Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-14775

Remotely triggerable WIN32K freetype assert

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Fix Version/s: 0.4.10
    • Component/s: None
    • Labels:
      None

      Description

      ros 0.4.9-RC-35-g3eb03ef

      I can make ros assert in WIN32K freetype remotely via webbrowser. This is 100% reporducible for me.

      Reproduction steps
      -Install ros
      -Install Opera 12.18 from rapps
      -browse to www.palemoon.org

      *** Assertion failed: style_name
      ***   Source File: ../../win32ss/gdi/ntgdi/freetype.c, line 4031

      It will assert in freetype over and over, I took the bts in react.log
      when I finally *t*erminate the thread, ros will BSOD.

      I consider this critical, because most likely we do not have much time (before the website changes) and this has dramatic security implications ofc.

        Attachments

        1. react.log
          68 kB
          reactosfanboy

          Activity

            People

            • Assignee:
              learn_more Mark Jansen
              Reporter:
              reactosfanboy reactosfanboy
            • Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: