Package: pstoedit
Version: 3.74-1+b1
Severity: important

Tried pstoedit for the first time today, but I couldn't get it to work.
After a few tests, I noticed it would fail to run even when converting a
dummy pdf (saved with inkscape) to a ps.

The following command:

$ pstoedit lay1.pdf lay1.ps

Results in
===================
pstoedit: version 3.74 / DLL interface 108 (built: Aug 24 2019 - release build 
- g++ 9.2.1 20190821 - 64-bit) : Copyright (C) 1993 - 2019 Wolfgang Glunz
No explicit output format specified - using plot-ps as derived from suffix of 
output file

*** WARNING - you have selected SAFER, indicating you want Ghostscript
              to execute in a safer environment, but at the same time
              have selected DELAYBIND. Unless you use this option with
              care (and specifically, remember to call .bindnow) it is
              possible that malicious code may be able to evade the
              limited security offered by the SAFER option.

*** WARNING - you have selected SAFER, indicating you want Ghostscript
              to execute in a safer environment, but at the same time
              have selected WRITESYSTEMDICT. Unless you use this option with
              care and specifically, remember to execute code like:
                     "systemdict readonly pop"
              it is possible that malicious code may be able to evade the
              limited security offered by the SAFER option.
Error: /invalidfileaccess in --run--
Operand stack:
  (lay1.pdf)   (r)
Execution stack:
  %interp_exit   .runexec2   --nostringval--   run   --nostringval--   2   
%stopped_push   --nostringval--   run   run   false   1   %stopped_push   1989  
 1   3   %oparray_pop   1988   1   3   %oparray_pop   1976   1   3   
%oparray_pop   1833   1   3   %oparray_pop   --nostringval--   %errorexec_pop   
.runexec2   --nostringval--   run   --nostringval--   2   %stopped_push   
--nostringval--   1989   1   3   %oparray_pop   run
Dictionary stack:
  --dict:730/1684(ro)(G)--   --dict:0/20(G)--   --dict:303/450(L)--
Current allocation mode is local
Last OS error: Permission denied
Current file position is 89272
GPL Ghostscript 9.50: Unrecoverable error, exit code 1
PostScript/PDF Interpreter finished. Return status 256 executed command : gs -q 
-dDELAYBIND -dWRITESYSTEMDICT -dNODISPLAY -dNOEPS "/tmp/psinD1zLI9"
The interpreter seems to have failed, cannot proceed !
===================

"lay1.ps" is created as zero file.
It seems that gs doesn't have enough permissions to read the input (?).

I cannot it to run even using stdin/out only.

But if I explicitly disable gs "SAFER" with

$ pstoedit -psarg '-dNOSAFER' in out

then I can convert documents as expected.

I'm filing this as important, since I don't think explicitly disabling
the gs sandbox is the right fix.

-- System Information:
Debian Release: bullseye/sid
 APT prefers unstable
 APT policy: (900, 'unstable'), (800, 'experimental'), (500, 'unstable-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.2.0-3-rt-amd64 (SMP w/8 CPU cores; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages pstoedit depends on:
ii  ghostscript      9.50~dfsg-2
ii  libc6            2.29-3
ii  libpstoedit0c2a  3.74-1+b1
ii  libstdc++6       9.2.1-19

pstoedit recommends no packages.

Versions of packages pstoedit suggests:
pn  xfig | ivtools-bin | tgif | transfig  <none>

Reply via email to