[cups.bugs] [CRIT] STR #2412: cups segfaults with km2450np.ppd

[VOROSKOI Andras]

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Cups unable to start(segfaults) with the attached ppd.

Here is the gdb backtrace:

root at vinyu:~# gdb cupsd
GNU gdb 6.6
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) set follow-fork-mode child
(gdb) start
Breakpoint 1 at 0x8063f17: file main.c, line 164.
Starting program: /usr/sbin/cupsd
[Thread debugging using libthread_db enabled]
[New Thread -1211921920 (LWP 7246)]
[Switching to Thread -1211921920 (LWP 7246)]
main (argc=-1079102337, argv=0x0) at main.c:164
164 main.c: No such file or directory.
in main.c
(gdb) step 89
289 in main.c
(gdb) bt
#0 main (argc=1, argv=0xbfae25d4) at main.c:289
(gdb) step

Program received signal SIGSEGV, Segmentation fault.
[Switching to process 7249]
0xb7ca8698 in strcmp () from /lib/libc.so.6
(gdb) bt
#0 0xb7ca8698 in strcmp () from /lib/libc.so.6
#1 0xb7df4a55 in ppd_get_option (group=0x80bebbc,
name=0xbfadc189 "PageRegion") at ppd.c:2522
#2 0xb7df804a in ppdOpen2 (fp=0x80af838) at ppd.c:1224
#3 0xb7df9692 in ppdOpenFile (filename=0xbfadc2ee
"/etc/cups/ppd/laser.ppd")
at ppd.c:2026
#4 0x08081288 in cupsdSetPrinterAttrs (p=0x80aa988) at printers.c:1737
#5 0x08083737 in cupsdLoadAllPrinters () at printers.c:914
#6 0x0805eb3e in cupsdReadConfiguration () at conf.c:1061
#7 0x08064179 in main (argc=1, argv=0xbfae25d4) at main.c:404
(gdb) step
Single stepping until exit from function strcmp,
which has no line number information.

Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.
cupsd: Child exited on signal 11!

The laser.ppd file equals to km2450np.ppd of course. Originally reported
here: http://bugs.frugalware.org/task/2052

Link: http://www.cups.org/str.php?L2412
Version: 1.2.11
-------------- next part --------------
A non-text attachment was scrubbed...
Name: km2450np.ppd
Type: application/octet-stream
Size: 55250 bytes
Desc: not available
URL: <https://lists.cups.org/pipermail/cups/attachments/20070607/9196864b/attachment.obj>