Bug 690052

Summary: inferno device segfaulted with attachment 3609
Product: Ghostscript Reporter: Hin-Tak Leung <htl10>
Component: Other DriverAssignee: Ray Johnston <ray.johnston>
Status: RESOLVED FIXED QA Contact: Bug traffic <tech>
Severity: normal    
Priority: P4 CC: wendyst2
Version: masterKeywords: bountiable
Hardware: PC   
OS: Linux   
Customer: Word Size: ---
Attachments: Patch

Description Hin-Tak Leung 2008-09-02 17:01:11 UTC
side effect of looking into bug 689595 - attachment 3609 [details] causes ghostscript 8.62
and head (svn 9061) to segfault with this:

-sOutputFile=/tmp/out attachment3609 [details]

Seems to crash somewhere in gs_setdevice_no_init() with heap problem.
Comment 1 wendyst2 2009-01-03 18:23:23 UTC
Created attachment 4675 [details]

Attached please find a patch for this bug. The gs_inferno_device() function
passed the wrong device type structure originally, and caused the params_size
member of the structure to be incorrect, hence insufficient memory allocated
and overrun.
Comment 2 Hin-Tak Leung 2009-01-13 14:46:28 UTC
Looked at the patch and tested it; I believe it is the right fix. Please commit
and close.
Comment 3 Ray Johnston 2009-01-14 12:07:07 UTC
I concur. Please commit and close.
Comment 4 Alex Cherepanov 2009-01-18 11:59:26 UTC
The patch is committed as a rev. 9372.
This device is not covered by regression testing.