[cups.bugs] [HIGH] STR #1430: Scheduler crashes when navigating in web interface

[Till Kamppeter]

[STR New]

The crash happened after setting up a new print queue for an HP PhotoSmart
2600 on USB by clicking the appropriate "Add this printer button". Then in
the choice for the PPD files automatically the HP-provided HPLIP PPD file
for this printer was chosen. I kept this choice and got the message that
the queue was successfully created. Clicking on the queue name lead to the
printer's page of the CUPS web interface, but without any graphics, no
printer icon and all buttons were text links. Clicking the "Reload" button
of the browser lead to the browser's that it cannot connect to
"localhost:631". The CUPS daemon has segfaulted, see gdb output below.

Attached is the error_log.

----------------------------------------------------------------------
[root at majax c]# cupsd -f
Segmentation fault (core dumped)
[root at majax c]# gdb -c core.14665 /usr/sbin/cupsd
GNU gdb 6.3-6mdk (Mandriva Linux release 2006.1)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i586-mandriva-linux-gnu"...Using host
libthread_db library "/lib/tls/libthread_db.so.1".

Reading symbols from shared object read from target memory...done.
Loaded system supplied DSO at 0xffffe000
Core was generated by `cupsd -f'.
Program terminated with signal 11, Segmentation fault.

warning: svr4_current_sos: Can't read pathname for load map: Input/output
error

Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /usr/lib/libgnutls.so.11...done.
Loaded symbols for /usr/lib/libgnutls.so.11
Reading symbols from /usr/lib/libslp.so.1...done.
Loaded symbols for /usr/lib/libslp.so.1
Reading symbols from /lib/libpam.so.0...done.
Loaded symbols for /lib/libpam.so.0
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /usr/lib/libpaper.so.1...done.
Loaded symbols for /usr/lib/libpaper.so.1
Reading symbols from /lib/libdbus-1.so.2...done.
Loaded symbols for /lib/libdbus-1.so.2
Reading symbols from /usr/lib/libcups.so.2...Reading symbols from
/usr/lib/debug/usr/lib/libcups.so.2.debug...done.
done.
Loaded symbols for /usr/lib/libcups.so.2
Reading symbols from /lib/tls/libpthread.so.0...done.
Loaded symbols for /lib/tls/libpthread.so.0
Reading symbols from /lib/libacl.so.1...done.
Loaded symbols for /lib/libacl.so.1
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /usr/lib/libgcrypt.so.11...done.
Loaded symbols for /usr/lib/libgcrypt.so.11
Reading symbols from /usr/lib/libgpg-error.so.0...done.
Loaded symbols for /usr/lib/libgpg-error.so.0
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /usr/lib/libcrypto.so.0.9.8...done.
Loaded symbols for /usr/lib/libcrypto.so.0.9.8
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libattr.so.1...done.
Loaded symbols for /lib/libattr.so.1
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_nisplus.so.2...done.
Loaded symbols for /lib/libnss_nisplus.so.2
#0  0xb7d5b558 in strcmp () from /lib/tls/libc.so.6
(gdb) bt
#0  0xb7d5b558 in strcmp () from /lib/tls/libc.so.6
#1  0x08069510 in get_jobs (con=0x80f34c0, uri=Variable "uri" is not
available.
) at ipp.c:5446
#2  0x08075c06 in cupsdProcessIPPRequest (con=0x80f34c0) at ipp.c:465
#3  0x08056a1a in cupsdReadClient (con=0x80f34c0) at client.c:2136
#4  0x08064c42 in main (argc=2, argv=0xbfead374) at main.c:912
#5  0xb7d04e40 in __libc_start_main () from /lib/tls/libc.so.6
#6  0x0804df41 in _start () at ../sysdeps/i386/elf/start.S:119
(gdb) quit
[root at majax c]#
----------------------------------------------------------------------

Link: http://www.cups.org/str.php?L1430
Version: 1.2-current
Attachment: http://www.cups.org/strfiles/1430/error_log