[cups.bugs] [MOD] STR #2031: pdftops Seg Faults when filtering certain pdfs

[kcj.cups.umich]

[STR New]

We are seeing about 1% of the pdfs that are sent through pdftops cause a
segmentation fault.

Below is the gdb backtrace on the core. I'm not very familiar with
debugging c++ code and can't tell exactly where the problem lies.  I'll
attach the pdf we are trying to print to see if this is reproduceable on
your end.

Any suggestions? What other info can I provide?  I wasn't sure if I should
be directing this to the xpdf developers or cups.  This is on linux.

mprint1-root# gdb /usr/lib/cups/filter/pdftops1.2.4 pdftops1.2.4.core.8859

GNU gdb 6.4
Copyright 2005 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i686-pc-linux-gnu"...Using host libthread_db
library "/lib/libthread_db.so.1".

Core was generated by `/usr/lib/cups/filter/pdftops1.2.4 1 mprint mprint 1
0'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libcups.so.2...done.
Loaded symbols for /usr/lib/libcups.so.2
Reading symbols from /usr/lib/libssl.so.0.9.7...done.
Loaded symbols for /usr/lib/libssl.so.0.9.7
Reading symbols from /usr/lib/libcrypto.so.0.9.7...done.
Loaded symbols for /usr/lib/libcrypto.so.0.9.7
Reading symbols from /lib/libpthread.so.0...done.
Loaded symbols for /lib/libpthread.so.0
Reading symbols from /lib/libcrypt.so.1...done.
Loaded symbols for /lib/libcrypt.so.1
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /usr/lib/libstdc++.so.5...done.
Loaded symbols for /usr/lib/libstdc++.so.5
Reading symbols from /lib/libgcc_s.so.1...done.
Loaded symbols for /lib/libgcc_s.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x4032d5da in strcmp () from /lib/libc.so.6
(gdb) bt
#0  0x4032d5da in strcmp () from /lib/libc.so.6
#1  0x0806fc3e in Dict::lookup (this=0x81107e8, key=0x80bba36 "Creator",
obj=0xbfffc970) at Dict.cxx:61
#2  0x08053cfd in PSOutputDev::writeHeader (this=0x81109f8, firstPage=1,
lastPage=17, mediaBox=0x810d158, cropBox=0x810d178, pageRotate=0)
    at Object.h:253
#3  0x08053573 in PSOutputDev::init (this=0x81109f8, outputFuncA=0x43,
outputStreamA=0x43, fileTypeA=67, xrefA=0x43, catalog=0x8101618, 
    firstPage=1, lastPage=17, modeA=67, imgLLXA=8, imgLLYA=0, imgURXA=0,
imgURYA=0, manualCtrlA=67, 
    pageRangesA=0x43 <Address 0x43 out of bounds>) at Page.h:45
#4  0x0805300d in PSOutputDev (this=0x81109f8, fileName=0x8104998 "-",
xrefA=0x8101588, catalog=0x8101618, firstPage=1, lastPage=17, 
    modeA=psModePS, imgLLXA=0, imgLLYA=0, imgURXA=0, imgURYA=0,
manualCtrlA=0, pageRangesA=0x0) at PSOutputDev.cxx:942
#5  0x0804bc22 in main (argc=135271960, argv=0xbfffef24) at GString.h:53
(gdb)

Link: http://www.cups.org/str.php?L2031
Version: 1.2.4
Attachment: http://www.cups.org/strfiles/2031/4534147adbc7c.pdf