/
../../src/codec/SkMasks.cpp:54:16 | |
5 #1 0xa63dee in swizzle_mask24_to_n32_opaque(void*, unsigned char const*, int
, SkMasks*, unsigned int, unsigned int) /tmp/skia/out/Debug/../../src/codec/SkMa
skSwizzler.cpp:93:23 | |
6 #2 0xa5dfa6 in SkBmpMaskCodec::decodeRows(SkImageInfo const&, void*, unsigne
d long, SkCodec::Options const&) /tmp/skia/out/Debug/../../src/codec/SkBmpMaskCo
dec.cpp:103:9 | |
7 #3 0xc19b94 in piex::(anonymous namespace)::GetPreviewData(std::set<int, std
::less<int>, std::allocator<int> > const&, unsigned int, unsigned int, piex::Str
eamInterface*, piex::TiffContent*, piex::PreviewImageData*) /tmp/skia/out/Debug/
../../third_party/externals/piex/src/piex.cc:59:10 | |
8 #4 0xc19850 in piex::(anonymous namespace)::GetPreviewData(std::set<int, std
::less<int>, std::allocator<int> > const&, unsigned int, piex::StreamInterface*,
piex::PreviewImageData*) /tmp/skia/out/Debug/../../third_party/externals/piex/s
rc/piex.cc:68:10 | |
9 #5 0x72c2dc in fuzz_img(SkData*) /tmp/skia/out/Debug/../../fuzz/fuzz.cpp:119
:13 | |
10 #6 0x72bd09 in main /tmp/skia/out/Debug/../../fuzz/fuzz.cpp:53:30 | |
11 #7 0x7f4ae3494ec4 in __libc_start_main /tmp/tmp.Htw1L27e9P/csu/libc-start.c:
287 | |
12 #8 0x68399f in _start (/tmp/executables/skcodec/analyzer0/fuzz_asan_debug+0x
68399f) | |
13 | |
14 0x000001177628 is located 24 bytes to the left of global variable '<string liter
al>' defined in '../../src/gpu/gl/GrGLGpu.cpp:305:17' (0x1177640) of size 16 | |
15 '<string literal>' is ascii string 'Disable(0x0B42)' | |
16 0x000001177628 is located 35 bytes to the right of global variable '<string lite
ral>' defined in '../../src/gpu/gl/GrGLGpu.cpp:305:17' (0x11775e0) of size 37 | |
17 '<string literal>' is ascii string '../../src/gpu/gl/GrGLGpu.cpp(305) : ' | |
18 SUMMARY: AddressSanitizer: global-buffer-overflow /tmp/skia/out/Debug/../../src/
codec/SkMasks.cpp:54 convert_to_8(unsigned int, unsigned int) | |
19 Shadow bytes around the buggy address: | |
20 0x000080226e70: 00 00 00 00 00 00 00 01 f9 f9 f9 f9 00 00 00 00 | |
21 0x000080226e80: 05 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 | |
22 0x000080226e90: 00 00 00 00 00 00 00 01 f9 f9 f9 f9 00 00 00 00 | |
23 0x000080226ea0: 05 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 | |
24 0x000080226eb0: 00 00 00 00 00 00 00 01 f9 f9 f9 f9 00 00 00 00 | |
25 =>0x000080226ec0: 05 f9 f9 f9 f9[f9]f9 f9 00 00 f9 f9 f9 f9 f9 f9 | |
26 0x000080226ed0: 00 00 00 00 00 00 00 01 f9 f9 f9 f9 00 00 00 00 | |
27 0x000080226ee0: 05 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 | |
28 0x000080226ef0: 00 00 00 00 00 00 00 01 f9 f9 f9 f9 00 00 00 00 | |
29 0x000080226f00: 05 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 | |
30 0x000080226f10: 00 00 00 00 00 00 00 01 f9 f9 f9 f9 00 00 00 00 | |
31 Shadow byte legend (one shadow byte represents 8 application bytes): | |
32 Addressable: 00 | |
33 Partially addressable: 01 02 03 04 05 06 07 | |
34 Heap left redzone: fa | |
35 Heap right redzone: fb | |
36 Freed heap region: fd | |
37 Stack left redzone: f1 | |
38 Stack mid redzone: f2 | |
39 Stack right redzone: f3 | |
40 Stack partial redzone: f4 | |
41 Stack after return: f5 | |
42 Stack use after scope: f8 | |
43 Global redzone: f9 | |
44 Global init order: f6 | |
45 Poisoned by user: f7 | |
46 Container overflow: fc | |
47 Array cookie: ac | |
48 Intra object redzone: bb | |
49 ASan internal: fe | |
50 Left alloca redzone: ca | |
51 Right alloca redzone: cb | |
52 ==9140==ABORTING | |
OLD | NEW |