Processed: Re: ghostscript: segfault on particular file not reproducible in git master

2011-03-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> merge 619306 616054
Bug#616054: ghostscript: segfault on particular file not reproducible in git 
master
Bug#619306: ghostscript segfaults on some eps file
Merged 616054 619306.

> quit
Stopping processing here.

Please contact me if you need assistance.
-- 
616054: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616054
619306: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=619306
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.130104236816505.transcr...@bugs.debian.org



Bug#616054: ghostscript: segfault on particular file not reproducible in git master

2011-03-25 Thread Jonathan Nieder
merge 619306 616054
quit

Hi Yves,

Yves-Alexis Perez wrote:

> I have some eps files (not easily sharable though) which make segfault
> gs everytime. I've tried to rebuild ghostscript from upstream sources
> to make a usable backtrace, but it appears that it's not reproducible
> using git master nor 9.00 tag.

*nod*

Good news: Alexandre Duret-Lutz has provided a reproducible (with Debian
ghostscript, no success reproducing with the upstream source yet)
testcase, so the work of debugging can be shared. :)

For debugging, I had to add "-g" in front of -O2 in the CFLAGS line in
lcms's debian/rules.

Thanks again.
Jonathan



-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110325083813.GA10941@elie



Bug#619306: ghostscript segfaults on some eps file

2011-03-25 Thread Jonathan Nieder
tags 619306 + confirmed
quit

Hi,

Alexandre Duret-Lutz wrote:

> Running gs on the attached file ends with a segfault.
> 
> % gs -dSAFER arch-SPOT.eps

I can't reproduce this with upstream gs (I'm probably using the wrong
build-time parameters) but I can easily reproduce it with the ghostscript
Debian package.  Backtrace:

 Program received signal SIGSEGV, Segmentation fault.
 0x in ?? ()
 (gdb) bt
 #0  0x in ?? ()
 #1  0x77fc4206 in cmsEvalLUT (Lut=0x887920, In=, 
Out=0x7fffc970)
 at cmslut.c:512
 #2  0x77fcb741 in NormalXFORM (p=0x887770, in=, 
out=, Size=1)
 at cmsxform.c:210
 #3  0x77fbab71 in _cmsComputePrelinearizationTablesFromXFORM 
(h=0x7fffcb10, nTransforms=1, 
 Grid=0x8895c0) at cmsgmt.c:1121
 #4  0x77fce217 in _cmsPrecalculateDeviceLink (h=0x887770, 
dwFlags=)
 at cmssamp.c:271
 #5  0x77fcc8bd in cmsCreateProofingTransform (InputProfile=, InputFormat=196618, 
 OutputProfile=0x580660, OutputFormat=262170, ProofingProfile=, nIntent=1, 
 ProofingIntent=3, dwFlags=9216) at cmsxform.c:1537
 #6  0x77fccfbb in cmsCreateTransform (Input=, 
InputFormat=, 
 Output=, OutputFormat=, 
Intent=, 
 dwFlags=) at cmsxform.c:1618
 #7  0x775eb3d7 in gsicc_get_link_profile (pis=, 
dev=, 
 gs_input_profile=0x885bf0, gs_output_profile=0x5b1c10, 
rendering_params=0x7fffccf0, memory=0x4028c8, 
 include_softproof=0) at ./base/gsicc_cache.c:592
 #8  0x775e82f7 in gx_remap_ICC (pcc=0x6d1b00, pcs=0x445ba8, 
pdc=0x770db0, pis=0x428d58, dev=0x4903b8, 
 select=gs_color_select_texture) at ./base/gsicc.c:347
 #9  0x77529b8a in gx_remap_CIEA (pc=0x6d1b00, pcs=0x445af8, 
pdc=0x770db0, pis=0x428d58, dev=0x4903b8, 
 select=gs_color_select_texture) at ./base/gsciemap.c:665
 #10 0x777862bc in gx_remap_color (pgs=0x428d58) at ./base/gxcmap.c:553
 #11 0x77778cb8 in gs_text_begin (pgs=0x428d58, text=0x7fffce60, 
mem=0x4028c8, ppte=0x7fffcf48)
 at ./base/gstext.c:262
 #12 0x77779015 in gs_xyshow_begin (pgs=0x428d58, str=, size=, 
 x_widths=0x882b08, y_widths=0x0, widths_size=6, mem=0x4028c8, 
ppte=0x7fffcf48) at ./base/gstext.c:413
 #13 0x774f1777 in moveshow (i_ctx_p=0x444d50, have_x=1, have_y=0) at 
./psi/zcharx.c:113
 #14 0x775592eb in interp (pi_ctx_p=0x402388, pref=, perror_object=0x7fffde20)
 at ./psi/interp.c:1263

In other words, the Device2PCS->CLut16params.Interp3D callback passed
to cmsEvalLUT is null.  In fact, the entire CLut16params struct
consists of zeroes.  The relevant Device2PCS structure has few nonzero
fields:

.wFlags = 584,
.InputChan = 3,
.OutputChan = 3,
.OutputEntries = 2,
.L2 = {0x72ea80, 0x72efc0, 0x729e70, 0, ...},
.Out16params = {
.nSamples = 2,
.nInputs = 1,
.nOutputs = 1,
.Domain = 1,
},
.Mat4 = {
.v = {
[0] = {.n = {14870, 11683, 5040},},
[1] = {.n = {7908, 9, 2630},},
[2] = {.n = {467, 2684, 23883},},
}
},
.L4 = {0x78ebc0, 0x78efd0, 0x78f3e0, 0, ...},
.L4params = {
.nSamples = 512,
.nInputs = 1,
.nOutputs = 1,
.Domain = 511,
},
.L4Entries = 512

That structure is filled by cmsReadICCLut, which calls
ReadLUT_A2B(Icc, NewLUT, offset, sig) to fill it.  What this all means
is beyond my expertise.  Hints?

$ dpkg-query -W liblcms1
liblcms11.18.dfsg-1.2



-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110325081347.GA29625@elie



Processed: Re: ghostscript segfaults on some eps file

2011-03-25 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> tags 619306 + confirmed
Bug #619306 [ghostscript] ghostscript segfaults on some eps file
Added tag(s) confirmed.
> quit
Stopping processing here.

Please contact me if you need assistance.
-- 
619306: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=619306
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems


-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/handler.s.c.130104084111697.transcr...@bugs.debian.org