Bug 91647

Summary:	use after free
Product:	cairo	Reporter:	Massimo <sixtysix>
Component:	general	Assignee:	Chris Wilson <chris>
Status:	RESOLVED MOVED	QA Contact:	cairo-bugs mailing list <cairo-bugs>
Severity:	normal
Priority:	medium
Version:	unspecified
Hardware:	Other
OS:	All
Whiteboard:
i915 platform:		i915 features:

Description Massimo 2015-08-15 17:19:40 UTC

scan-build finds few use after free errors like this:

http://cgit.freedesktop.org/cairo/tree/test/png.c#n142

and this:

http://cgit.freedesktop.org/cairo/tree/test/pdf-mime-data.c#n145

but not this one:

http://cgit.freedesktop.org/cairo/tree/src/cairo-recording-surface.c#n1662

found by AddressSanitizer instead.

Unfortunately scan-build among real bugs reports many
false positives.

Comment 1 Massimo 2015-08-16 12:13:35 UTC

Also 'grep "free (filename)" test/*.c' has false positives,
but finds many similar bugs:

Use after free:
http://cgit.freedesktop.org/cairo/tree/test/pdf-features.c#n135
http://cgit.freedesktop.org/cairo/tree/test/pdf-features.c#n139

Memory laeks:
http://cgit.freedesktop.org/cairo/tree/test/bitmap-font.c#n93
http://cgit.freedesktop.org/cairo/tree/test/create-from-png.c#n182
http://cgit.freedesktop.org/cairo/tree/test/create-from-png.c#n204
http://cgit.freedesktop.org/cairo/tree/test/create-from-png.c#n224
http://cgit.freedesktop.org/cairo/tree/test/create-from-png.c#n246
http://cgit.freedesktop.org/cairo/tree/test/create-from-png.c#n267
http://cgit.freedesktop.org/cairo/tree/test/create-from-png.c#n289
http://cgit.freedesktop.org/cairo/tree/test/ps-eps.c#n238

Comment 2 GitLab Migration User 2018-08-25 13:44:30 UTC

-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/cairo/cairo/issues/172.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.