Closed
Bug 1210256
Opened 10 years ago
Closed 9 years ago
Assertion: IntRect(IntPoint(), GetSize()).IsEqualEdges(aFrameRect) [@mozilla::image::nsPNGDecoder::CheckForTransparency]
Categories
(Core :: Graphics: ImageLib, defect)
Core
Graphics: ImageLib
Tracking
()
RESOLVED
WORKSFORME
| Tracking | Status | |
|---|---|---|
| firefox44 | --- | affected |
People
(Reporter: tsmith, Unassigned)
References
Details
(Keywords: assertion, testcase)
Attachments
(2 files)
test_case.png
Found while fuzzing. Not sure if this is a sec issue feel free to open it if it not.
Assertion failure: IntRect(IntPoint(), GetSize()).IsEqualEdges(aFrameRect), at /builds/slave/m-cen-l64-asan-d-0000000000000/build/src/image/decoders/nsPNGDecoder.cpp:155
|
Reporter | |
Comment 1•10 years ago
|
||
|
||
Comment 2•10 years ago
|
||
Haven't debugged this, but bug 1060609 seems like the most likely culprit just based on the location of the assertion.
Blocks: 1060609
|
||
Comment 3•10 years ago
|
||
Can you figure out if this is a security issue at least, Seth? Thanks.
Flags: needinfo?(seth)
|
|
||
Comment 4•9 years ago
|
||
Tyson, can you test this to see if it still reproduces?
Flags: needinfo?(seth) → needinfo?(twsmith)
|
|
Reporter | |
Comment 5•9 years ago
|
||
Looks like this is no longer reproducible.
Status: NEW → RESOLVED
Closed: 9 years ago
Flags: needinfo?(twsmith)
Resolution: --- → WORKSFORME
|
||
Updated•9 years ago
|
Group: gfx-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•