Bug 697203

Summary: NULL dereference in .sethalftone5
Product: Ghostscript Reporter: Tavis Ormandy <taviso>
Component: GeneralAssignee: Chris Liddell (chrisl) <chris.liddell>
Status: RESOLVED FIXED QA Contact: Bug traffic <tech>
Severity: normal    
Priority: P4 CC: chris.liddell
Version: 9.20   
Hardware: PC   
OS: Linux   
Customer: Word Size: ---

Description Tavis Ormandy 2016-10-08 07:03:54 UTC
If you call .sethalftone5 with an empty operand stack, ghostscript crashes.

$ gs
GPL Ghostscript 9.07 (2013-02-14)
Copyright (C) 2012 Artifex Software, Inc.  All rights reserved.
This software comes with NO WARRANTY: see the file PUBLIC for details.
GS>clear .sethalftone5
Segmentation fault (core dumped)
Comment 1 Chris Liddell (chrisl) 2016-10-08 09:13:38 UTC
Fixed in:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=f5c7555c303