Your message dated Fri, 11 Sep 2015 16:20:41 -0700
with message-id <20150911232041.ga14...@virgil.dodds.net>
and subject line Re: libfreetype6_2.5.2-3 makes some fonts unusable
has caused the Debian Bug report #780143,
regarding libfreetype6_2.5.2-3 makes some fonts unusable
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
780143: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=780143
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libfreetype6
Version: 2.5.2-3
Severity: important

Dear Maintainer,

Using font FixedSC from http://pts-mini-
gpl.googlecode.com/svn/trunk/fonts/fixedsc.tgz

(libfreetype6_2.5.2-2 was ok)
upgrade to libfreetype6_2.5.2-3
run gnome terminal or terminator
terminal text is corrupt: http://imgur.com/DQZtDBb
downgrade back to libfreetype6_2.5.2-2: terminal text is now ok


The bad patch seems to be: 0020-Fix-Savannah-bug-43547.-CVE-2014-9671.patch:

+    /* we now check whether the `size' and `offset' values are reasonable: */
+    /* `offset' + `size' must not exceed the stream size                   */
+    tables = face->toc.tables;
+    for ( n = 0; n < toc->count; n++ )
+    {
+      /* we need two checks to avoid overflow */
+      if ( ( tables->size   > stream->size                ) ||
+           ( tables->offset > stream->size - tables->size ) )
+      {
+        error = FT_THROW( Invalid_Table );
+        goto Exit;
+      }
+      tables++;
+    }
+


This fails when:

tables->size=100
tables->offset=339968
stream->size=340040
tables->offset > stream->size - tables->size
339968 > 340040-100(=339940)


..xsession-errors:

/usr/share/terminator/terminatorlib/window.py:384: PangoWarning: failed to
create cairo scaled font, expect ugly output. the offending font is 'FixedSC
11'
  self.present()
/usr/share/terminator/terminatorlib/window.py:384: PangoWarning: font_face
status is: out of memory
  self.present()
/usr/share/terminator/terminatorlib/window.py:384: PangoWarning: scaled_font
status is: out of memory
  self.present()
/usr/share/terminator/terminatorlib/window.py:384: PangoWarning: shaping
failure, expect ugly output. shape-engine='BasicEngineFc', font='FixedSC 11',
text='
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~'
  self.present()
/usr/share/terminator/terminatorlib/window.py:384: PangoWarning: failed to
create cairo scaled font, expect ugly output. the offending font is 'FixedSC
Bold 11'
  self.present()
/usr/share/terminator/terminatorlib/window.py:384: PangoWarning: shaping
failure, expect ugly output. shape-engine='BasicEngineFc', font='FixedSC Bold
11', text='
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~'
  self.present()



-- System Information:
Debian Release: 8.0
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libfreetype6:amd64 depends on:
ii  libc6              2.19-15
ii  libpng12-0         1.2.50-2+b2
ii  multiarch-support  2.19-15
ii  zlib1g             1:1.2.8.dfsg-2+b1

libfreetype6:amd64 recommends no packages.

libfreetype6:amd64 suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Version: 2.5.2-4

This bug was fixed in the 2.5.2-4 upload, but was not correctly marked as
resolved.  Doing so now.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slanga...@ubuntu.com                                     vor...@debian.org

Attachment: signature.asc
Description: Digital signature


--- End Message ---

Reply via email to