Bug#1061667: netpbm: ppmtowinicon crash makes kcemu FTBFS

[Adrian Bunk]

Package: netpbm
Version: 2:11.05.01-3
Severity: serious
Tags: ftbfs
Control: affects -1 src:kcemu

https://buildd.debian.org/status/fetch.php?pkg=kcemu&arch=riscv64&ver=0.5.2%2Bdfsg-1%2Bb1&stamp=1706435423&raw=0

...
ppmtowinicon -andpgms \
	kcemu-winicon_16x16.ppm kcemu-winicon_16x16.alpha.pgm \
	kcemu-winicon_32x32.ppm kcemu-winicon_32x32.alpha.pgm \
	kcemu-winicon_48x48.ppm kcemu-winicon_48x48.alpha.pgm \
	> kcemu-winicon.ico
malloc(): invalid size (unsorted)
/bin/bash: line 5: 3775943 Aborted                 ppmtowinicon -andpgms kcemu-winicon_16x16.ppm kcemu-winicon_16x16.alpha.pgm kcemu-winicon_32x32.ppm kcemu-winicon_32x32.alpha.pgm kcemu-winicon_48x48.ppm kcemu-winicon_48x48.alpha.pgm > kcemu-winicon.ico
make[2]: *** [Makefile:929: kcemu-winicon.ico] Error 134



This is on riscv64, but can also be reproduced on amd64.


Backtrace:

#0  __pthread_kill_implementation (threadid=<optimized out>, signo=signo at entry=6, no_tid=no_tid at entry=0) at ./nptl/pthread_kill.c:44
#1  0x00007f7b93a7d15f in __pthread_kill_internal (signo=6, threadid=<optimized out>) at ./nptl/pthread_kill.c:78
#2  0x00007f7b93a2f472 in __GI_raise (sig=sig at entry=6) at ../sysdeps/posix/raise.c:26
#3  0x00007f7b93a194b2 in __GI_abort () at ./stdlib/abort.c:79
#4  0x00007f7b93a1a1ed in __libc_message (fmt=fmt at entry=0x7f7b93b8c78c "%s\n") at ../sysdeps/posix/libc_fatal.c:150
#5  0x00007f7b93a86a75 in malloc_printerr (str=str at entry=0x7f7b93b8fa68 "malloc(): invalid size (unsorted)") at ./malloc/malloc.c:5658
#6  0x00007f7b93a89b54 in _int_malloc (av=av at entry=0x7f7b93bc6c80 <main_arena>, bytes=bytes at entry=8) at ./malloc/malloc.c:3995
#7  0x00007f7b93a8bb71 in __libc_calloc (n=n at entry=8, elem_size=elem_size at entry=1) at ./malloc/malloc.c:3671
#8  0x00005593101c73bf in mallocProduct (factor2=1, factor1=<optimized out>, resultP=<synthetic pointer>) at importinc/netpbm/mallocvar.h:59
#9  mallocProduct (factor2=1, factor1=<optimized out>, resultP=<synthetic pointer>) at importinc/netpbm/mallocvar.h:26
#10 fillInRaster8 (cht=<optimized out>, rows=<optimized out>, cols=<optimized out>, pa=<optimized out>, xByteCt=<optimized out>, 
    rowData=<optimized out>) at ./converter/ppm/ppmtowinicon.c:376
#11 newBitmap (cht=0x5593106bd0a0, rows=<optimized out>, cols=<optimized out>, pa=<optimized out>, bpp=8) at ./converter/ppm/ppmtowinicon.c:428
#12 addEntryToIcon (trueTransparent=<optimized out>, andPgmFname=<optimized out>, xorPpmFname=<optimized out>, MSIconDataP=<optimized out>)
    at ./converter/ppm/ppmtowinicon.c:692
#13 main (argc=<optimized out>, argv=<optimized out>) at ./converter/ppm/ppmtowinicon.c:867