Bug#638348: crash on ass/ssa subtitle rendering in video player

[Steve Langasek]

Full backtrace with debugging symbols:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5b08fec in ft_stroke_border_close (border=0x1abed40, 
    reverse=0 '\000')
    at 
/home/devel/freetype/freetype-2.4.6/freetype-2.4.6/src/base/ftstroke.c:364
364           border->points[start] = border->points[count];
(gdb) bt
#0  0x00007ffff5b08fec in ft_stroke_border_close (border=0x1abed40, 
    reverse=0 '\000')
    at 
/home/devel/freetype/freetype-2.4.6/freetype-2.4.6/src/base/ftstroke.c:364
#1  0x00007ffff5b0b51e in FT_Stroker_EndSubPath (stroker=0x1abecd0)
    at 
/home/devel/freetype/freetype-2.4.6/freetype-2.4.6/src/base/ftstroke.c:1935
#2  0x00007ffff5b0ba49 in FT_Stroker_ParseOutline (stroker=0x1abecd0, 
    outline=0x1aca258, opened=0 '\000')
    at 
/home/devel/freetype/freetype-2.4.6/freetype-2.4.6/src/base/ftstroke.c:2225
#3  FT_Stroker_ParseOutline (stroker=0x1abecd0, outline=0x1aca258, 
    opened=0 '\000')
    at 
/home/devel/freetype/freetype-2.4.6/freetype-2.4.6/src/base/ftstroke.c:2044
#4  0x00007ffff5b0bdb6 in FT_Glyph_StrokeBorder (pglyph=0xce5000, 
    stroker=0x1abecd0, inside=<value optimized out>, destroy=1 '\001')
    at 
/home/devel/freetype/freetype-2.4.6/freetype-2.4.6/src/base/ftstroke.c:2375
#5  0x00000000005c89c8 in ?? ()
#6  0x00000000005ca39e in ass_render_frame ()
#7  0x00000000005b901c in ?? ()
#8  0x00000000004f7b8b in filter_video ()
#9  0x000000000045c5c1 in ?? ()
#10 0x0000000000461045 in main ()
(gdb) print (signed int)start
$6 = -1

This appears to be upstream bug #33992, fixed in git.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slanga...@ubuntu.com                                     vor...@debian.org

signature.asc
Description: Digital signature