Package: fig2dev Version: 1:3.2.6a-2+deb9u1 Severity: normal Dear Maintainer,
Running the attached test input with fig2dev with '-L pdf' option raises a segmentation fault error, while attempting to read an invalid memory address. Judging from the stack trace, this bug seems similar to previous bug #890016, but this test input also crashes the latest upstream version (3.2.7a) of fig2dev, where #890016 is supposed to be fixed. The bug fix could have been incomplete, or this may be a distinct bug. Below is the gdb log. I used latest upstream version 3.2.7a here, but I confirmed that current stable version 3.2.6a is also affected. jason@debian-amd64-stretch:~/report/source-latest/fig2dev$ gdb ./fig2dev-3.2.7a-llvm/fig2dev/fig2dev -q Reading symbols from ./fig2dev-3.2.7a-llvm/fig2dev/fig2dev...done. (gdb) run -L pdf poc-invalid Starting program: /home/jason/report/source-latest/fig2dev/fig2dev-3.2.7a-llvm/fig2dev/fig2dev -L pdf poc-invalid [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". incomplete line object Program received signal SIGSEGV, Segmentation fault. free_linestorage (l=<optimized out>) at free.c:152 152 free.c: No such file or directory. (gdb) x/i $rip => 0x4095c6 <free_linestorage+70>: mov 0x8(%rax),%rdi (gdb) info reg rax rax 0x3333333333333333 3689348814741910323 (gdb) where #0 free_linestorage (l=<optimized out>) at free.c:152 #1 0x0000000000409bb0 in read_lineobject (fp=<optimized out>) at read1_3.c:378 #2 0x0000000000409927 in read_1_3_objects (fp=<optimized out>, obj=<optimized out>) at read1_3.c:100 #3 0x000000000040ab95 in readfp_fig (fp=0x6a3f20, obj=0x7fffffffe3d0) at read.c:174 #4 0x0000000000408bac in main (argc=<optimized out>, argv=<optimized out>) at fig2dev.c:424 For your information, running with Address Sanitizer failed to provide any further useful information. Thank you. -- System Information: Debian Release: 9.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-3-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages fig2dev depends on: ii gawk 1:4.1.4+dfsg-1 ii libc6 2.24-11+deb9u3 ii libpng16-16 1.6.28-1 ii libxpm4 1:3.5.12-1 ii x11-common 1:7.7+19 Versions of packages fig2dev recommends: ii ghostscript 9.20~dfsg-3.2+deb9u1 ii netpbm 2:10.0-15.3+b2 Versions of packages fig2dev suggests: pn xfig <none> -- no debconf information
poc-invalid
Description: Binary data
