Processed: Re: Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> reassign 470501 ghostscript
Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via 
gs / pspresent
Bug reassigned from package `libx11-6' to `ghostscript'.

> found 470501 8.62.dfsg.1-1
Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via 
gs / pspresent
Bug marked as found in version 8.62.dfsg.1-1.

> thank you
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Brice Goglin]

reassign 470501 ghostscript
found 470501 8.62.dfsg.1-1
thank you



Vincent Lefevre wrote:
> On 2008-03-12 12:30:15 +0100, Vincent Lefevre wrote:
>   
>> (gdb) print *ximage
>> $1 = {width = 1187, height = 1483, xoffset = 0, format = 2, 
>>   data = 0x2aecbb8c1068 'ÿ' ..., byte_order = 1, 
>>   bitmap_unit = 8, bitmap_bit_order = 1, bitmap_pad = 8, depth = 24, 
>>   bytes_per_line = 5040, bits_per_pixel = 24, red_mask = 0, green_mask = 0, 
>>   blue_mask = 0, obdata = 0x0, f = {
>> create_image = 0x2aecbb4e0d30 , 
>> destroy_image = 0x2aecbb4e1100 <_XDestroyImage>, 
>> get_pixel = 0x2aecbb4e15f0 <_XGetPixel>, 
>> put_pixel = 0x2aecbb4e1190 <_XPutPixel>, 
>> sub_image = 0x2aecbb4e0f40 <_XSubImage>, 
>> add_pixel = 0x2aecbb4e0bc0 <_XAddPixel>}}
>> (gdb) info locals
>> pixel = 
>> px = 0
>> src = 0x2aecbbfe172e 
>> dst = 0x74b88c68 ""
>> i = 3
>> nbytes = 
>> plane = 
>>
>> So, it seems that the problem comes from some function in
>> /usr/lib/ghostscript/8.62/X11.so (provided by the ghostscript-x
>> package).
>> 
>
> With more details:
>
> 0x2aecbbfe172e (src) - 0x2aecbb8c1068 (data) is 7472838, while
> 5040 * 1483 is 7474320. So, if I understand correctly, the buffer
> provided by ghostscript is too small?
>   


Possibly. I am reassigning to ghostscript.

Brice

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Vincent Lefevre]

On 2008-03-12 12:30:15 +0100, Vincent Lefevre wrote:
> (gdb) print *ximage
> $1 = {width = 1187, height = 1483, xoffset = 0, format = 2, 
>   data = 0x2aecbb8c1068 'ÿ' ..., byte_order = 1, 
>   bitmap_unit = 8, bitmap_bit_order = 1, bitmap_pad = 8, depth = 24, 
>   bytes_per_line = 5040, bits_per_pixel = 24, red_mask = 0, green_mask = 0, 
>   blue_mask = 0, obdata = 0x0, f = {
> create_image = 0x2aecbb4e0d30 , 
> destroy_image = 0x2aecbb4e1100 <_XDestroyImage>, 
> get_pixel = 0x2aecbb4e15f0 <_XGetPixel>, 
> put_pixel = 0x2aecbb4e1190 <_XPutPixel>, 
> sub_image = 0x2aecbb4e0f40 <_XSubImage>, 
> add_pixel = 0x2aecbb4e0bc0 <_XAddPixel>}}
> (gdb) info locals
> pixel = 
> px = 0
> src = 0x2aecbbfe172e 
> dst = 0x74b88c68 ""
> i = 3
> nbytes = 
> plane = 
> 
> So, it seems that the problem comes from some function in
> /usr/lib/ghostscript/8.62/X11.so (provided by the ghostscript-x
> package).

With more details:

0x2aecbbfe172e (src) - 0x2aecbb8c1068 (data) is 7472838, while
5040 * 1483 is 7474320. So, if I understand correctly, the buffer
provided by ghostscript is too small?

-- 
Vincent Lefèvre <[EMAIL PROTECTED]> - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / Arenaire project (LIP, ENS-Lyon)

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Vincent Lefevre]

On 2008-03-12 12:07:26 +0100, Julien Cristau wrote:
> Can you print the value of *ximage as well as other local variables with
> info locals?

(gdb) print *ximage
$1 = {width = 1187, height = 1483, xoffset = 0, format = 2, 
  data = 0x2aecbb8c1068 'ÿ' ..., byte_order = 1, 
  bitmap_unit = 8, bitmap_bit_order = 1, bitmap_pad = 8, depth = 24, 
  bytes_per_line = 5040, bits_per_pixel = 24, red_mask = 0, green_mask = 0, 
  blue_mask = 0, obdata = 0x0, f = {
create_image = 0x2aecbb4e0d30 , 
destroy_image = 0x2aecbb4e1100 <_XDestroyImage>, 
get_pixel = 0x2aecbb4e15f0 <_XGetPixel>, 
put_pixel = 0x2aecbb4e1190 <_XPutPixel>, 
sub_image = 0x2aecbb4e0f40 <_XSubImage>, 
add_pixel = 0x2aecbb4e0bc0 <_XAddPixel>}}
(gdb) info locals
pixel = 
px = 0
src = 0x2aecbbfe172e 
dst = 0x74b88c68 ""
i = 3
nbytes = 
plane = 

So, it seems that the problem comes from some function in
/usr/lib/ghostscript/8.62/X11.so (provided by the ghostscript-x
package).

> And if possible find out where ximage comes from.

Do you mean the function in /usr/lib/ghostscript/8.62/X11.so?
Unfortunately I couldn't find any ghostscript-related package
with debugging symbols.

If someone can reproduce the bug, I've attached the PS file in
question. It was produced by compiling:

\documentclass{seminar}
\begin{document}
\begin{slide}
pspresent cannot render this file.
\end{slide}
\end{document}

BTW, I still have similar PS files compiled a few months or years
ago, and gs doesn't crash on them.

-- 
Vincent Lefèvre <[EMAIL PROTECTED]> - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / Arenaire project (LIP, ENS-Lyon)


pspresent.ps
Description: PostScript document

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Julien Cristau]

On Wed, Mar 12, 2008 at 11:29:42 +0100, Vincent Lefevre wrote:

> On 2008-03-11 18:27:08 +0100, Brice Goglin wrote:
> > Please install libx11-6-dbg and catch a debugging backtrace. It could be
> > another example of #417816 and friends where the application wrongly
> > passes image=NULL to XPutImage.
> 
> It doesn't seem so:
> 
> Core was generated by `gs -sDEVICE=x11alpha -q -dNOPAUSE -dSAFER -'.
> Program terminated with signal 11, Segmentation fault.
> #0  _XGetPixel (ximage=0x684b20, x=1186, y=1482) at ../../src/ImUtil.c:516
> 516 ../../src/ImUtil.c: No such file or directory.
> in ../../src/ImUtil.c

Can you print the value of *ximage as well as other local variables with
info locals?

And if possible find out where ximage comes from.

Thanks,
Julien



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Vincent Lefevre]

On 2008-03-11 18:27:08 +0100, Brice Goglin wrote:
> Please install libx11-6-dbg and catch a debugging backtrace. It could be
> another example of #417816 and friends where the application wrongly
> passes image=NULL to XPutImage.

It doesn't seem so:

Core was generated by `gs -sDEVICE=x11alpha -q -dNOPAUSE -dSAFER -'.
Program terminated with signal 11, Segmentation fault.
#0  _XGetPixel (ximage=0x684b20, x=1186, y=1482) at ../../src/ImUtil.c:516
516 ../../src/ImUtil.c: No such file or directory.
in ../../src/ImUtil.c
(gdb) bt
#0  _XGetPixel (ximage=0x684b20, x=1186, y=1482) at ../../src/ImUtil.c:516
#1  0x2aecbb4eca4b in XPutImage (dpy=0x8ac680, d=35651587, gc=0x8bdc90, 
image=0x684b20, req_xoffset=0, req_yoffset=0, x=0, y=0, req_width=1187, 
req_height=1483) at ../../src/PutImage.c:1010
#2  0x2aecba9eddfb in ?? () from /usr/lib/ghostscript/8.62/X11.so
#3  0x2aecba9edf0f in ?? () from /usr/lib/ghostscript/8.62/X11.so
#4  0x2aecba9f00c9 in ?? () from /usr/lib/ghostscript/8.62/X11.so
#5  0x2aecb64d32ef in gs_fillpage () from /usr/lib/libgs.so.8
#6  0x2aecb628fdf7 in gs_interpret () from /usr/lib/libgs.so.8
#7  0x2aecb628526e in gs_main_run_string_end () from /usr/lib/libgs.so.8
#8  0x2aecb6286280 in ?? () from /usr/lib/libgs.so.8
#9  0x2aecb6286de6 in ?? () from /usr/lib/libgs.so.8
#10 0x2aecb628835e in gs_main_init_with_args () from /usr/lib/libgs.so.8
#11 0x00400a91 in main ()

-- 
Vincent Lefèvre <[EMAIL PROTECTED]> - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / Arenaire project (LIP, ENS-Lyon)

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Brice Goglin]

Vincent Lefevre wrote:
> Package: libx11-6
> Version: 2:1.0.3-7
> Severity: important
>
> When trying to view some ps files with pspresent, gs (executed by
> pspresent) immediately crashes in a function from libX11.so.6 (see
> the backtrace below). Nothing is displayed (blank screen).
>
> [...]
> Core was generated by `gs -sDEVICE=x11alpha -q -dNOPAUSE -dSAFER -'.
> Program terminated with signal 11, Segmentation fault.
> #0  0x2b23ca027674 in ?? () from /usr/lib/libX11.so.6
> (gdb) bt
> #0  0x2b23ca027674 in ?? () from /usr/lib/libX11.so.6
> #1  0x2b23ca032a4b in XPutImage () from /usr/lib/libX11.so.6
> #2  0x2b23c9533dfb in ?? () from /usr/lib/ghostscript/8.62/X11.so
> #3  0x2b23c9533f0f in ?? () from /usr/lib/ghostscript/8.62/X11.so
> #4  0x2b23c95360c9 in ?? () from /usr/lib/ghostscript/8.62/X11.so
> #5  0x2b23c50192ef in gs_fillpage () from /usr/lib/libgs.so.8
> #6  0x2b23c4dd5df7 in gs_interpret () from /usr/lib/libgs.so.8
> #7  0x2b23c4dcb26e in gs_main_run_string_end () from /usr/lib/libgs.so.8
> #8  0x2b23c4dcc280 in ?? () from /usr/lib/libgs.so.8
> #9  0x2b23c4dccde6 in ?? () from /usr/lib/libgs.so.8
> #10 0x2b23c4dce35e in gs_main_init_with_args () from /usr/lib/libgs.so.8
> #11 0x00400a91 in main ()
>   

Please install libx11-6-dbg and catch a debugging backtrace. It could be
another example of #417816 and friends where the application wrongly
passes image=NULL to XPutImage.

Brice




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Julien Cristau]

tag 470501 moreinfo
kthxbye

On Tue, Mar 11, 2008 at 17:19:29 +0100, Vincent Lefevre wrote:

> When trying to view some ps files with pspresent, gs (executed by
> pspresent) immediately crashes in a function from libX11.so.6 (see
> the backtrace below). Nothing is displayed (blank screen).
> 
> [...]
> Core was generated by `gs -sDEVICE=x11alpha -q -dNOPAUSE -dSAFER -'.
> Program terminated with signal 11, Segmentation fault.
> #0  0x2b23ca027674 in ?? () from /usr/lib/libX11.so.6
> (gdb) bt
> #0  0x2b23ca027674 in ?? () from /usr/lib/libX11.so.6
> #1  0x2b23ca032a4b in XPutImage () from /usr/lib/libX11.so.6
> #2  0x2b23c9533dfb in ?? () from /usr/lib/ghostscript/8.62/X11.so

Please provide a backtrace with debugging symbols (i.e. at least install
libx11-6-dbg).

Thanks,
Julien



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Processed: Re: Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Debian Bug Tracking System]

Processing commands for [EMAIL PROTECTED]:

> tag 470501 moreinfo
Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via 
gs / pspresent
There were no tags set.
Tags added: moreinfo

> kthxbye
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#470501: libx11-6: crash (segmentation fault) in XPutImage (libX11.so.6) via gs / pspresent

[Vincent Lefevre]

Package: libx11-6
Version: 2:1.0.3-7
Severity: important

When trying to view some ps files with pspresent, gs (executed by
pspresent) immediately crashes in a function from libX11.so.6 (see
the backtrace below). Nothing is displayed (blank screen).

[...]
Core was generated by `gs -sDEVICE=x11alpha -q -dNOPAUSE -dSAFER -'.
Program terminated with signal 11, Segmentation fault.
#0  0x2b23ca027674 in ?? () from /usr/lib/libX11.so.6
(gdb) bt
#0  0x2b23ca027674 in ?? () from /usr/lib/libX11.so.6
#1  0x2b23ca032a4b in XPutImage () from /usr/lib/libX11.so.6
#2  0x2b23c9533dfb in ?? () from /usr/lib/ghostscript/8.62/X11.so
#3  0x2b23c9533f0f in ?? () from /usr/lib/ghostscript/8.62/X11.so
#4  0x2b23c95360c9 in ?? () from /usr/lib/ghostscript/8.62/X11.so
#5  0x2b23c50192ef in gs_fillpage () from /usr/lib/libgs.so.8
#6  0x2b23c4dd5df7 in gs_interpret () from /usr/lib/libgs.so.8
#7  0x2b23c4dcb26e in gs_main_run_string_end () from /usr/lib/libgs.so.8
#8  0x2b23c4dcc280 in ?? () from /usr/lib/libgs.so.8
#9  0x2b23c4dccde6 in ?? () from /usr/lib/libgs.so.8
#10 0x2b23c4dce35e in gs_main_init_with_args () from /usr/lib/libgs.so.8
#11 0x00400a91 in main ()

The ghostscript-related packages: version 8.62.dfsg.1-1 of ghostscript,
ghostscript-x and libgs8.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.24.3-20080226 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=POSIX, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages libx11-6 depends on:
ii  libc6 2.7-9  GNU C Library: Shared libraries
ii  libx11-data   2:1.0.3-7  X11 client-side library
ii  libxau6   1:1.0.3-2  X11 authorisation library
ii  libxdmcp6 1:1.0.2-2  X11 Display Manager Control Protoc
ii  x11-common1:7.1.0-19 X Window System (X.Org) infrastruc

libx11-6 recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]