Package: pstoedit Version: 3.74-1+b1 Severity: important
Tried pstoedit for the first time today, but I couldn't get it to work. After a few tests, I noticed it would fail to run even when converting a dummy pdf (saved with inkscape) to a ps. The following command: $ pstoedit lay1.pdf lay1.ps Results in =================== pstoedit: version 3.74 / DLL interface 108 (built: Aug 24 2019 - release build - g++ 9.2.1 20190821 - 64-bit) : Copyright (C) 1993 - 2019 Wolfgang Glunz No explicit output format specified - using plot-ps as derived from suffix of output file *** WARNING - you have selected SAFER, indicating you want Ghostscript to execute in a safer environment, but at the same time have selected DELAYBIND. Unless you use this option with care (and specifically, remember to call .bindnow) it is possible that malicious code may be able to evade the limited security offered by the SAFER option. *** WARNING - you have selected SAFER, indicating you want Ghostscript to execute in a safer environment, but at the same time have selected WRITESYSTEMDICT. Unless you use this option with care and specifically, remember to execute code like: "systemdict readonly pop" it is possible that malicious code may be able to evade the limited security offered by the SAFER option. Error: /invalidfileaccess in --run-- Operand stack: (lay1.pdf) (r) Execution stack: %interp_exit .runexec2 --nostringval-- run --nostringval-- 2 %stopped_push --nostringval-- run run false 1 %stopped_push 1989 1 3 %oparray_pop 1988 1 3 %oparray_pop 1976 1 3 %oparray_pop 1833 1 3 %oparray_pop --nostringval-- %errorexec_pop .runexec2 --nostringval-- run --nostringval-- 2 %stopped_push --nostringval-- 1989 1 3 %oparray_pop run Dictionary stack: --dict:730/1684(ro)(G)-- --dict:0/20(G)-- --dict:303/450(L)-- Current allocation mode is local Last OS error: Permission denied Current file position is 89272 GPL Ghostscript 9.50: Unrecoverable error, exit code 1 PostScript/PDF Interpreter finished. Return status 256 executed command : gs -q -dDELAYBIND -dWRITESYSTEMDICT -dNODISPLAY -dNOEPS "/tmp/psinD1zLI9" The interpreter seems to have failed, cannot proceed ! =================== "lay1.ps" is created as zero file. It seems that gs doesn't have enough permissions to read the input (?). I cannot it to run even using stdin/out only. But if I explicitly disable gs "SAFER" with $ pstoedit -psarg '-dNOSAFER' in out then I can convert documents as expected. I'm filing this as important, since I don't think explicitly disabling the gs sandbox is the right fix. -- System Information: Debian Release: bullseye/sid APT prefers unstable APT policy: (900, 'unstable'), (800, 'experimental'), (500, 'unstable-debug') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.2.0-3-rt-amd64 (SMP w/8 CPU cores; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages pstoedit depends on: ii ghostscript 9.50~dfsg-2 ii libc6 2.29-3 ii libpstoedit0c2a 3.74-1+b1 ii libstdc++6 9.2.1-19 pstoedit recommends no packages. Versions of packages pstoedit suggests: pn xfig | ivtools-bin | tgif | transfig <none>