13 Star 0 Fork 22

src-openEuler / poppler

 / 详情

Out-of-memory in poppler_document_new_from_data

已完成
缺陷
创建于  
2021-10-25 11:17
Live Heap Allocations: 3868781599 bytes in 5050 chunks; quarantined: 452206 bytes in 2873 chunks; 6971 other chunks; total chunks: 14894; showing top 95% (at most 8 unique contexts)
3844074444 byte(s) (99%) in 6 allocation(s)
    #0 0x66fefd in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3
    #1 0x6ecc9b in gmalloc(unsigned long, bool) /src/poppler/goo/gmem.h:41:17
    #2 0xaf2e75 in gmalloc_checkoverflow(unsigned long) /src/poppler/goo/gmem.h:55:10
    #3 0xaf2c56 in JBIG2Bitmap::JBIG2Bitmap(unsigned int, int, int) /src/poppler/poppler/JBIG2Stream.cc:729:27
    #4 0xb055ec in JBIG2Stream::readTextRegion(bool, bool, int, int, unsigned int, unsigned int, int, JBIG2HuffmanTable const*, unsigned int, JBIG2Bitmap**, unsigned int, unsigned int, unsigned int, unsigned int, int, JBIG2HuffmanTable const*, JBIG2HuffmanTable const*,JBIG2HuffmanTable const*, JBIG2HuffmanTable const*, JBIG2HuffmanTable const*, JBIG2HuffmanTable const*, JBIG2HuffmanTable const*, JBIG2HuffmanTable const*, unsigned int, int*, int*) /src/poppler/poppler/JBIG2Stream.cc:2377:16
    #5 0xafa6fb in JBIG2Stream::readSymbolDictSeg(unsigned int, unsigned int, unsigned int*, unsigned int) /src/poppler/poppler/JBIG2Stream.cc:1882:8
    #6 0xaf75fe in JBIG2Stream::readSegments() /src/poppler/poppler/JBIG2Stream.cc:1436:12
    #7 0xaf64fe in JBIG2Stream::reset() /src/poppler/poppler/JBIG2Stream.cc:1267:3
    #8 0x97cc24 in XRef::readXRefStream(Stream*, long long*) /src/poppler/poppler/XRef.cc:693:12
    #9 0x979af2 in XRef::readXRef(long long*, std::__1::vector<long long, std::__1::allocator<long long> >*, std::__1::vector<int, std::__1::allocator<int> >*) /src/poppler/poppler/XRef.cc:489:12
    #10 0x9778b9 in XRef::XRef(BaseStream*, long long, long long, bool*, bool) /src/poppler/poppler/XRef.cc:282:7
    #11 0x8d9e33 in PDFDoc::setup(GooString const*, GooString const*) /src/poppler/poppler/PDFDoc.cc:279:18
    #12 0x8da448 in PDFDoc::PDFDoc(BaseStream*, GooString const*, GooString const*, void*) /src/poppler/poppler/PDFDoc.cc:243:8
    #13 0x6a3fbd in poppler_document_new_from_data /src/poppler/glib/poppler-document.cc:262:16
    #14 0x6a30fb in LLVMFuzzerTestOneInput /src/poppler/glib/tests/fuzzing/pdf_draw_fuzzer.cc:22:11
    #15 0x5a91d3 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #16 0x594942 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #17 0x59a5e6 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #18 0x5c3af2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #19 0x7f21fbeccb26 in __libc_start_main (/lib64/libc.so.6+0x25b26)

评论 (4)

fusiontest 创建了缺陷
openeuler-ci-bot 添加了
 
sig/Desktop
标签
展开全部操作日志

Hi fusiontest, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at
https://gitee.com/openeuler/community/blob/master/en/sig-infrastructure/command.md.
If you have any questions, please contact the SIG: Desktop, and any of the maintainers: @yanan-rock, @Randy.Wang, @薄皮小笼包, @small_leek, @t.feng, @orange-snn, @wenlongd, @weidongkl, @douyan.

fusiontest 上传了附件fusiontest-testcase-pdf_draw_fuzzer-202110250006

@fusiontest 麻烦能否提供下详细复现方法或者用例

@fusiontest poppler master分支已升级版本

t.feng 任务状态待办的 修改为已挂起

当前最新版本已修复该问题,请升级到最新版本
输入图片说明

孙苏皖 负责人设置为周文培
周文培 任务状态已挂起 修改为已完成

登录 后才可以发表评论

状态
负责人
项目
里程碑
Pull Requests
关联的 Pull Requests 被合并后可能会关闭此 issue
分支
开始日期   -   截止日期
-
置顶选项
优先级
预计工期 (小时)
参与者(3)
5329419 openeuler ci bot 1632792936
1
https://gitee.com/src-openeuler/poppler.git
git@gitee.com:src-openeuler/poppler.git
src-openeuler
poppler
poppler

搜索帮助