[gs-bugs] [Bug 691546] New: buffer overflow and asserts in imagesmooth

[bugzilla-daemon at ghostscript.com]

http://bugs.ghostscript.com/show_bug.cgi?id=691546

           Summary: buffer overflow and asserts in imagesmooth
           Product: MuPDF
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P4
         Component: fitz
        AssignedTo: tor.andersson at artifex.com
        ReportedBy: tor.andersson at artifex.com
         QAContact: gs-bugs at ghostscript.com
   Estimated Hours: 0.0


Created an attachment (id=6640)
 --> (http://bugs.ghostscript.com/attachment.cgi?id=6640)
10.1.1.30.8066.pdf

Some problems in the imagesmooth code:

draw/imagesmooth.c:569: fz_smoothscalepixmap: Assertion `max_row < src->h'
failed.
draw/imagesmooth.c:308: add_weight: Assertion `weights->count == j-1' failed.

==1840== Invalid write of size 4
==1840==    at 0x41D6BB: reorder_weights (imagesmooth.c:391)
==1840==    by 0x41D922: make_weights (imagesmooth.c:463)
==1840==    by 0x41DC3B: fz_smoothscalepixmap (imagesmooth.c:541)

-- 
Configure bugmail: http://bugs.ghostscript.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.