summaryrefslogtreecommitdiff
path: root/drawinglayer/source/primitive2d/polygonprimitive2d.cxx
diff options
context:
space:
mode:
authorCaolán McNamara <caolan.mcnamara@collabora.com>2024-09-15 17:59:27 +0100
committerCaolán McNamara <caolan.mcnamara@collabora.com>2024-09-15 20:43:28 +0200
commit905e7c1105536c9757fa2c2faf670738aab02595 (patch)
tree3c831dcd7cc0fbeb7b35224c1857f61f63cd8d62 /drawinglayer/source/primitive2d/polygonprimitive2d.cxx
parent089640feca921f7838debed120b2f7c2c9458158 (diff)
ofz#71606 don't ignore CRCs when fuzzing
got a case similar to https://github.com/pnggroup/libpng/issues/587 with a backtrace of: /work/workdir/UnpackedTarball/libpng/png.c:1475:23: runtime error: signed integer overflow: -1703155269 - 692774662 cannot be represented in type 'png_fixed_point' (aka 'int') #0 0x59bbf901eab0 in png_XYZ_from_xy /work/workdir/UnpackedTarball/libpng/png.c:1475:23 #1 0x59bbf901eab0 in png_colorspace_check_xy /work/workdir/UnpackedTarball/libpng/png.c:1610:13 #2 0x59bbf901d8bc in png_colorspace_set_chromaticities /work/workdir/UnpackedTarball/libpng/png.c:1717:12 #3 0x59bbf9046855 in png_handle_cHRM /work/workdir/UnpackedTarball/libpng/pngrutil.c:1302:10 #4 0x59bbf902d064 in png_read_info /work/workdir/UnpackedTarball/libpng/pngread.c:175:10 #5 0x59bbf7c331d6 in (anonymous namespace)::reader(SvStream&, Graphic&, GraphicFilterImportFlags, BitmapScopedWriteAccess*, BitmapScopedWriteAccess*) /src/libreoffice/vcl/source/filter/png/PngImageReader.cxx:404:5 #6 0x59bbf7c36960 in read /src/libreoffice/vcl/source/filter/png/PngImageReader.cxx:845:55 #7 0x59bbf7c36960 in vcl::PngImageReader::read() /src/libreoffice/vcl/source/filter/png/PngImageReader.cxx:850:5 #8 0x59bbf786fe57 in LLVMFuzzerTestOneInput /src/libreoffice/vcl/workben/pngfuzzer.cxx:52:19 (gdb) print *xy $1 = { redx = 9, redy = 131616, greenx = 598048, greeny = 538976288, bluex = 0, bluey = 151551, whitex = 538976288, whitey = 538976288 } but not reproducible with a typical utility because we're unusually ignoring crc errors for fuzzing so reenable those and see if a testcase can be generated anyway. Change-Id: Ifc050ee082800906b087609154ec29ca39cd8fe6 Reviewed-on: https://gerrit.libreoffice.org/c/core/+/173409 Tested-by: Jenkins Reviewed-by: Caolán McNamara <caolan.mcnamara@collabora.com>
Diffstat (limited to 'drawinglayer/source/primitive2d/polygonprimitive2d.cxx')
0 files changed, 0 insertions, 0 deletions