Bug 697203 - NULL dereference in .sethalftone5
Summary: NULL dereference in .sethalftone5
Status: RESOLVED FIXED
Alias: None
Product: Ghostscript
Classification: Unclassified
Component: General (show other bugs)
Version: 9.20
Hardware: PC Linux
: P4 normal
Assignee: Chris Liddell (chrisl)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-10-08 07:03 UTC by Tavis Ormandy
Modified: 2016-10-08 09:13 UTC (History)
1 user (show)

See Also:
Customer:
Word Size: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tavis Ormandy 2016-10-08 07:03:54 UTC 
If you call .sethalftone5 with an empty operand stack, ghostscript crashes.

$ gs
GPL Ghostscript 9.07 (2013-02-14)
Copyright (C) 2012 Artifex Software, Inc.  All rights reserved.
This software comes with NO WARRANTY: see the file PUBLIC for details.
GS>clear .sethalftone5
Segmentation fault (core dumped)
Comment 1 Chris Liddell (chrisl) 2016-10-08 09:13:38 UTC 
Fixed in:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=f5c7555c303