Bug#651736: ghostscript: segfault when using cups device for rastering w/ SAFER and Seiko PPD

2011-12-11 Thread Jonathan Nieder
Hi Ralph,

Ralph A. Smith wrote:

> ghostscript 8.71 segfaults when invoked by CUPS (via the pdftoraster filter)
> to print to a Seiko Smart Label Printer (SLP) using the PPD provided
> by Seiko (at www.siibusinessproducts.com).  The offending ghostscript command
> (with standard input from pstopdf|pdftopdf) is 
>
> /usr/bin/gs -dQUIET -dPARANOIDSAFER -dNOPAUSE -dBATCH -sDEVICE=cups
>-sstdout=%stderr -sOutputFile=%stdout -I/usr/share/cups/fonts
>-r203x203 -dDEVICEWIDTHPOINTS=236 -dDEVICEHEIGHTPOINTS=68
>-dcupsBitsPerColor=1 -dcupsColorOrder=0 -dcupsColorSpace=3
>-scupsPageSizeName=AddressSmall -c -f -
>
> If the PARANOIDSAFER option is removed, the command succeeds, but it still
> fails with SAFER instead.

I can't reproduce this (I tried on an amd64 mostly-sid system with
ghostscript and libgs8 8.71~dfsg2-9 and cups and libs
1.4.4-7+squeeze1).  Any ideas?

If no other obvious ways to make progress come up, here are some
hints:

 - Please provide a PDF file and exact command line to reproduce it on
   a machine without the SLP driver installed.  (The instructions
   would have to include installing the SLP driver if that's the only
   way to reproduce it.)

 - If you look at "dmesg" output, does it say which DSO segfaulted?

 - Rebuilding ghostscript with DEB_BUILD_OPTIONS='debug nostrip' and
   getting a backtrace by running gs with "gdb --args" as described
   at [1] would also be helpful.

 - Anyone who can reproduce this can take over what I was going to
   try, which is finding the patch that fixed the problem at
   git://git.ghostscript.com/ghostpdl.git using "git bisect".

Hope that helps,
Jonathan

[1] http://wiki.debian.org/HowToGetABacktrace



-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20111211220158.ga28...@elie.hsd1.il.comcast.net



Bug#651736: ghostscript: segfault when using cups device for rastering w/ SAFER and Seiko PPD

2011-12-11 Thread Ralph A. Smith
Package: ghostscript
Version: 8.71~dfsg2-9
Severity: normal


ghostscript 8.71 segfaults when invoked by CUPS (via the pdftoraster filter)
to print to a Seiko Smart Label Printer (SLP) using the PPD provided
by Seiko (at www.siibusinessproducts.com).  The offending ghostscript command
(with standard input from pstopdf|pdftopdf) is 

/usr/bin/gs -dQUIET -dPARANOIDSAFER -dNOPAUSE -dBATCH -sDEVICE=cups
   -sstdout=%stderr -sOutputFile=%stdout -I/usr/share/cups/fonts
   -r203x203 -dDEVICEWIDTHPOINTS=236 -dDEVICEHEIGHTPOINTS=68
   -dcupsBitsPerColor=1 -dcupsColorOrder=0 -dcupsColorSpace=3
   -scupsPageSizeName=AddressSmall -c -f -

If the PARANOIDSAFER option is removed, the command succeeds, but it still
fails with SAFER instead.

The above command succeeds when using the precompiled gs 9.04 for linux-x86_64
from downloads.ghostscript.com, but all else from my Squeeze system.
(The ghostscript folks mention that various
cups rastering segfaults were fixed recently.)

-- System Information:
Debian Release: 6.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ghostscript depends on:
ii  debconf [de 1.5.36.1 Debian configuration management sy
ii  debianutils 3.4  Miscellaneous utilities specific t
ii  gsfonts 1:8.11+urwcyr1.0.7~pre44-4.2 Fonts for the Ghostscript interpre
ii  libc6   2.11.2-10Embedded GNU C Library: Shared lib
ii  libgs8  8.71~dfsg2-9 The Ghostscript PostScript/PDF int

ghostscript recommends no packages.

ghostscript suggests no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20111211191751.15861.33956.reportbug@pindar.greenhouse



Bug#651735: marked as done (ghostscript-x fails to provide virtual package gs)

2011-12-11 Thread Debian Bug Tracking System
Your message dated Sun, 11 Dec 2011 13:05:34 -0600
with message-id <20111211190534.gb23...@elie.hsd1.il.comcast.net>
and subject line Re: ghostscript-x fails to provide virtual package gs
has caused the Debian Bug report #651735,
regarding ghostscript-x fails to provide virtual package gs
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
651735: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651735
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ghostscript-x
Version: 9.04~dfsg-3

Documentation claims that ghostscript-x provides virtual package gs, but
package kghostview-trinity fails to find any package "gs" after installation,
and thus package kde-trinity fails to install.


James



--- End Message ---
--- Begin Message ---
James wrote:

> Documentation claims that ghostscript-x provides virtual package gs

Which documentation is that?  It would be nice to know so we can fix
it.

--- End Message ---


Bug#651735: ghostscript-x fails to provide virtual package gs

2011-12-11 Thread James
Package: ghostscript-x
Version: 9.04~dfsg-3

Documentation claims that ghostscript-x provides virtual package gs, but
package kghostview-trinity fails to find any package "gs" after installation,
and thus package kde-trinity fails to install.


James




-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1rzolv-0005vg...@jasper.nurealm.net



Bug#635549: Stable update of hplip for CVE-2011-2722 (#635549) ?

2011-12-11 Thread Adam D. Barratt
On Sun, 2011-12-04 at 17:26 +, Adam D. Barratt wrote:
> On Thu, 2011-12-01 at 20:17 +, Adam D. Barratt wrote:
> > On Fri, 2011-11-25 at 14:58 +0100, Didier Raboud wrote:
> > >   * Fix CVE-2011-2722 "Insecure tempfile handling" by patching the 
> > > culprit
> > > code out. (Closes: #635549)
> > 
> > I'm assuming the debug code isn't likely to be used that often?  The
> > upstream bug (https://bugs.launchpad.net/hplip/+bug/809904>)
> > implies that they were looking at replacing the code with a mkstemp()
> > call, rather than removing it.  If it's basically unused then patching
> > it out should be okay though.
> 
> fwiw, the above wasn't a rhetorical question.  I was anticipating that
> the next action would have been a reply, not an upload...

Having said that, a reply wouldn't be unwelcome...

Regards,

Adam





-- 
To UNSUBSCRIBE, email to debian-printing-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1323626527.4699.23.ca...@hathi.jungle.funky-badger.org