Bug#932134: libossim1: Segmentation fault in ossimTiffProjectionFactory

[Guillaume Pasero]

Package: libossim1
Version: 2.7.2-1
Severity: important

Dear Maintainer,

I am using libossim1 through Orfeo ToolBox and I noticed a crash when upgrading Ossim from 2.6.2 to 2.7.2.

There is a segmentation fault when using the ossimImageHandler::getImageGeometry() on a TIFF file.

The steps to reproduce are: 

  * Get a docker image ready to build OTB : registry.orfeo-toolbox.org/orfeotoolbox/otb-build-env/otb-debian-native:unstable
  * run the docker container as root
  * Upgrade Ossim to 2.7.2
  * make sure LFS is installed: git lfs install
  * clone OTB sources (develop branch) : git clone https://gitlab.orfeo-toolbox.org/orfeotoolbox/otb
  * in OTB sources, run : ctest -VV -S CI/main_ci.cmake -DIMAGE_NAME=debian-unstable-gcc
  * after the test fails you can re-run a test manually, for instance: ctest -VV -R ioTvMultiResolutionReadingInfo_TIFF

Here is a backtrace I got on this test:

(gdb) r
Starting program: /opt/build/bin/otbImageIOTestDriver --compare-ascii 0.0 /opt/src/Data/Baseline/OTB/Files/ioTvMultiResolutionReadingInfoOut_tiff.txt /opt/build/Testing/Temporary/ioTvMultiResolutionReadingInfoOut_tiff.txt otbMultiResolutionReadingInfo /opt/src/Data/Input/maur_rgb.tif /opt/build/Testing/Temporary/ioTvMultiResolutionReadingInfoOut_tiff.txt
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
2019-07-15 16:09:05 (INFO): Default RAM limit for OTB is 256 MB
2019-07-15 16:09:05 (INFO): GDAL maximum cache size is 798 MB
2019-07-15 16:09:05 (INFO): OTB will use at most 4 threads

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff658dbf7 in std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release() () from /usr/lib/libossim.so.1
(gdb) bt
#0  0x00007ffff658dbf7 in std::_Sp_counted_base<(__gnu_cxx::_Lock_policy)2>::_M_release() () from /usr/lib/libossim.so.1
#1  0x00007ffff65332cf in ?? () from /usr/lib/libossim.so.1
#2  0x00007fffffffda40 in ?? ()
#3  0x00007fffffffd9c0 in ?? ()
#4  0x000000000000000c in ?? ()
#5  0x61665f656c616373 in ?? ()
#6  0x00006700726f7463 in ?? ()
#7  0x000055555581ce70 in ?? ()
#8  0x167ef0d427ecc700 in ?? ()
#9  0x0000001000000006 in ?? ()
#10 0x00005555557d8320 in ?? ()
#11 0x000055555581ce60 in ?? ()
#12 0x000055555581ce60 in ?? ()
#13 0x00007fffffffdac0 in ?? ()
#14 0x00007fffffffda40 in ?? ()
#15 0x000055555581ce70 in ?? ()
#16 0x00007ffff6c1a9dc in ossimTiffProjectionFactory::createProjection(ossimImageHandler*) const () from /usr/lib/libossim.so.1
#17 0x00007ffff6bc02a5 in ossimProjectionFactoryRegistry::createProjection(ossimImageHandler*) const () from /usr/lib/libossim.so.1
#18 0x00007ffff68c7d7f in ossimImageGeometryFactory::extendGeometry(ossimImageHandler*) const () from /usr/lib/libossim.so.1
#19 0x00007ffff68c8754 in ossimImageGeometryRegistry::extendGeometry(ossimImageHandler*) const () from /usr/lib/libossim.so.1
#20 0x00007ffff68cc54b in ossimImageHandler::getImageGeometry() () from /usr/lib/libossim.so.1
#21 0x00007ffff759e7d2 in otb::ReadGeometryFromImage(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) ()
   from /opt/build/lib/libOTBOSSIMAdapters-6.7.so.1
#22 0x00007ffff7d07db2 in otb::ImageFileReader<otb::VectorImage<double, 2u>, otb::DefaultConvertPixelTraits<double> >::GenerateOutputInformation() ()
   from /opt/build/lib/libOTBImageIO-6.7.so.1
#23 0x00007ffff56e5c9d in itk::ProcessObject::UpdateOutputInformation() () from /usr/lib/libITKCommon-4.12.so.1
#24 0x0000555555685472 in otbMultiResolutionReadingInfo(int, char**) ()
#25 0x00005555555d39d3 in main ()


-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13.0-170-generic (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages libossim1 depends on:
ii  libc6            2.28-10
ii  libfreetype6     2.9.1-3
ii  libgcc1          1:9.1.0-8
ii  libgeos-3.7.1    3.7.1-1
ii  libgeos-c1v5     3.7.1-1
ii  libgeotiff2      1.4.3-1
ii  libjpeg62-turbo  1:1.5.2-2+b1
ii  libjsoncpp1      1.7.4-3
ii  libstdc++6       9.1.0-8
ii  libtiff5         4.0.10-4
ii  zlib1g           1:1.2.11.dfsg-1

libossim1 recommends no packages.

libossim1 suggests no packages.

-- no debconf information