Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
reassign 536871 ghostscript found 536871 8.62.dfsg.1 stop On 14.07.09 Sascha Silbe (sascha-debian-bugs-texlive-base-bi...@silbe.org) wrote: Hi, > Package: texlive-base-bin > Version: 2007.dfsg.2-4 > Severity: normal > > > dvipdft crashes with a floating point exception: > Stupid me! > sascha.si...@twin:~/text/briefe/2009$ dvipdft -o mini.pdf mini.dvi > dvipdft: running dvipdfm -o mini.pdf -e -z0 mini.dvi > > mini.dvi -> mini.pdf > [1] > 86009 bytes written > dvipdft: running gs > GPL Ghostscript 8.62 (2008-02-29) > Copyright (C) 2008 Artifex Software, Inc. All rights reserved. > This software comes with NO WARRANTY: see the file PUBLIC for details. > Processing pages 1 through 1. > Page 1 > /usr/bin/dvipdft: line 118: 31436 Floating point exceptiongs -r10 > -dNOPAUSE -dBATCH -sDEVICE=png256 -sOutputFile="$tmpdir/$outBase.%d" > "$outfile" > dvipdft: gs failed. > That error message simply means that gs has crashed. The code block (dvipdft is a shell script) before line 118 is: echo "$progname: running gs" >&2 gs -r10 -dNOPAUSE -dBATCH -sDEVICE=png256 \ -sOutputFile="$tmpdir/$outBase.%d" "$outfile" || { echo "$progname: gs failed." >&2 rm -rf $tmpdir exit 1 } So, this is clearly a gs bug and has nothing to do with a problem in dvipdft. Reassigning. There are a lot of bug fixes for ghostscript made since then. I *may* be that your problem is solved meanwhile. H. -- sigmentation fault signature.asc Description: Digital signature
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
On 13.01.10 Sascha Silbe (sascha-debian-bugs-536...@silbe.org) wrote: > On Sun, Dec 13, 2009 at 12:14:10AM +0100, Hilmar Preusse wrote: Hi, > >8.64 (and greater) is meanwhile in testing. In theory we could > >close the bug. On the other hand dvipdft is not expected to > >crash, one could assume this to be an security issue. > > >What do you think? > > It still occurs for me on lenny (8.62.dfsg.1-3.2lenny1), so it's at > least a regular bug and I tend to agree on the potential for a > security issue. It's quite likely there are automated systems > (print servers come to my mind) processing user-provided postscript > content with ghostscript. > Got your point. Please note that you're the only one who is able to reproduce the problem (until now). On the other hand I don't know how many people meanwhile tried to reproduce it. Further it doesn't look like a broken installation. I guess there are no similar problems for other programs on that specific box, so we can rule out hardware issues, right? Please confirm, I suggest to contact the gs maintainer then. H. -- sigmentation fault -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
On Sun, Dec 13, 2009 at 12:14:10AM +0100, Hilmar Preusse wrote: > Will try building and running ghostscript 8.64 with pbuilder inside > the lenny chroot next time. 8.64 inside lenny chroot does not exhibit the bug, so it's 8.62-specific. 8.64 (and greater) is meanwhile in testing. In theory we could close the bug. On the other hand dvipdft is not expected to crash, one could assume this to be an security issue. What do you think? It still occurs for me on lenny (8.62.dfsg.1-3.2lenny1), so it's at least a regular bug and I tend to agree on the potential for a security issue. It's quite likely there are automated systems (print servers come to my mind) processing user-provided postscript content with ghostscript. Unfortunately I'm busy with my diploma thesis so cannot investigate whether there might be any attack vector (DoS only probably - floating point exception doesn't sound like code execution is possible). Whatever you decide, it would be nice to get a fixed package for lenny, be it a regular bug fix update, a security update or "just" a backport. CU Sascha -- http://sascha.silbe.org/ http://www.infra-silbe.de/ signature.asc Description: Digital signature
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
On 21.07.09 Sascha Silbe (sascha-debian-bugs-536...@silbe.org) wrote: > On Mon, Jul 20, 2009 at 10:43:56PM +0200, Sascha Silbe wrote: Hi Sascha, > > Will try building and running ghostscript 8.64 with pbuilder inside > > the lenny chroot next time. > > 8.64 inside lenny chroot does not exhibit the bug, so it's > 8.62-specific. > 8.64 (and greater) is meanwhile in testing. In theory we could close the bug. On the other hand dvipdft is not expected to crash, one could assume this to be an security issue. What do you think? Hilmar -- sigmentation fault -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
On Mon, Jul 20, 2009 at 10:43:56PM +0200, Sascha Silbe wrote: Will try building and running ghostscript 8.64 with pbuilder inside the lenny chroot next time. 8.64 inside lenny chroot does not exhibit the bug, so it's 8.62-specific. FWIW: model name : AMD Athlon(tm) X2 Dual Core Processor BE-2300 CU Sascha -- http://sascha.silbe.org/ http://www.infra-silbe.de/ signature.asc Description: Digital signature
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
On Thu, Jul 16, 2009 at 11:27:17AM +0200, Danai SAE-HAN (???) wrote: Nope, I can't reproduce it on an Intel Core2 Duo either. I'm running Ghostscript 8.64. Could you try and see if upgrading Ghostscript fixes the issue? I could a) reproduce the issue inside a lenny chroot built by pbuilder b) not reproduce it inside a sid chroot (pbuilder). Will try building and running ghostscript 8.64 with pbuilder inside the lenny chroot next time. CU Sascha -- http://sascha.silbe.org/ http://www.infra-silbe.de/ signature.asc Description: Digital signature
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
Nope, I can't reproduce it on an Intel Core2 Duo either. I'm running Ghostscript 8.64. Could you try and see if upgrading Ghostscript fixes the issue? Best regards -- Danai -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
On Tue, Jul 14, 2009 at 02:43:15PM +0200, Jan Hauke Rahm wrote: I'm afraid, I can't even reproduce your bug. Tested in a clean lenny chroot with neccessary texlive packages installed to compile your minimal example. See: Thanks for looking into it so quickly! I'll try to reproduce it on some other system tomorrow. It works fine on my (Mobile Athlon XP) laptop running squeeze (-> ghostscript 8.64~dfsg-12). On Tue, Jul 14, 2009 at 11:06:33PM +0200, Danai SAE-HAN (???) wrote: I can't reproduce it either on an AMD64, single core. Tomorrow I will try it out with an Intel Core2 and see if that will change anything. I do notice Ghostscript 8.62; I've got 8.64 here. I've put up the intermediate file (generated on lenny) that causes ghostscript to fail on [1]. Ghostscript on my Laptop (see above) doesn't break for this file so it might be ghostscript that's buggy. sascha.si...@caravan:~/sync/text/briefe/2009$ gs -r10 -dNOPAUSE -dBATCH -sDEVICE=png256 -sOutputFile=/tmp/sascha_silbe/dvipdft.23000/mini.%d mini.pdf GPL Ghostscript SVN PRE-RELEASE 8.64 (2009-02-03) Copyright (C) 2009 Artifex Software, Inc. All rights reserved. This software comes with NO WARRANTY: see the file PUBLIC for details. Warning: the map file cidfmap was not found. Processing pages 1 through 1. Page 1 sascha.si...@twin:~/sync/text/briefe/2009$ gs -r10 -dNOPAUSE -dBATCH -sDEVICE=png256 -sOutputFile=/tmp/sascha_silbe/dvipdft.23000/mini.%d mini.pdf GPL Ghostscript 8.62 (2008-02-29) Copyright (C) 2008 Artifex Software, Inc. All rights reserved. This software comes with NO WARRANTY: see the file PUBLIC for details. Processing pages 1 through 1. Page 1 Floating point exception [1] http://sascha.silbe.org/tmp/mini.pdf CU Sascha -- http://sascha.silbe.org/ http://www.infra-silbe.de/ signature.asc Description: Digital signature
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
I can't reproduce it either on an AMD64, single core. Tomorrow I will try it out with an Intel Core2 and see if that will change anything. I do notice Ghostscript 8.62; I've got 8.64 here. Best regards -- Danai -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
Hi Sascha, On Tue, Jul 14, 2009 at 12:17:41PM +0200, Sascha Silbe wrote: > dvipdft crashes with a floating point exception: > > sascha.si...@twin:~/text/briefe/2009$ latex mini.tex > [latex output skipped] > sascha.si...@twin:~/text/briefe/2009$ dvipdft -o mini.pdf mini.dvi > dvipdft: running dvipdfm -o mini.pdf -e -z0 mini.dvi > > mini.dvi -> mini.pdf > [1] > 86009 bytes written > dvipdft: running gs > GPL Ghostscript 8.62 (2008-02-29) > Copyright (C) 2008 Artifex Software, Inc. All rights reserved. > This software comes with NO WARRANTY: see the file PUBLIC for details. > Processing pages 1 through 1. > Page 1 > /usr/bin/dvipdft: line 118: 31436 Floating point exceptiongs -r10 > -dNOPAUSE -dBATCH -sDEVICE=png256 -sOutputFile="$tmpdir/$outBase.%d" > "$outfile" > dvipdft: gs failed. > > > Not sure whether dvipdft is generating invalid input for gs or gs is > failing for different reasons, so filing against texlive-base-bin as > it's the only place I currently hit the bug. Feel free to reassign > as appropriate. I'm afraid, I can't even reproduce your bug. Tested in a clean lenny chroot with neccessary texlive packages installed to compile your minimal example. See: motte:/tmp/tex# latex mini.tex This is pdfTeXk, Version 3.141592-1.40.3 (Web2C 7.5.6) %&-line parsing enabled. entering extended mode (./mini.tex LaTeX2e <2005/12/01> Babel and hyphenation patterns for english, usenglishmax, dumylang, noh yphenation, loaded. (/usr/share/texmf-texlive/tex/latex/g-brief/g-brief.cls Document Class: g-brief 2003/05/08 v4.0.1 g-brief class (/usr/share/texmf-texlive/tex/latex/base/letter.cls Document Class: letter 1999/04/29 v1.2z Standard LaTeX document class (/usr/share/texmf-texlive/tex/latex/base/size12.clo)) (/usr/share/texmf-texlive/tex/generic/babel/babel.sty (/usr/share/texmf-texlive/tex/generic/babel/germanb.ldf (/usr/share/texmf-texlive/tex/generic/babel/babel.def) Package babel Warning: No hyphenation patterns were loaded for (babel)the language `German' (babel)I will use the patterns loaded for \language=0 instead. )) (/usr/share/texmf-texlive/tex/latex/marvosym/marvosym.sty) (/usr/share/texmf-texlive/tex/latex/eurofont/europs.sty (/usr/share/texmf-texlive/tex/latex/base/ifthen.sty)) (/usr/share/texmf-texlive/tex/latex/eurosym/eurosym.sty)) (./mini.aux) [1] (./mini.aux) ) Output written on mini.dvi (1 page, 524 bytes). Transcript written on mini.log. motte:/tmp/tex# dvipdft -o mini.pdf mini.dvi dvipdft: running dvipdfm -o mini.pdf -e -z0 mini.dvi mini.dvi -> mini.pdf [1] 86009 bytes written dvipdft: running gs GPL Ghostscript 8.62 (2008-02-29) Copyright (C) 2008 Artifex Software, Inc. All rights reserved. This software comes with NO WARRANTY: see the file PUBLIC for details. Processing pages 1 through 1. Page 1 dvipdft: running dvipdfm -dt -o mini.pdf mini.dvi mini.dvi -> mini.pdf [1] 18774 bytes written motte:/tmp/tex# Hauke signature.asc Description: Digital signature
Bug#536871: texlive-base-bin: dvipdft crashes with floating point exception
Package: texlive-base-bin Version: 2007.dfsg.2-4 Severity: normal dvipdft crashes with a floating point exception: sascha.si...@twin:~/text/briefe/2009$ latex mini.tex [latex output skipped] sascha.si...@twin:~/text/briefe/2009$ dvipdft -o mini.pdf mini.dvi dvipdft: running dvipdfm -o mini.pdf -e -z0 mini.dvi mini.dvi -> mini.pdf [1] 86009 bytes written dvipdft: running gs GPL Ghostscript 8.62 (2008-02-29) Copyright (C) 2008 Artifex Software, Inc. All rights reserved. This software comes with NO WARRANTY: see the file PUBLIC for details. Processing pages 1 through 1. Page 1 /usr/bin/dvipdft: line 118: 31436 Floating point exceptiongs -r10 -dNOPAUSE -dBATCH -sDEVICE=png256 -sOutputFile="$tmpdir/$outBase.%d" "$outfile" dvipdft: gs failed. Not sure whether dvipdft is generating invalid input for gs or gs is failing for different reasons, so filing against texlive-base-bin as it's the only place I currently hit the bug. Feel free to reassign as appropriate. ## minimal input file \documentclass[12pt,german]{g-brief} \Anrede {Sehr geehrte Damen und Herren,} \Gruss {Mit freundlichen Gr\"u\ss en}{1cm} \begin{document} \begin{g-brief} \end{g-brief} \end{document} ## other files ## List of ls-R files -rw-r--r-- 1 root root 885 2009-07-14 08:01 /var/lib/texmf/ls-R -rw-rw-r-- 1 root staff 79 2009-02-15 19:43 /usr/local/share/texmf/ls-R lrwxrwxrwx 1 root root 29 2009-02-15 17:00 /usr/share/texmf/ls-R -> /var/lib/texmf/ls-R-TEXMFMAIN lrwxrwxrwx 1 root root 27 2009-02-15 17:02 /usr/share/texmf-texlive/ls-R -> /var/lib/texmf/ls-R-TEXLIVE lrwxrwxrwx 1 root root 27 2009-02-15 17:02 /usr/share/texmf-texlive/ls-R -> /var/lib/texmf/ls-R-TEXLIVE ## Config files lrwxrwxrwx 1 root root 20 2009-02-15 17:00 /usr/share/texmf/web2c/texmf.cnf -> /etc/texmf/texmf.cnf -rw-r--r-- 1 root root 5289 2009-05-21 08:27 /var/lib/texmf/web2c/fmtutil.cnf -rw-r--r-- 1 root root 8799 2009-05-21 08:27 /var/lib/texmf/web2c/updmap.cfg -rw-r--r-- 1 root root 4302 2009-05-21 08:27 /var/lib/texmf/tex/generic/config/language.dat ## Files in /etc/texmf/web2c/ total 4 -rw-r--r-- 1 root root 283 2007-02-26 18:19 mktex.cnf ## md5sums of texmf.d 42c20d7e8bd343542772b5a145bf8ad8 /etc/texmf/texmf.d/05TeXMF.cnf 5f7f6652cc8b8071c9e4ea6ba9e9f0a1 /etc/texmf/texmf.d/15Plain.cnf f68e5add6afd6585b982f2f78e2e6a92 /etc/texmf/texmf.d/45TeXinputs.cnf ea33127256c6a9f37145ae5b16fdb80c /etc/texmf/texmf.d/55Fonts.cnf afccf1d3f87057411166a77c58e00bd1 /etc/texmf/texmf.d/65BibTeX.cnf 9da7c1c7b1eaf06f941af91f48a23068 /etc/texmf/texmf.d/75DviPS.cnf 7ae52efac46feb97010986e57877d12e /etc/texmf/texmf.d/80DVIPDFMx.cnf 37329819f1109e8a457e64b8b58fecdb /etc/texmf/texmf.d/85Misc.cnf a8952d594677235951d447665ec46e9c /etc/texmf/texmf.d/90TeXDoc.cnf 30f4f13357c2761ed01a6a15f28725a5 /etc/texmf/texmf.d/95NonPath.cnf -- System Information: Debian Release: 5.0.2 APT prefers stable APT policy: (990, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-2-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages texlive-base-bin depends on: ii ed 0.7-3 The classic unix line editor ii libc6 2.7-18GNU C Library: Shared libraries ii libgcc11:4.3.2-1.1 GCC support library ii libkpathsea4 2007.dfsg.2-4 TeX Live: path search library for ii libncurses55.7+20081213-1shared libraries for terminal hand ii libpng12-0 1.2.27-2+lenny2 PNG library - runtime ii libpoppler30.8.7-2 PDF rendering library ii libstdc++6 4.3.2-1.1 The GNU Standard C++ Library v3 ii libx11-6 2:1.1.5-2 X11 client-side library ii libxaw72:1.0.4-2 X11 Athena Widget library ii libxmu62:1.0.4-1 X11 miscellaneous utility library ii libxpm41:3.5.7-1 X11 pixmap library ii libxt6 1:1.0.5-3 X11 toolkit intrinsics library ii mime-support 3.44-1MIME files 'mime.types' & 'mailcap ii perl 5.10.0-19 Larry Wall's Practical Extraction ii texlive-common 2007.dfsg.1-5 TeX Live: Base component ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime Versions of packages texlive-base-bin recommends: pn texlive-base-bin-doc (no description available) Versions of packages texlive-base-bin suggests: ii acroread [pdf-view 8.1.6-0.0 Adobe Acrobat Reader: Portable Doc ii evince [postscript 2.22.2-4~lenny1 Document (postscript, pdf) viewer ii ghostscript [posts 8.62.df