Version: 0.5.5 (using KDE 3.5.5 "release 45.2" , openSUSE 10.2) Compiler: Target: i586-suse-linux OS: Linux (i686) release 2.6.18.2-34-default This problem can be reproduced at will. 1. Save a table as an image to the clipboard (Ctl C, choose image) 2. Paste to an Annotation note in CmapTools (http://cmap.ihmc.us/) 3. Crash occurs with this backtrace: System configuration startup check disabled. (no debugging symbols found) Using host libthread_db library "/lib/libthread_db.so.1". (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) [Thread debugging using libthread_db enabled] [New Thread -1230833968 (LWP 30832)] (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) (no debugging symbols found) [KCrash handler] #9 0xb67931d9 in kimgio_xv_write () from /opt/kde3/lib/kde3/kimg_xview.so #10 0xffffffff in ?? () #11 0xffffffff in ?? () #12 0xffffffff in ?? () #13 0xffffffff in ?? () #14 0xffffffff in ?? () #15 0xffffffff in ?? () #16 0xffffffff in ?? () #17 0xffffffff in ?? () #18 0xffffffff in ?? () #19 0xffffffff in ?? () #20 0xffffffff in ?? () #21 0xffffffff in ?? () #22 0xffffffff in ?? () #23 0xffffffff in ?? () #24 0xffffffff in ?? () #25 0xffffffff in ?? () #26 0xffffffff in ?? () #27 0xffffffff in ?? () #28 0xffffffff in ?? () #29 0xffffffff in ?? () #30 0xffffffff in ?? () #31 0xffffffff in ?? () #32 0xffffffff in ?? () #33 0xffffffff in ?? () #34 0xffffffff in ?? () #35 0xffffffff in ?? () #36 0xffffffff in ?? () #37 0xffffffff in ?? () #38 0xffffffff in ?? () #39 0xffffffff in ?? () #40 0xffffffff in ?? () #41 0xffffffff in ?? () #42 0xffffffff in ?? () #43 0xffffffff in ?? () #44 0xffffffff in ?? () #45 0xffffffff in ?? () #46 0xffffffff in ?? () #47 0xffffffff in ?? () #48 0xffffffff in ?? () #49 0xffffffff in ?? () #50 0xffffffff in ?? () #51 0xffffffff in ?? () #52 0xffffffff in ?? () #53 0xffffffff in ?? () #54 0xffffffff in ?? () #55 0xffffffff in ?? () #56 0xffffffff in ?? () #57 0xffffffff in ?? () #58 0xffffffff in ?? () #59 0xffffffff in ?? () #60 0xffffffff in ?? () #61 0xffffffff in ?? () #62 0xffffffff in ?? () #63 0xffffffff in ?? () #64 0xffffffff in ?? () #65 0xffffffff in ?? () #66 0xffffffff in ?? () #67 0xffffffff in ?? () #68 0xffffffff in ?? () #69 0xffffffff in ?? () #70 0xffffffff in ?? () #71 0xffffffff in ?? () #72 0xffffffff in ?? () #73 0xffffffff in ?? () #74 0xffffffff in ?? () #75 0xffffffff in ?? () #76 0xffffffff in ?? () #77 0xffffffff in ?? () #78 0xffffffff in ?? () #79 0xffffffff in ?? () #80 0xffffffff in ?? () #81 0xffffffff in ?? () #82 0xffffffff in ?? () #83 0xffffffff in ?? () #84 0xffffffff in ?? () #85 0xffffffff in ?? () #86 0xb76dffff in QWidget::setUpdatesEnabled () from /usr/lib/qt3/lib/libqt-mt.so.3 #87 0xbf861610 in ?? () #88 0xbf861608 in ?? () #89 0xbf8615d8 in ?? () #90 0xb724063f in QImageIO::write () from /usr/lib/qt3/lib/libqt-mt.so.3
Does it happen with that software only? Can you do the same pasting to e.g. kolourpaint? And, the backtrace is completely useless.
Hello Pino! _Environment: _P4, openSUSE Linux 10.2, KDE. Standard install, CmapTools 4.09_ __Problem:_ Attempting to paste an image from kpfd into a Cmap annotation causes kpdf to crash _Additional checks:_ I checked it with the following: - kolourpaint - OpenOffice Draw - The GIMP - Krita - MS Word under CrossoverOffice (Wine+) Each of these programs was OK. What puzzles me is that once it gets into the KDE clipboard, why should the paste target affect kpdf? _Further testing:_ I ran a few more tests: 1. Run CmapTools & load the target document 2. Load the pdf document into kpdf 3. Copy the image to the clipboard 4. Close kpdf 5. Paste the clipboard to the target Cmap document - and get a few numbers, but no image. I suspect that it tries to treat the clipboard image as text. Next: 1.-3. as above 4. Run kolourpaint and paste the image - OK. 5. Select and recopy the image from the kolourpaint canvas 6. Paste the clipboard to the target Cmap document - and again get a few numbers, but no image 7. This time kolourpaint crashes! _Summary:_ I think that there are several problems here: 1. It seems ridiculous that a paste from the KDE clipboard should affect the task from which it was copied - no matter how badly behaved the receiving task happens to be. 2. It is not a specifically kpdf issue (You're off the hook!) 3. The CmapTools program is written in Java and uses JRE 1.6.0. I suspect that the place to which I wanted to paste the image may be a text-only window, in which case I should have got nothing at all or perhaps an error. There is definitely something amiss here. _What next:_ 1. Perhaps you could forward this material to the relevant KDE folks. 2. Once they have some idea of what's going on, either they or I can co-ordinate with the CmapTools people. 3. In any event, I'm Cc-ing cmapsupport. 4. I'll need a bit of guidance to set up for proper backtraces. Regards, _Daniel_ Pino Toscano wrote: [bugs.kde.org quoted mail] <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> Hello Pino!<br> <br> <u>Environment:<br> </u>P4, openSUSE Linux 10.2, KDE. Standard install, CmapTools 4.09<u><br> <br> </u><u>Problem:</u><br> Attempting to paste an image from kpfd into a Cmap annotation causes kpdf to crash<br> <br> <u>Additional checks:</u><br> I checked it with the following:<br> - kolourpaint<br> - OpenOffice Draw<br> - The GIMP<br> - Krita<br> - MS Word under CrossoverOffice (Wine+)<br> Each of these programs was OK.<br> <br> What puzzles me is that once it gets into the KDE clipboard, why should the paste target affect kpdf?<br> <br> <u>Further testing:</u><br> I ran a few more tests:<br> <br> 1. Run CmapTools & load the target document<br> 2. Load the pdf document into kpdf<br> 3. Copy the image to the clipboard<br> 4. Close kpdf<br> 5. Paste the clipboard to the target Cmap document - and get a few numbers, but no image. I suspect that it tries to treat the clipboard image as text.<br> <br> Next:<br> 1.-3. as above<br> 4. Run kolourpaint and paste the image - OK.<br> 5. Select and recopy the image from the kolourpaint canvas<br> 6. Paste the clipboard to the target Cmap document - and again get a few numbers, but no image<br> 7. This time kolourpaint crashes!<br> <br> <u>Summary:</u><br> I think that there are several problems here:<br> 1. It seems ridiculous that a paste from the KDE clipboard should affect the task from which it was copied - no matter how badly behaved the receiving task happens to be.<br> 2. It is not a specifically kpdf issue (You're off the hook!)<br> 3. The CmapTools program is written in Java and uses JRE 1.6.0. I suspect that the place to which I wanted to paste the image may be a text-only window, in which case I should have got nothing at all or perhaps an error. There is definitely something amiss here.<br> <br> <u>What next:</u><br> 1. Perhaps you could forward this material to the relevant KDE folks.<br> 2. Once they have some idea of what's going on, either they or I can co-ordinate with the CmapTools people.<br> 3. In any event, I'm Cc-ing cmapsupport.<br> 4. I'll need a bit of guidance to set up for proper backtraces.<br> <br> Regards,<br> <br> <u>Daniel</u><br> <br> <br> <br> <br> <br> Pino Toscano wrote: <blockquote cite="mid20070214142002.15067.qmail@ktown.kde.org" type="cite"> <pre wrap="">------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter. <a class="moz-txt-link-freetext" href="http://bugs.kde.org/show_bug.cgi?id=141670">http://bugs.kde.org/show_bug.cgi?id=141670</a> ------- Additional Comments From toscano.pino tiscali it 2007-02-14 15:20 ------- Does it happen with that software only? Can you do the same pasting to e.g. kolourpaint? And, the backtrace is completely useless. </pre> </blockquote> </body> </html> Created an attachment (id=19697) dilogsys.vcf
SVN commit 634159 by lunakl: Fix buffer overflow during writing. BUG: 141670 M +2 -1 xview.cpp --- branches/KDE/3.5/kdelibs/kimgio/xview.cpp #634158:634159 @@ -134,7 +134,7 @@ image.convertDepth( 8 ); } - uchar buffer[ 128 ]; + uchar* buffer = new uchar[ w ]; for ( int py = 0; py < h; py++ ) { @@ -162,6 +162,7 @@ } f.writeBlock( (const char*)buffer, w ); } + delete[] buffer; imageio->setStatus( 0 ); }
Please verify that removing /opt/kde3/share/services/xv.kimgio avoids the problem.
*** Bug 149246 has been marked as a duplicate of this bug. ***
*** Bug 156621 has been marked as a duplicate of this bug. ***