GNU bug report logs - #58334
29.0.50; ASAN heap use after free in gui_produce_glyphs

Previous Next

Package: emacs;

Reported by: Gerd Möllmann <gerd.moellmann <at> gmail.com>

Date: Thu, 6 Oct 2022 15:04:01 UTC

Severity: normal

Found in version 29.0.50

Full log


View this message in rfc822 format

From: Gerd Möllmann <gerd.moellmann <at> gmail.com>
To: Eli Zaretskii <eliz <at> gnu.org>
Cc: 58334 <at> debbugs.gnu.org, luangruo <at> yahoo.com
Subject: bug#58334: 29.0.50; ASAN heap use after free in gui_produce_glyphs
Date: Thu, 6 Oct 2022 20:36:22 +0200
On 22-10-06 20:30 , Eli Zaretskii wrote:
> Actually, I no longer think this will help, because redisplay_internal
> sets inhibit_free_realized_faces to zero at the beginning...

Yeah, I've seen the specbind right now.

> Any way of figuring out which face is it that triggers the ASAN?  Is
> it one of the basic faces, or some non-basic face?

I'm afraid no.  What about the idea to additionally check for inhibited 
GC?  That is, free faces only if not imhibit_free and not imhibit_gc?




This bug report was last modified 2 years and 310 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.