Firefox 94 crashes inside vp8l_dec.c:ExpandColorMap, see Comments 9 and 10 at https://bugzilla.mozilla.org/show_bug.cgi?id=1741454#c10. This happens because LLVM 13's generated code for ExpandColorMap contains a movdqa instruction (see attached disassembly) whose operand is not necessarily 16-byte aligned. I guess pointer aliasing issues at  cause the compiler to assume new_color_map will be aligned?
In the Firefox bug, user "oxalica" figured out this is not an aliasing issue. You can see more details in the bug, but it's a mismatch between LLVM 13 malloc alignment assumptions and jemalloc's guarantees. Therefore, this is is not a libwebp bug and this issue can be closed.
pasca… via monorail
Nov 22, 2021, 3:53:10 AM11/22/21
Reply to author
Sign in to reply to author
Sign in to forward
Report message as abuse
Sign in to report message as abuse
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message