OLD | NEW |
| (Empty) |
1 ================================================================= | |
2 ==102004==ERROR: AddressSanitizer: heap-use-after-free on address 0x000000f259c0
at pc 0x0000009de9c1 bp 0x7ffdb340f360 sp 0x7ffdb340f358 | |
3 READ of size 1 at 0x000000f259c0 thread T0 | |
4 #0 0x9de9c0 in convert_to_8_asan(unsigned int, unsigned int) /tmp/skia/out/R
elease/../../src/codec/SkMasks.cpp:54:16 | |
5 #1 0x9dd67e in swizzle_mask24_to_n32_opaque(void*, unsigned char const*, int
, SkMasks*, unsigned int, unsigned int) /tmp/skia/out/Release/../../src/codec/Sk
MaskSwizzler.cpp:93:23 | |
6 #2 0x9d82d6 in SkBmpMaskCodec::decodeRows(SkImageInfo const&, void*, unsigne
d long, SkCodec::Options const&) /tmp/skia/out/Release/../../src/codec/SkBmpMask
Codec.cpp:103:9 | |
7 #3 0x9d805a in SkBmpMaskCodec::onGetPixels(SkImageInfo const&, void*, unsign
ed long, SkCodec::Options const&, unsigned int*, int*, int*) /tmp/skia/out/Relea
se/../../src/codec/SkBmpMaskCodec.cpp:53:16 | |
8 #4 0x9c1453 in SkCodec::getPixels(SkImageInfo const&, void*, unsigned long,
SkCodec::Options const*, unsigned int*, int*) /tmp/skia/out/Release/../../src/co
dec/SkCodec.cpp:204:27 | |
9 #5 0x7245fb in fuzz_img(SkData*) /tmp/skia/out/Release/../../fuzz/fuzz.cpp:1
19:13 | |
10 #6 0x724052 in main /tmp/skia/out/Release/../../fuzz/fuzz.cpp:53:30 | |
11 #7 0x7fda10ae6ec4 in __libc_start_main /tmp/tmp.Htw1L27e9P/csu/libc-start.c:
287 | |
12 #8 0x67bfcf in _start (/tmp/executables/skcodec/analyzer0/fuzz_asan_release+
0x67bfcf) | |
13 | |
14 0x000000f259c0 is located 32 bytes to the left of global variable 'MIN_SIZE' def
ined in '../../src/gpu/GrResourceProvider.cpp:102:31' (0xf259e0) of size 4 | |
15 0x000000f259c0 is located 20 bytes to the right of global variable 'kPattern' de
fined in '../../src/gpu/GrResourceProvider.cpp:69:27' (0xf259a0) of size 12 | |
16 SUMMARY: AddressSanitizer: heap-use-after-free /tmp/skia/out/Release/../../src/c
odec/SkMasks.cpp:54 convert_to_8(unsigned int, unsigned int) | |
17 Shadow bytes around the buggy address: | |
18 0x0000801dcae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
19 0x0000801dcaf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
20 0x0000801dcb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
21 0x0000801dcb10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
22 0x0000801dcb20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
23 =>0x0000801dcb30: 00 00 00 00 00 04 f9 f9[f9]f9 f9 f9 04 f9 f9 f9 | |
24 0x0000801dcb40: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 | |
25 0x0000801dcb50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
26 0x0000801dcb60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
27 0x0000801dcb70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
28 0x0000801dcb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
29 Shadow byte legend (one shadow byte represents 8 application bytes): | |
30 Addressable: 00 | |
31 Partially addressable: 01 02 03 04 05 06 07 | |
32 Heap left redzone: fa | |
33 Heap right redzone: fb | |
34 Freed heap region: fd | |
35 Stack left redzone: f1 | |
36 Stack mid redzone: f2 | |
37 Stack right redzone: f3 | |
38 Stack partial redzone: f4 | |
39 Stack after return: f5 | |
40 Stack use after scope: f8 | |
41 Global redzone: f9 | |
42 Global init order: f6 | |
43 Poisoned by user: f7 | |
44 Container overflow: fc | |
45 Array cookie: ac | |
46 Intra object redzone: bb | |
47 ASan internal: fe | |
48 Left alloca redzone: ca | |
49 Right alloca redzone: cb | |
50 ==102004==ABORTING | |
OLD | NEW |