Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-14775

Remotely triggerable WIN32K freetype assert

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 0.4.7, 0.4.8, 0.4.9, 0.4.10
    • None
    • None

    Description

      ros 0.4.9-RC-35-g3eb03ef

      I can make ros assert in WIN32K freetype remotely via webbrowser. This is 100% reporducible for me.

      Reproduction steps
      -Install ros
      -Install Opera 12.18 from rapps
      -browse to www.palemoon.org

      *** Assertion failed: style_name
      ***   Source File: ../../win32ss/gdi/ntgdi/freetype.c, line 4031

      It will assert in freetype over and over, I took the bts in react.log
      when I finally *t*erminate the thread, ros will BSOD.

      I consider this critical, because most likely we do not have much time (before the website changes) and this has dramatic security implications ofc.

      Attachments

        1. react.log
          68 kB
          reactosfanboy

        Issue Links

          Activity

            People

              learn_more Mark Jansen
              reactosfanboy reactosfanboy
              Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: