Bug#929837: libgdk-pixbuf2.0-dev: Memory leak viewing animated gif

[Avinash Sonawane]

Package: libgdk-pixbuf2.0-dev
Version: 2.36.5-2+deb9u2
Severity: important

Hello!

When animated gif(in this case, size 18M) is tried to be viewed, libgdk-pixbuf
leaks memory and consumes >1.87G of memory.
This bug can be reproduced either by using any of the image viewers using
libgdk-pixbuf (e.g. eog, ristretto) and/or by writing small code snippet using
the lib.


Steps to reproduce:
1.  Download the sample gif
wget -c https://raw.githubusercontent.com/mathieudutour/medium-to-own-
blog/master/docs/screencast.gif

2. Now to reproduce either open the downloaded gif with eog/ristretto or use
this small code snippet:
https://gist.github.com/mertyildiran/f2a0746fbdbce728911854a2f038ee22

3. If you are using the code snippet then please put the proper image path in
line 43. and compile as:
$ gcc gtk-gif.c $(pkg-config --cflags --libs gtk+-2.0) -o gtk-gif
and then execute gtk-gif

top o/p from sample run:
  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
31584 rootkea   20   0 2121372 1.875g  17340 R  13.9 50.3   0:36.04 gtk-gif

Thanks!



-- System Information:
Debian Release: 9.9
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-9-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IN.utf8, LC_CTYPE=en_IN.utf8 (charmap=UTF-8), LANGUAGE=en_IN:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libgdk-pixbuf2.0-dev depends on:
ii  gir1.2-gdkpixbuf-2.0  2.36.5-2+deb9u2
ii  libc6                 2.24-11+deb9u4
ii  libgdk-pixbuf2.0-0    2.36.5-2+deb9u2
ii  libglib2.0-0          2.50.3-2
ii  libglib2.0-dev        2.50.3-2
ii  libpng-dev            1.6.28-1+deb9u1
ii  libpng16-16           1.6.28-1+deb9u1
ii  libx11-dev            2:1.6.4-3+deb9u1
ii  shared-mime-info      1.8-1+deb9u1

libgdk-pixbuf2.0-dev recommends no packages.

libgdk-pixbuf2.0-dev suggests no packages.

-- no debconf information