[cups.bugs] [MOD] STR #3787: bannertops crashes when rendering test page

Till Kamppeter till.kamppeter at gmail.com
Tue Feb 1 04:16:58 PST 2011 

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

Originally reported to Ubuntu:

https://bugs.launchpad.net/bugs/710881

The crash can be easily reproduced on the command line:

/usr/lib/cups/filter/bannertops 1 1 1 1 "PageSize=A4" <
/usr/share/cups/data/testprint > out.ps

out.ps is not empty but also not complete. It ends at "%%EndProlog".

The output of the command line is here:

till at till:~/ubuntu/system-config-printer/system-config-printer-1.2.6+20110127$
/usr/lib/cups/filter/bannertops 1 1 1 1 "" < /usr/share/cups/data/testprint
> x


DEBUG: load_banner(filename="(stdin)")
DEBUG: PNG image: 128x128x8, color_type=3 (RGB+PALETTE)
*** glibc detected *** /usr/lib/cups/filter/bannertops: free(): invalid
next size (normal): 0x00007f6ddbe0bff0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x783cc)[0x7f6dd986e3cc]
/lib/libc.so.6(cfree+0x73)[0x7f6dd9872223]
/usr/lib/libcupsimage.so.2(_cupsImageReadPNG+0x3c4)[0x7f6dd9dd1ce4]
/usr/lib/libcupsimage.so.2(cupsImageOpen+0x43b)[0x7f6dd9dd90ab]
/usr/lib/cups/filter/bannertops(+0x48e9)[0x7f6dda2088e9]
/usr/lib/cups/filter/bannertops(main+0x110)[0x7f6dda208af0]
/lib/libc.so.6(__libc_start_main+0xfe)[0x7f6dd9814d1e]
/usr/lib/cups/filter/bannertops(+0x1df9)[0x7f6dda205df9]
======= Memory map: ========
7f6dd0000000-7f6dd0021000 rw-p 00000000 00:00 0 
7f6dd0021000-7f6dd4000000 ---p 00000000 00:00 0 
7f6dd608e000-7f6dd60a3000 r-xp 00000000 fc:00 3366                      
/lib/libgcc_s.so.1
7f6dd60a3000-7f6dd62a2000 ---p 00015000 fc:00 3366                      
/lib/libgcc_s.so.1
7f6dd62a2000-7f6dd62a3000 r--p 00014000 fc:00 3366                      
/lib/libgcc_s.so.1
7f6dd62a3000-7f6dd62a4000 rw-p 00015000 fc:00 3366                      
/lib/libgcc_s.so.1
7f6dd62a4000-7f6dd62d5000 rw-p 00000000 00:00 0 
7f6dd62d6000-7f6dd639a000 rw-p 00000000 00:00 0 
7f6dd639a000-7f6dd67a6000 r--p 00000000 fc:00 1179863                   
/usr/lib/locale/locale-archive
7f6dd67a6000-7f6dd67ad000 r-xp 00000000 fc:00 2982                      
/lib/librt-2.12.2.so
7f6dd67ad000-7f6dd69ad000 ---p 00007000 fc:00 2982                      
/lib/librt-2.12.2.so
7f6dd69ad000-7f6dd69ae000 r--p 00007000 fc:00 2982                      
/lib/librt-2.12.2.so
7f6dd69ae000-7f6dd69af000 rw-p 00008000 fc:00 2982                      
/lib/librt-2.12.2.so
7f6dd69af000-7f6dd69b2000 r-xp 00000000 fc:00 1624                      
/lib/libgpg-error.so.0.8.0
7f6dd69b2000-7f6dd6bb1000 ---p 00003000 fc:00 1624                      
/lib/libgpg-error.so.0.8.0
7f6dd6bb1000-7f6dd6bb2000 r--p 00002000 fc:00 1624                      
/lib/libgpg-error.so.0.8.0
7f6dd6bb2000-7f6dd6bb3000 rw-p 00003000 fc:00 1624                      
/lib/libgpg-error.so.0.8.0
7f6dd6bb3000-7f6dd6bca000 r-xp 00000000 fc:00 3336                      
/lib/libresolv-2.12.2.so
7f6dd6bca000-7f6dd6dca000 ---p 00017000 fc:00 3336                      
/lib/libresolv-2.12.2.so
7f6dd6dca000-7f6dd6dcb000 r--p 00017000 fc:00 3336                      
/lib/libresolv-2.12.2.so
7f6dd6dcb000-7f6dd6dcc000 rw-p 00018000 fc:00 3336                      
/lib/libresolv-2.12.2.so
7f6dd6dcc000-7f6dd6dce000 rw-p 00000000 00:00 0 
7f6dd6dce000-7f6dd6dd0000 r-xp 00000000 fc:00 805                       
/lib/libkeyutils.so.1.3
7f6dd6dd0000-7f6dd6fcf000 ---p 00002000 fc:00 805                       
/lib/libkeyutils.so.1.3
7f6dd6fcf000-7f6dd6fd0000 r--p 00001000 fc:00 805                       
/lib/libkeyutils.so.1.3
7f6dd6fd0000-7f6dd6fd1000 rw-p 00002000 fc:00 805                       
/lib/libkeyutils.so.1.3
7f6dd6fd1000-7f6dd6fd3000 r-xp 00000000 fc:00 3338                      
/lib/libdl-2.12.2.so
7f6dd6fd3000-7f6dd71d3000 ---p 00002000 fc:00 3338                      
/lib/libdl-2.12.2.so
7f6dd71d3000-7f6dd71d4000 r--p 00002000 fc:00 3338                      
/lib/libdl-2.12.2.so
7f6dd71d4000-7f6dd71d5000 rw-p 00003000 fc:00 3338                      
/lib/libdl-2.12.2.so
7f6dd71d5000-7f6dd7217000 r-xp 00000000 fc:00 1140                      
/lib/libdbus-1.so.3.5.3
7f6dd7217000-7f6dd7417000 ---p 00042000 fc:00 1140                      
/lib/libdbus-1.so.3.5.3
7f6dd7417000-7f6dd7418000 r--p 00042000 fc:00 1140                      
/lib/libdbus-1.so.3.5.3
7f6dd7418000-7f6dd7419000 rw-p 00043000 fc:00 1140                      
/lib/libdbus-1.so.3.5.3
7f6dd7419000-7f6dd748f000 r-xp 00000000 fc:00 2190                      
/lib/libgcrypt.so.11.5.3
7f6dd748f000-7f6dd768f000 ---p 00076000 fc:00 2190                      
/lib/libgcrypt.so.11.5.3
7f6dd768f000-7f6dd7690000 r--p 00076000 fc:00 2190                      
/lib/libgcrypt.so.11.5.3
7f6dd7690000-7f6dd7693000 rw-p 00077000 fc:00 2190                      
/lib/libgcrypt.so.11.5.3
7f6dd7693000-7f6dd76a3000 r-xp 00000000 fc:00 131837                    
/usr/lib/libtasn1.so.3.1.9
7f6dd76a3000-7f6dd78a2000 ---p 00010000 fc:00 131837                    
/usr/lib/libtasn1.so.3.1.9
7f6dd78a2000-7f6dd78a3000 r--p 0000f000 fc:00 131837                    
/usr/lib/libtasn1.so.3.1.9
7f6dd78a3000-7f6dd78a4000 rw-p 00010000 fc:00 131837                    
/usr/lib/libtasn1.so.3.1.9
7f6dd78a4000-7f6dd78ab000 r-xp 00000000 fc:00 135802                    
/usr/lib/libkrb5support.so.0.1
7f6dd78ab000-7f6dd7aaa000 ---p 00007000 fc:00 135802                    
/usr/lib/libkrb5support.so.0.1
7f6dd7aaa000-7f6dd7aab000 r--p 00006000 fc:00 135802                    
/usr/lib/libkrb5support.so.0.1
7f6dd7aab000-7f6dd7aac000 rw-p 00007000 fc:00 135802                    
/usr/lib/libkrb5support.so.0.1
7f6dd7aac000-7f6dd7aaf000 r-xp 00000000 fc:00 3308                      
/lib/libcom_err.so.2.1
7f6dd7aaf000-7f6dd7cae000 ---p 00003000 fc:00 3308                      
/lib/libcom_err.so.2.1
7f6dd7cae000-7f6dd7caf000 r--p 00002000 fc:00 3308                      
/lib/libcom_err.so.2.1
7f6dd7caf000-7f6dd7cb0000 rw-p 00003000 fc:00 3308                      
/lib/libcom_err.so.2.1
7f6dd7cb0000-7f6dd7cd5000 r-xp 00000000 fc:00 132199                    
/usr/lib/libk5crypto.so.3.1
7f6dd7cd5000-7f6dd7ed5000 ---p 00025000 fc:00 132199                    
/usr/lib/libk5crypto.so.3.1
7f6dd7ed5000-7f6dd7ed6000 r--p 00025000 fc:00 132199                    
/usr/lib/libk5crypto.so.3.1
7f6dd7ed6000-7f6dd7ed7000 rw-p 00026000 fc:00 132199                    
/usr/lib/libk5crypto.so.3.1
7f6dd7ed7000-7f6dd7f91000 r-xp 00000000 fc:00 135686                    
/usr/lib/libkrb5.so.3.3
7f6dd7f91000-7f6dd8191000 ---p 000ba000 fc:00 135686                    
/usr/lib/libkrb5.so.3.3
7f6dd8191000-7f6dd819a000 r--p 000ba000 fc:00 135686                    
/usr/lib/libkrb5.so.3.3
7f6dd819a000-7f6dd819b000 rw-p 000c3000 fc:00 135686                    
/usr/lib/libkrb5.so.3.3
7f6dd819b000-7f6dd81b1000 r-xp 00000000 fc:00 205                       
/lib/libz.so.1.2.3.4
7f6dd81b1000-7f6dd83b1000 ---p 00016000 fc:00 205                       
/lib/libz.so.1.2.3.4Aborted (core dumped)
till at till:~/ubuntu/system-config-printer/system-config-printer-1.2.6+20110127$

Distribution is Ubuntu Natty. The bannertops filter is not patched in
Ubuntu, nor the CUPS test page.

Link: http://www.cups.org/str.php?L3787
Version: 1.4.5

More information about the cups mailing list