Bug #664
Crash when reading PNG image
100%
Description
Exiv2 crashes when reading this PNG image found by a digikam user:
http://bugs.kde.org/attachment.cgi?id=39398
(pay attention when clicking under KDE, may also crash konqueror which is using exiv2 through a component)
Backtrace of command line tool (sorry, didn't manage to compile with debug info):
#0 0x00007ffff7ac8259 in Exiv2::Internal::PngChunk::parseChunkContent(Exiv2::Image*, unsigned char const*, Exiv2::DataBuf) ()
from /usr/lib64/libexiv2.so.5
#1 0x00007ffff7ac8cea in Exiv2::Internal::PngChunk::decodeTXTChunk(Exiv2::Image*, Exiv2::DataBuf const&, Exiv2::Internal::PngChunk::TxtChunkType) () from /usr/lib64/libexiv2.so.5
#2 0x00007ffff7ac6500 in Exiv2::PngImage::readMetadata() () from /usr/lib64/libexiv2.so.5
#3 0x000000000041895c in Action::Print::printList() ()
The image can be opened with GIMP, it contains valid image data.
Related digikam bug is here:
http://bugs.kde.org/show_bug.cgi?id=220322
Files
Associated revisions
History
Updated by Andreas Huggel almost 12 years ago
sorry, didn't manage to compile with debug info
That requires some insider-info:
- make config; ./configure
- edit config/config.mk and replace -O2 with -ggdb
- make; make install
Updated by Andreas Huggel almost 12 years ago
- File bug664.patch bug664.patch added
- Category set to image format
- Status changed from New to Assigned
- Assignee set to Andreas Huggel
- Target version set to 0.19
- % Done changed from 0 to 90
Attached patch fixes the problem. I'll apply the patch later today and it will be included in 0.19.
Updated by Andreas Huggel almost 12 years ago
pay attention when clicking under KDE, may also crash konqueror which is using exiv2 through a component
Interesting, I didn't know that. What component are you referring to?
Indeed, according to the Debian package dependencies, some core KDE packages (kdelibs5, kdebase-runtime and others) depend on the streamanalyzer library (libstreamanalyzer0) which depends on libexiv2-5.
Updated by Andreas Huggel almost 12 years ago
- Status changed from Assigned to Resolved
- % Done changed from 90 to 100
Patch checked-in.
Updated by Marcel Wiesweg almost 12 years ago
It's gwenview, crashing on its own as well as konqueror embedding the gwenview component.
libgwenview seems to use libexiv2 directly, not through libkexiv2.
#664: Check key size before comparing it.