Closed
Bug 1814559
Opened 3 years ago
Closed 3 years ago
Assertion failure: decodedData->mAlpha.isSome(), at /builds/worker/checkouts/gecko/image/decoders/nsAVIFDecoder.cpp:1503
Categories
(Core :: Graphics: ImageLib, defect)
Core
Graphics: ImageLib
Tracking
()
RESOLVED
DUPLICATE
of bug 1814561
| Tracking | Status | |
|---|---|---|
| firefox111 | --- | fixed |
People
(Reporter: tsmith, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: assertion, testcase)
Attachments
(1 file)
|
1.57 KB,
image/avif
|
Details |
Found while fuzzing m-c 20230201-b7f075124503 (--enable-debug --enable-fuzzing)
Requires pref image.avif.sequence.enabled=true
Assertion failure: decodedData->mAlpha.isSome(), at /builds/worker/checkouts/gecko/image/decoders/nsAVIFDecoder.cpp:1503
#0 0x7fb3e0913941 in mozilla::image::nsAVIFDecoder::Decode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/decoders/nsAVIFDecoder.cpp:1503:3
#1 0x7fb3e0910f61 in mozilla::image::nsAVIFDecoder::DoDecode(mozilla::image::SourceBufferIterator&, mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/decoders/nsAVIFDecoder.cpp:1181:25
#2 0x7fb3e0853057 in mozilla::image::Decoder::Decode(mozilla::image::IResumable*) /builds/worker/checkouts/gecko/image/Decoder.cpp:177:19
#3 0x7fb3e086bea2 in mozilla::image::MetadataDecodingTask::Run() /builds/worker/checkouts/gecko/image/IDecodingTask.cpp:161:34
#4 0x7fb3e0875401 in mozilla::image::DecodingTask::Run() /builds/worker/checkouts/gecko/image/DecodePool.cpp:146:12
#5 0x7fb3df1aee03 in mozilla::TaskController::RunPoolThread() /builds/worker/checkouts/gecko/xpcom/threads/TaskController.cpp:328:33
#6 0x7fb3f3203c86 in _pt_root /builds/worker/checkouts/gecko/nsprpub/pr/src/pthreads/ptthread.c:201:5
#7 0x7fb3f3f84608 in start_thread /build/glibc-SzIz7B/glibc-2.31/nptl/pthread_create.c:477:8
#8 0x7fb3f3b2f132 in __clone /build/glibc-SzIz7B/glibc-2.31/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:95
Flags: in-testsuite?
Updated•3 years ago
|
Severity: -- → S3
Comment 1•3 years ago
•
|
||
I was able to reproduce this with image.avif.sequence.enabled=true. (but not false).
This is covered by the checks added in Bug 1814561.
Updated•3 years ago
|
You need to log in
before you can comment on or make changes to this bug.
Description
•