[Mono-bugs] [Bug 78305][Blo] New - Double free when closing a gif Bitmap

[bugzilla-daemon at bugzilla.ximian.com]

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by pawel.sakowski at mind-breeze.com.

http://bugzilla.ximian.com/show_bug.cgi?id=78305

--- shadow/78305	2006-05-05 09:37:32.000000000 -0400
+++ shadow/78305.tmp.19627	2006-05-05 09:37:32.000000000 -0400
@@ -0,0 +1,36 @@
+Bug#: 78305
+Product: Mono: Class Libraries
+Version: 1.1
+OS: GNU/Linux [Other]
+OS Details: 
+Status: NEW   
+Resolution: 
+Severity: 
+Priority: Blocker
+Component: libgdiplus
+AssignedTo: peter at novonyx.com                            
+ReportedBy: pawel.sakowski at mind-breeze.com               
+QAContact: mono-bugs at ximian.com
+TargetMilestone: ---
+URL: 
+Cc: 
+Summary: Double free when closing a gif Bitmap
+
+Description of Problem:
+img->data = img->image.frameDimensionList[0].frames[0] in
+src/gifcodec.c:317 copies a structure containing pointers. On disposal,
+pointers from both copies get free'd.
+
+Steps to reproduce the problem:
+1. wget http://www.w3.org/Icons/Logo_25wht.gif
+2. new Bitmap("Logo_25wht.gif").Dispose();
+
+Actual Results:
+*** glibc detected *** double free or corruption (!prev): 0x08e7db70 ***
+Aborted
+
+Expected Results:
+silence
+
+How often does this happen? 
+100%