Bug 695372 - Getting Divide by Zero, Access Denied
Summary: Getting Divide by Zero, Access Denied
Alias: None
Product: Ghostscript
Classification: Unclassified
Component: Graphics Library (show other bugs)
Version: 9.14
Hardware: PC Windows 7
: P4 normal
Assignee: Ray Johnston
QA Contact: Bug traffic
Depends on:
Reported: 2014-07-17 03:59 UTC by Dave
Modified: 2016-10-18 09:15 UTC (History)
1 user (show)

See Also:
Word Size: ---

PDF that causes unhandled exceptions. (1019.80 KB, application/pdf)
2014-07-17 03:59 UTC, Dave

Note You need to log in before you can comment on or make changes to this bug.
Description Dave 2014-07-17 03:59:56 UTC
Created attachment 11062 [details]
PDF that causes unhandled exceptions.

I reported this problem to ImageMagick through this link:


That has everything. I'm also attaching the PDF that causes the problem.

Trying to convert a PDF to PNG.
Comment 1 Dave 2014-07-17 04:09:01 UTC
Something else I should've added. A ImageMagick person has looked at this issue and says he's debugged it to be inside GhostScript.
Comment 2 Robin Watts 2014-07-17 05:03:51 UTC
So, can we have a command line to make it fail in just Ghostscript then please?
Comment 3 Dave 2014-07-17 05:25:24 UTC
From the ImageMagick person ...  The following command will reproduce the error:

"c:\Program Files (x86)\gs\gs9.14\bin\gswin32c.exe" -dQUIET -dSAFER -dBATCH -dNOPAUSE -dNOPROMPT -dMaxBitmap=500000000 -dAlignToPixels=0 -dGridFitTT=2 "-sDEVICE=pngalpha" -dTextAlphaBits=4 -dGraphicsAlphaBits=4 "-r300x300" "-sOutputFile=c:\test.jpg" "-fERI_MRP_02_MAP.pdf"
Comment 4 Ken Sharp 2014-07-17 07:20:45 UTC
This is not a problem with images. For me the GPF happens in clist_playback_band() because state_slot->x_reps is 0 and on line 1135 we execute the code:

                state_tile.rep_width = state_tile.size.x /

resulting in a divide by zero error.
Comment 5 Ken Sharp 2014-07-17 07:21:20 UTC
Assigning to Ray as it is (or seems to be) a clist bug.
Comment 6 Ken Sharp 2014-07-17 07:35:59 UTC
Current code (SHA , Windows 32-bit debug build, this command line:

gswin32 -sDEVICE=pngalpha -r300 -sOutputFile=test.png ERI_MRP_02_MAP.pdf

exhibits the fault for me, and is a much simpler command line.

Running under the VS debugger the exception happens in a different place though, line 1131:

              stp:state_tile.size.x = state_slot->width;

because state_slot is a pointer to a nonsense memory location. I suspect its the same problem exhibiting slightly differently because memory locations have moved.
Comment 7 Ray Johnston 2014-07-21 10:00:28 UTC
This seems to be caused by the playback_action being wrong since it is losing
sync in the playback after set_color when 'playback_action_render_no_pdf14'
is given to clist_playback_band. This is due to the expected 'depth' being
24 (when the pdf14 device is used), but is 32 for the pngalpha device.

I suspect I have to disable the pdf14 optimization when the device is "non-
standard" (when the color model does not match the pdf14 device) since the
colors will always be written to the clist using the pdf14 encode_color, but
if we've skipped the pdf14 compositor, the clist and device will become
Comment 8 Ken Sharp 2016-10-18 09:15:41 UTC
As per my email to tech "banding/page mode bugs", closing this file as I cannot reproduce a problem.