OK, the problem is a dumb ABI break. LibRaw version 0.19.3 added a new member to class LibRaw but did not flag it as an ABI change. So existing users of the library will now construct LibRaw objects slightly too small, leading to the above heap overrun/corruption when assigning field 'metadata_blocks'.
https://github.com/LibRaw/LibRaw/commit/ec78e397a2 The only fix is to just rebuild users of LibRaw, such as freeimage, and then the crash goes away. ** Changed in: libraw (Ubuntu) Status: In Progress => Won't Fix ** Changed in: libraw (Ubuntu) Status: Won't Fix => In Progress ** Bug watch added: github.com/LibRaw/LibRaw/issues #232 https://github.com/LibRaw/LibRaw/issues/232 ** Also affects: libraw via https://github.com/LibRaw/LibRaw/issues/232 Importance: Unknown Status: Unknown ** Changed in: freeimage (Ubuntu) Importance: Low => Medium ** Changed in: libraw (Ubuntu) Importance: Low => Medium ** Changed in: freeimage (Ubuntu) Status: In Progress => Triaged ** Changed in: libraw (Ubuntu) Status: In Progress => Triaged -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to libraw in Ubuntu. https://bugs.launchpad.net/bugs/1838387 Title: i386 testAPI in freeimage 3.18.0+ds2 crashes with proposed libraw 0.19.3-1 Status in LibRaw: Unknown Status in freeimage package in Ubuntu: Triaged Status in libraw package in Ubuntu: Triaged Bug description: The i386 testAPI in freeimage 3.18.0+ds2 crashes with proposed libraw 0.19.3-1: free(): invalid pointer Aborted (core dumped) Originally reported at: http://autopkgtest.ubuntu.com/packages/f/freeimage/eoan/i386 To manage notifications about this bug go to: https://bugs.launchpad.net/libraw/+bug/1838387/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
