[cups.bugs] [MOD] STR #2187: esp gs crashes when used for a 'Epson Stylus Photo R200' printer on Solaris (sparc)

[Paul Cunningham]

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

On Solaris, if CUPS is set up for a "Epson Stylus Photo R200" printer using
guten-print (5.0.0) and foomatics, when a print job is sent to the printer
esp gs crashes. This is repeatable every time.

Output trace from the 'core' files is as follows ...

/core:          ELF 32-bit MSB core file SPARC Version 1, from 'gs'

t at 1 (l at 1) program terminated by signal BUS (invalid address alignment)
Current function is clist_fill_rectangle
  150           pcls->colors_used.or |= color;
(dbx) where
current thread: t at 1
=>[1] clist_fill_rectangle(dev = 0x5e1b58, x = 0, y = 0, width = 6120,
height = 219, color = 7ULL), line 150 in "gxclrect.c"
  [2] gx_dc_pure_fill_rectangle(pdevc = 0x6e2d70, x = 0, y = 0, w = 6120,
h = 3960, dev = 0x5e1b58, lop = 252U, source = (nil)), line 396 in
"gxdcolor.c"
  [3] gs_fillpage(pgs = 0x5abdc0), line 91 in "gspaint.c"
  [4] gs_interpret(pi_ctx_p = 0x41208c, pref = 0x5b27e0, user_errors = 1,
pexit_code = 0xffbfefe4, perror_object = 0xffbfefe8), line 1492 in
"interp.c"
  [5] gs_main_interpret(minst = 0x411e88, pref = 0x5bc600, user_errors =
1, pexit_code = 0xffbfefe4, perror_object = 0xffbfefe8), line 297 in
"imain.c"
  [6] gs_main_run_string_end(minst = 0x411e88, user_errors = 1, pexit_code
= 0xffbfefe4, perror_object = 0xffbfefe8), line 600 in "imain.c"
  [7] run_string(minst = 0x411e88, str = 0x302870 ".runstdin", options =
1), line 777 in "imainarg.c"
  [8] swproc(minst = 0x411e88, arg = 0xffbff3ca "^Ly^B", pal =
0xffbff3b0), line 276 in "imainarg.c"
  [9] gs_main_init_with_args(minst = 0x411e88, argc = 12, argv =
0xffbffd54), line 209 in "imainarg.c"
  [10] main(argc = 12, argv = 0xffbffd54), line 45 in "gs.c"
(dbx) quit

I guess the 'pcls' pointer is wrong, as it crashes as it tries to write to
pcls->colors_used.or

This crash can be reproduced also by doing the following ...

  cat /tmp/hosts.ps | \
    /<some-path>/bin/foomatic-rip --ppd /<some-path>/epson1.ppd > \
    /tmp/junk.out

where epson1.ppd is the guten-print ppd file stp-escp2-r200.5.0.ppd

This also occurs on version 8.15.2 of espgs.

Link: http://www.cups.org/str.php?L2187
Version: 8.15.3