On Saturday, 29 December 2018 16.52.02 WET José Abílio Matos wrote:
> Hi,
>       while looking into bug #4269 (after all Jürgen asked for my help... 11
> years ago :-) ) I came with the attached case.
> 
> The instructions to crash lyx are easy, download the files to the same
> directory, open the lyx file and preview it (the pdf) ... Boom. :-)
> 
> The peculiarity of this case is that the png file is actually a gzipped
> compressed png. If the file is called sombrero.png.gz (the usual scenario in
> this case) then the crash does not occur. If it is called e.g.
> sombrero.png.compressed then latex will fail complaining that it does not
> know compressed.png

Running gdb I found the culprit:
src/insets/InsetGraphics.cpp:591

mangled[mangled.length() - ext_len] = '.';

clearly we are getting an out of bounds index.

Is this worth fixing? :-)
-- 
José Abílio


Reply via email to