[Octave-bug-tracker] [bug #55397] test imwrite error with address sanitizer

[Dmitri A. Sergatskov]

Follow-up Comment #2, bug #55397 (project octave):

The test that causing ASAN to crash is 
imwrite (1, "filename", "junk"):



octave:1> imwrite (1, "filename", "junk")
warning: imwrite: unlisted image format junk (see imformats).  Trying to save
anyway.
warning: called from
    imwrite at line 115 column 5
=================================================================
==3451==ERROR: AddressSanitizer: heap-use-after-free on address 0x6250000411f8
at pc 0x7fd9726ca2dd bp 0x7ffc47c73d80 sp 0x7ffc47c73528
READ of size 5 at 0x6250000411f8 thread T0
    #0 0x7fd9726ca2dc  (/lib64/libasan.so.5+0xa22dc)
    #1 0x7fd96ddcf7b0 in GetLocaleExceptionMessage
(/lib64/libGraphicsMagick-Q16.so.3+0xa97b0)
    #2 0x7fd96ddcfc9e in ThrowLoggedException
(/lib64/libGraphicsMagick-Q16.so.3+0xa9c9e)
    #3 0x7fd96ddb4103 in WriteImage
(/lib64/libGraphicsMagick-Q16.so.3+0x8e103)
    #4 0x7fd96ddb435a in WriteImages
(/lib64/libGraphicsMagick-Q16.so.3+0x8e35a)
    #5 0x7fd971442301 in void
Magick::writeImages<__gnu_cxx::__normal_iterator<Magick::Image*,
std::vector<Magick::Image, std::allocator<Magick::Image> > >
>(__gnu_cxx::__normal_iterator<Magick::Image*, std::vector<Magick::Image,
std::allocator<Magick::Image> > >,
__gnu_cxx::__normal_iterator<Magick::Image*, std::vector<Magick::Image,
std::allocator<Magick::Image> > >, std::__cxx11::basic_string<char,
std::char_traits<char>, std::allocator<char> > const&, bool)
(/home/dima/src/octave/gcc_asan_min/libinterp/.libs/liboctinterp.so.6+0x1828301)
    #6 0x7fd971418bb7 in write_file
../libinterp/corefcn/__magick_read__.cc:1446
    #7 0x7fd97141b960 in F__magick_write__(octave_value_list const&, int)
../libinterp/corefcn/__magick_read__.cc:1631
    #8 0x7fd970ee4a30 in octave_builtin::call(octave::tree_evaluator&, int,
octave_value_list const&) ../libinterp/octave-value/ov-builtin.cc:6
<<<etc... >>>>



Dmitri.
-- 


    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?55397>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/