[Bug 782737] New: ghostscript crash due to NULL dereference
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c0
Summary: ghostscript crash due to NULL dereference
Classification: openSUSE
Product: openSUSE 12.2
Version: Final
Platform: x86-64
OS/Version: Linux
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Printing
AssignedTo: jsmeix@suse.com
ReportedBy: jengelh@inai.de
QAContact: jsmeix@suse.com
Found By: Beta-Customer
Blocker: ---
Created an attachment (id=507661)
--> (http://bugzilla.novell.com/attachment.cgi?id=507661)
test file
I have here a (yummy) testfile that makes gs-9.05 crash.
$ gs -dBATCH -dNOPAUSE -sDEVICE=ppm -r300 -sOutputFile=/tmp/pdx gts.pdf
GPL Ghostscript 9.05 (2012-02-08)
Copyright (C) 2010 Artifex Software, Inc. All rights reserved.
This software comes with NO WARRANTY: see the file PUBLIC for details.
Processing pages 1 through 2.
Page 1
Page 2
Segmentation fault
When switching to -r200, the crash does not occur. The crash also occurs with
other types of DEVICEs like pgm and hpijs, when using -r300.
Program received signal SIGSEGV, Segmentation fault.
gx_pattern_size_estimate (pinst=pinst@entry=0x0, has_tags=has_tags@entry=0)
at base/gxpcmap.c:216
216 int depth = (pinst->templat.PaintType == 2 ? 1 :
tdev->color_info.depth);
(gdb) bt
#0 gx_pattern_size_estimate (pinst=pinst@entry=0x0, has_tags=has_tags@entry=0)
at base/gxpcmap.c:216
#1 0x00000000004eef59 in gx_pattern_load (pdc=pdc@entry=0x7fffffff84b0,
pis=pis@entry=0x7fffffff6e70, dev=dev@entry=0x2511538,
select=select@entry=gs_color_select_texture) at base/gxpcmap.c:1278
#2 0x00000000004e93a0 in gx_dc_pattern_load (pdevc=0x7fffffff84b0,
pis=0x7fffffff6e70, dev=0x2511538, select=gs_color_select_texture)
at base/gsptype1.c:1219
#3 0x000000000066dc12 in clist_playback_band (
playback_action=playback_action@entry=playback_action_render,
cdev=cdev@entry=0x1117898, s=s@entry=0x7fffffff9860, target=0x2511538,
target@entry=0x127ee88, x0=x0@entry=0, y0=y0@entry=0,
mem=mem@entry=0x109b5a8) at base/gxclrast.c:1710
#4 0x000000000066f05f in clist_playback_file_bands (
action=action@entry=playback_action_render, crdev=crdev@entry=0x1117898,
page_info=<optimized out>, target=target@entry=0x127ee88,
band_first=band_first@entry=0, band_last=band_last@entry=0, x0=0, y0=0)
at base/gxclread.c:852
#5 0x000000000066f26e in clist_render_rectangle (cldev=cldev@entry=0x1117898,
prect=prect@entry=0x7fffffffbcc0, bdev=0x127ee88,
render_plane=render_plane@entry=0x7fffffffbd60, clear=clear@entry=1)
at base/gxclread.c:781
#6 0x000000000066f46a in clist_rasterize_lines (dev=dev@entry=0x1117898,
y=y@entry=0, line_count=<optimized out>, bdev=<optimized out>,
---Type <return> to continue, or q <return> to quit---
render_plane=render_plane@entry=0x7fffffffbd60,
pmy=pmy@entry=0x7fffffffbd54) at base/gxclread.c:693
#7 0x000000000066f7d9 in clist_get_bits_rectangle (dev=dev@entry=0x1117898,
prect=prect@entry=0x7fffffffc160, params=params@entry=0x7fffffffc170,
unread=unread@entry=0x0) at base/gxclread.c:584
#8 0x00000000006827d3 in clist_get_bits_rect_mt (dev=0x1117898,
prect=<optimized out>, params=<optimized out>, unread=0x0)
at base/gxclthrd.c:547
#9 0x0000000000842291 in gx_default_get_bits (dev=0x1117898,
y=<optimized out>, data=<optimized out>, actual_data=0x7fffffffc308)
at base/gdevdgbr.c:52
#10 0x0000000000661947 in gdev_prn_get_bits (pdev=pdev@entry=0x1117898,
y=y@entry=0, str=str@entry=0x14c58b8 "\032",
actual_data=actual_data@entry=0x7fffffffc308) at base/gdevprn.c:1230
#11 0x00000000006c6da7 in pbm_print_page_loop (pdev=0x1117898, magic=51 '3',
pstream=0x142b5b0, row_proc=0x6c78c0
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c1
Johannes Meixner
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c2
Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c3
Johannes Meixner
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c4
--- Comment #4 from Jan Engelhardt
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c5
--- Comment #5 from Johannes Meixner
https://bugzilla.novell.com/show_bug.cgi?id=782737
https://bugzilla.novell.com/show_bug.cgi?id=782737#c6
--- Comment #6 from Johannes Meixner
participants (1)
-
bugzilla_noreply@novell.com