Public bug reported:

On Ubuntu 24.04, libexiv2-27 upgraded today to 0.27.6-1ubuntu0.1. After this 
upgrade, gimp would fail to open files that it had previously opened without 
issue.  The exact message would vary, but for a PNG file, it would be something 
like:
    double free or corruption (out)
    /usr/lib/gimp/2.0/plug-ins/file-png/file-png: fatal error: Aborted

Attaching gdb to the file-png process produced a stack trace that included 
libgexiv:
    #17 0x00007a32f28addce in __GI___libc_free (mem=0x7ffdff19e790) at 
./malloc/malloc.c:3398
    #18 0x00007a32f2669e76 in ??? () at /lib/x86_64-linux-gnu/libgexiv2.so.2
    #19 0x00007a32f266a2c9 in ??? () at /lib/x86_64-linux-gnu/libgexiv2.so.2
    #20 0x00007a32f266a474 in gexiv2_metadata_open_path () at 
/lib/x86_64-linux-gnu/libgexiv2.so.2
    #21 0x00007a32f3581ea2 in gimp_metadata_load_from_file ()
        at /lib/x86_64-linux-gnu/libgimpbase-2.0.so.0

Downgrading libexiv2-27 to 0.27.6-1build1 fixed the problem.

I'm not sure if this is a problem in libexiv itself, or a sign that
libgexiv needs to be recompiled against the newer libexiv.  I'm
reporting it here in the hopes that you can get it to the right place if
I got it wrong.

$ lsb_release -rd
No LSB modules are available.
Description:    Ubuntu 24.04.4 LTS
Release:        24.04

After the downgrade:
$ apt-cache policy libexiv2-27
libexiv2-27:
  Installed: 0.27.6-1build1
  Candidate: 0.27.6-1ubuntu0.1
  Version table:
     0.27.6-1ubuntu0.1 500
        500 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages
 *** 0.27.6-1build1 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status

$ apt-cache policy libgexiv2-2
libgexiv2-2:
  Installed: 0.14.2-2build3
  Candidate: 0.14.2-2build3
  Version table:
 *** 0.14.2-2build3 500
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status

I'll attach the full backtrace, in case it turns out to be useful.

** Affects: exiv2 (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "Full backtrace from the file-png plugin launched by gimp"
   https://bugs.launchpad.net/bugs/2144851/+attachment/5953909/+files/bt.txt

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2144851

Title:
  0.27.6-1ubuntu0.1 causes gimp to fail with message about memory
  corruption

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/exiv2/+bug/2144851/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to