GNU bug report logs - #58334
29.0.50; ASAN heap use after free in gui_produce_glyphs

Previous Next

Package: emacs;

Reported by: Gerd Möllmann <gerd.moellmann <at> gmail.com>

Date: Thu, 6 Oct 2022 15:04:01 UTC

Severity: normal

Found in version 29.0.50

Full log


View this message in rfc822 format

From: Eli Zaretskii <eliz <at> gnu.org>
To: Gerd Möllmann <gerd.moellmann <at> gmail.com>
Cc: 58334 <at> debbugs.gnu.org, luangruo <at> yahoo.com
Subject: bug#58334: 29.0.50; ASAN heap use after free in gui_produce_glyphs
Date: Fri, 07 Oct 2022 15:01:47 +0300
> Date: Thu, 6 Oct 2022 20:36:22 +0200
> Cc: 58334 <at> debbugs.gnu.org, luangruo <at> yahoo.com
> From: Gerd Möllmann <gerd.moellmann <at> gmail.com>
> 
> On 22-10-06 20:30 , Eli Zaretskii wrote:
> > Actually, I no longer think this will help, because redisplay_internal
> > sets inhibit_free_realized_faces to zero at the beginning...
> 
> Yeah, I've seen the specbind right now.
> 
> > Any way of figuring out which face is it that triggers the ASAN?  Is
> > it one of the basic faces, or some non-basic face?
> 
> I'm afraid no.  What about the idea to additionally check for inhibited 
> GC?  That is, free faces only if not imhibit_free and not imhibit_gc?

I don't see how "GC inhibited" is related, except by chance.  It
sounds wrong to conflate the two.




This bug report was last modified 2 years and 312 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.