*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Marc Deslauriers 
(mdeslaur):

gdb -q --args rsvg crashed2.svg test.png
Reading symbols from rsvg...(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/bin/rsvg crashed2.svg test.png
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

(rsvg:14399): librsvg-CRITICAL **: rsvg_handle_set_size_callback:
assertion 'handle != NULL' failed

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff7bc55b0 in rsvg_handle_get_dimensions () from 
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2
(gdb) backtrace
#0  0x00007ffff7bc55b0 in rsvg_handle_get_dimensions () at 
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2
#1  0x00000000004025d3 in  ()
#2  0x00007ffff66d0830 in __libc_start_main (main=
    0x401960, argc=3, argv=0x7fffffffe568, init=<optimized out>, 
fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe558) at 
../csu/libc-start.c:291
#3  0x0000000000402989 in  ()

** Affects: librsvg (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Segmentation fault while converting an empty svg
https://bugs.launchpad.net/bugs/1760355
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to