Bug 689505 - Output device/printer driver "imagen" segfaults immediately
Summary: Output device/printer driver "imagen" segfaults immediately
Status: NOTIFIED WORKSFORME
Alias: None
Product: Ghostscript
Classification: Unclassified
Component: Printer Driver (show other bugs)
Version: master
Hardware: PC Linux
: P4 normal
Assignee: Default assignee
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-10-09 15:44 UTC by Till Kamppeter
Modified: 2010-08-08 16:49 UTC (History)
0 users

See Also:
Customer:
Word Size: ---


Attachments
Printer driver mass testing utility (4.28 KB, text/plain)
2007-10-09 15:46 UTC, Till Kamppeter
Details
Test page of CUPS 1.3.2 (18.01 KB, application/postscript)
2007-10-09 15:49 UTC, Till Kamppeter
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Till Kamppeter 2007-10-09 15:44:17 UTC
On a mass test of all printer drivers available on Ubuntu Gutsy I have found out
that the Ghostscript built-in driver "imagen" is segfaulting (with default
options as provided by the appropriate PPD file from the OpenPrinting database).

To reproduce the problem it is enough to run the command line

cat /usr/share/cups/data/testprint.ps | gs -q -dBATCH -dPARANOIDSAFER -dQUIET
-dNOPAUSE -sDEVICE=imagen -r150x150 -sOutputFile=- - > x

The testprint.ps is of the installed CUPS 1.3.2.

This gives the following interesting/useful output on current Ubuntu Gutsy:

----------------------------------------------------------------------------
*** glibc detected *** gs: free(): invalid pointer: 0x08332e90 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb768ad65]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb768e800]
/usr/lib/libgs.so.8[0xb7aeb548]
/usr/lib/libgs.so.8[0xb7a77078]
/usr/lib/libgs.so.8(gx_default_print_page_copies+0xd9)[0xb79586d9]
/usr/lib/libgs.so.8(gdev_prn_output_page+0x1ab)[0xb795889b]
/usr/lib/libgs.so.8(gs_output_page+0x4a)[0xb7ada99a]
/usr/lib/libgs.so.8[0xb788a179]
/usr/lib/libgs.so.8(gs_interpret+0x18a4)[0xb7867ae4]
/usr/lib/libgs.so.8[0xb785c4f4]
/usr/lib/libgs.so.8(gs_main_run_string_end+0x34)[0xb785c544]
/usr/lib/libgs.so.8(gs_main_run_string_with_length+0x92)[0xb785c8f2]
/usr/lib/libgs.so.8(gs_main_run_string+0x4a)[0xb785c94a]
/usr/lib/libgs.so.8[0xb785d665]
/usr/lib/libgs.so.8[0xb785e84c]
/usr/lib/libgs.so.8(gs_main_init_with_args+0x453)[0xb785fd63]
/usr/lib/libgs.so.8(gsapi_init_with_args+0x3e)[0xb7860ede]
gs(main+0xbc)[0x804882c]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7637050]
gs[0x8048701]
======= Memory map: ========
08048000-08049000 r-xp 00000000 08:07 507022     /usr/bin/gs
08049000-0804a000 rw-p 00000000 08:07 507022     /usr/bin/gs
0804a000-0837b000 rw-p 0804a000 00:00 0          [heap]
b6e00000-b6e21000 rw-p b6e00000 00:00 0 
b6e21000-b6f00000 ---p b6e21000 00:00 0 
b6f56000-b6f9b000 rw-p b6f56000 00:00 0 
b6f9b000-b6f9f000 r-xp 00000000 08:07 540224     /usr/lib/libXdmcp.so.6.0.0
b6f9f000-b6fa0000 rw-p 00003000 08:07 540224     /usr/lib/libXdmcp.so.6.0.0
b6fa0000-b708d000 r-xp 00000000 08:07 392545     /usr/lib/libX11.so.6.2.0
b708d000-b7091000 rw-p 000ed000 08:07 392545     /usr/lib/libX11.so.6.2.0
b7091000-b709e000 r-xp 00000000 08:07 539760     /usr/lib/libXext.so.6.4.0
b709e000-b709f000 rw-p 0000d000 08:07 539760     /usr/lib/libXext.so.6.4.0
b709f000-b70b4000 r-xp 00000000 08:07 539810     /usr/lib/libICE.so.6.3.0
b70b4000-b70b6000 rw-p 00014000 08:07 539810     /usr/lib/libICE.so.6.3.0
b70b6000-b70b7000 rw-p b70b6000 00:00 0 
b70b7000-b70be000 r-xp 00000000 08:07 539932     /usr/lib/libSM.so.6.0.0
b70be000-b70bf000 rw-p 00006000 08:07 539932     /usr/lib/libSM.so.6.0.0
b70bf000-b710c000 r-xp 00000000 08:07 541057     /usr/lib/libXt.so.6.0.0
b710c000-b7110000 rw-p 0004c000 08:07 541057     /usr/lib/libXt.so.6.0.0
b712b000-b712e000 rw-p b712b000 00:00 0 
b712e000-b714c000 r-xp 00000000 08:07 541563     /usr/lib/libexpat.so.1.0.0
b714c000-b714e000 rw-p 0001e000 08:07 541563     /usr/lib/libexpat.so.1.0.0
b714e000-b71ba000 r-xp 00000000 08:07 539627     /usr/lib/libfreetype.so.6.3.16
b71ba000-b71be000 rw-p 0006b000 08:07 539627     /usr/lib/libfreetype.so.6.3.16
b71be000-b71c8000 r-xp 00000000 08:07 1095792    /lib/libgcc_s.so.1
b71c8000-b71c9000 rw-p 0000a000 08:07 1095792    /lib/libgcc_s.so.1
b71c9000-b7218000 r-xp 00000000 08:07 392631     /usr/lib/libgcrypt.so.11.2.3
b7218000-b721a000 rw-p 0004e000 08:07 392631     /usr/lib/libgcrypt.so.11.2.3
b721a000-b721b000 rw-p b721a000 00:00 0 
b721b000-b721e000 r-xp 00000000 08:07 541185     /usr/lib/libgpg-error.so.0.3.0
b721e000-b721f000 rw-p 00002000 08:07 541185     /usr/lib/libgpg-error.so.0.3.0
b721f000-b722e000 r-xp 00000000 08:07 392639     /usr/lib/libtasn1.so.3.0.9
b722e000-b722f000 rw-p 0000e000 08:07 392639     /usr/lib/libtasn1.so.3.0.9
b722f000-b723e000 r-xp 00000000 08:07 1115596   
/lib/tls/i686/cmov/libresolv-2.6.1.so
b723e000-b7240000 rw-p 0000f000 08:07 1115596   
/lib/tls/i686/cmov/libresolv-2.6.1.so
b7240000-b7242000 rw-p b7240000 00:00 0 
b7242000-b7243000 r-xp 00000000 08:07 1095754    /lib/libkeyutils-1.2.so
b7243000-b7244000 rw-p 00001000 08:07 1095754    /lib/libkeyutils-1.2.so
b7244000-b724b000 r-xp 00000000 08:07 542373     /usr/lib/libkrb5support.so.0.1
b724b000-b724c000 rw-p 00006000 08:07 542373     /usr/lib/libkrb5support.so.0.1
b724c000-b724d000 rw-p b724c000 00:00 0 
b724d000-b7270000 r-xp 00000000 08:07 540345     /usr/lib/libfontconfig.so.1.2.0
b7270000-b7278000 rw-p 00023000 08:07 540345     /usr/lib/libfontconfig.so.1.2.0
b7278000-b7360000 r-xp 00000000 08:07 539862     /usr/lib/libstdc++.so.6.0.9
b7360000-b7363000 r--p 000e8000 08:07 539862     /usr/lib/libstdc++.so.6.0.9
b7363000-b7365000 rw-p 000eb000 08:07 539862     /usr/lib/libstdc++.so.6.0.9
b7365000-b736b000 rw-p b7365000 00:00 0 
b736b000-b736d000 r-xp 00000000 08:07 1115572    /lib/tls/i686/cmov/libdl-2.6.1.so
b736d000-b736f000 rw-p 00001000 08:07 1115572    /lib/tls/i686/cmov/libdl-2.6.1.so
b736f000-b7374000 r-xp 00000000 08:07 1115570   
/lib/tls/i686/cmov/libcrypt-2.6.1.so
b7374000-b7376000 rw-p 00004000 08:07 1115570   
/lib/tls/i686/cmov/libcrypt-2.6.1.so
b7376000-b739d000 rw-p b7376000 00:00 0 
b739d000-b73c0000 r-xp 00000000 08:07 1115574    /lib/tls/i686/cmov/libm-2.6.1.so
b73c0000-b73c2000 rw-p 00023000 08:07 1115574    /lib/tls/i686/cmov/libm-2.6.1.so
b73c2000-b73c3000 rw-p b73c2000 00:00 0 
b73c3000-b73d7000 r-xp 00000000 08:07 1115594   
/lib/tls/i686/cmov/libpthread-2.6.1.so
b73d7000-b73d9000 rw-p 00013000 08:07 1115594   
/lib/tls/i686/cmov/libpthread-2.6.1.so
b73d9000-b73db000 rw-p b73d9000 00:00 0 
b73db000-b73ef000 r-xp 00000000 08:07 539922     /usr/lib/libz.so.1.2.3.3
b73ef000-b73f0000 rw-p 00013000 08:07 539922     /usr/lib/libz.so.1.2.3.3
b73f0000-b745a000 r-xp 00000000 08:07 541917     /usr/lib/libgnutls.so.13.3.0
b745a000-b7460000 rw-p 0006a000 08:07 541917     /usr/lib/libgnutls.so.13.3.0
b7460000-b7462000 r-xp 00000000 08:07 1097029    /lib/libcom_err.so.2.1
b7462000-b7463000 rw-p 00001000 08:07 1097029    /lib/libcom_err.so.2.1
b7463000-b7487000 r-xp 00000000 08:07 540869     /usr/lib/libk5crypto.so.3.1
b7487000-b7488000 rw-p 00024000 08:07 540869     /usr/lib/libk5crypto.so.3.1
b7488000-b750e000 r-xp 00000000 08:07 542102     /usr/lib/libkrb5.so.3.3
b750e000-b7510000 rw-p 00086000 08:07 542102     /usr/lib/libkrb5.so.3.3
b7510000-b7511000 rw-p b7510000 00:00 0 
b7511000-b7539000 r-xp 00000000 08:07 540549     /usr/lib/libgssapi_krb5.so.2.2
b7539000-b753a000 rw-p 00027000 08:07 540549     /usr/lib/libgssapi_krb5.so.2.2
b753a000-b755c000 r-xp 00000000 08:07 539640     /usr/lib/libpng12.so.0.15.0
b755c000-b755d000 rw-p 00021000 08:07 539640     /usr/lib/libpng12.so.0.15.0
b755d000-b757c000 r-xp 00000000 08:07 540631     /usr/lib/libjpeg.so.62.0.0
b757c000-b757d000 rw-p 0001e000 08:07 540631     /usr/lib/libjpeg.so.62.0.0
b757d000-b75cf000 r-xp 00000000 08:07 540059     /usr/lib/libtiff.so.4.2.1
b75cf000-b75d1000 rw-p 00052000 08:07 540059     /usr/lib/libtiff.so.4.2.1
b75d1000-b7604000 r-xp 00000000 08:07 540439     /usr/lib/libcups.so.2
b7604000-b7606000 rw-p 00032000 08:07 540439     /usr/lib/libcups.so.2
b7606000-b761c000 r-xp 00000000 08:07 540468     /usr/lib/libcupsimage.so.2
b761c000-b761d000 rw-p 00015000 08:07 540468     /usr/lib/libcupsimage.so.2
b761d000-b761f000 r-xp 00000000 08:07 539816     /usr/lib/libpaper.so.1.1.2
b761f000-b7620000 rw-p 00001000 08:07 539816     /usr/lib/libpaper.so.1.1.2
b7620000-b7621000 rw-p b7620000 00:00 0 
b7621000-b7765000 r-xp 00000000 08:07 1115566    /lib/tls/i686/cmov/libc-2.6.1.so
b7765000-b7766000 r--p 00143000 08:07 1115566    /lib/tls/i686/cmov/libc-2.6.1.so
b7766000-b7768000 rw-p 00144000 08:07 1115566    /lib/tls/i686/cmov/libc-2.6.1.so
b7768000-b776b000 rw-p b7768000 00:00 0 
b776b000-b7baf000 r-xp 00000000 08:07 539667     /usr/lib/libgs.so.8.61
b7baf000-b7e0b000 rw-p 00443000 08:07 539667     /usr/lib/libgs.so.8.61
b7e0b000-b7f9a000 rw-p b7e0b000 00:00 0 
b7f9c000-b7f9d000 rw-p b7f9c000 00:00 0 
b7f9e000-b7fa0000 r-xp 00000000 08:07 540211     /usr/lib/libXau.so.6.0.0
b7fa0000-b7fa1000 rw-p 00001000 08:07 540211     /usr/lib/libXau.so.6.0.0
b7fa1000-b7fb0000 r-xp 00000000 08:07 670848     /usr/lib/ghostscript/8.61/X11.so
b7fb0000-b7fb5000 rw-p 0000f000 08:07 670848     /usr/lib/ghostscript/8.61/X11.so
b7fb5000-b7fb7000 rw-p b7fb5000 00:00 0 
b7fb7000-b7fd1000 r-xp 00000000 08:07 1095620    /lib/ld-2.6.1.so
b7fd1000-b7fd3000 rw-p 00019000 08:07 1095620    /lib/ld-2.6.1.so
bfd5e000-bfd74000 rw-p bfd5e000 00:00 0          [stack]
ffffe000-fffff000 r-xp 00000000 00:00 0          [vdso]
Aborted (core dumped)
----------------------------------------------------------------------------
Comment 1 Till Kamppeter 2007-10-09 15:46:33 UTC
Created attachment 3454 [details]
Printer driver mass testing utility

For anyone interested, this is the mass testing utility with which I have found
the bug. Written by Marcelo Ricardo Leitner and me.
Comment 2 Till Kamppeter 2007-10-09 15:49:12 UTC
Created attachment 3455 [details]
Test page of CUPS 1.3.2

For anyone who cannot reproduce the bug with an older CUPS test page, here is
the one of CUPS 1.3.2.
Comment 3 Marcos H. Woehrmann 2007-10-16 09:40:19 UTC
I've tried the exact command line with gs860 and gshead (r8296) and don't see
this problem.  I've closed this bug; feel free to reopen if you have further
information.
Comment 4 Marcos H. Woehrmann 2007-10-16 09:40:37 UTC
I've tried the exact command line with gs860 and gshead (r8296) and don't see
this problem.  I've closed this bug; feel free to reopen if you have further
information.
Comment 5 Till Kamppeter 2010-08-08 16:49:08 UTC
This is probably the same as bug 690561, which is fixed now (SVN rev. 11585, will be in GS 9.00 release).