Bug 1039718

Summary: [abrt] ghostscript-9.10-4.fc19: igc_reloc_struct_ptr: Process /usr/bin/gs was killed by signal 11 (SIGSEGV)
Product: [Fedora] Fedora Reporter: Miloslav Trmač <mitr>
Component: ghostscriptAssignee: Tim Waugh <twaugh>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: mitr, twaugh
Target Milestone: ---Keywords: Patch
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/50982206e1404aacd44ffe5d96a1b6fb20bcb594
Whiteboard: abrt_hash:5e0ed135ac90f34b32d5a742410f04bcf2d567e4
Fixed In Version: ghostscript-9.10-5.fc19 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-02-26 13:52:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
d00058-001
none
d00059-001
none
d00062-001
none
gs-bisected.patch none

Description Miloslav Trmač 2013-12-09 20:52:43 UTC
Version-Release number of selected component:
ghostscript-9.10-4.fc19

Additional info:
reporter:       libreport-2.1.9
backtrace_rating: 4
cmdline:        gs -q -dNOPAUSE -dBATCH -dSAFER -sDEVICE=ps2write -sOUTPUTFILE=%stdout -dLanguageLevel=3 -r600 -dCompressFonts=false -dNoT3CCITT -dNOINTERPOLATE -c 'save pop' -f /var/spool/cups/tmp/cups0Yb3Cx
crash_function: igc_reloc_struct_ptr
executable:     /usr/bin/gs
kernel:         3.11.9-200.fc19.x86_64
runlevel:       N 5
type:           CCpp
uid:            4

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 igc_reloc_struct_ptr at psi/igc.c:1305
 #1 pdf14_device_reloc_ptrs at base/gdevp14.c:514
 #2 gc_do_reloc at psi/igc.c:1247
 #3 gs_gc_reclaim at psi/igc.c:449
 #4 context_reclaim at psi/zcontext.c:280
 #5 gs_vmreclaim at psi/ireclaim.c:155
 #6 ireclaim at psi/ireclaim.c:77
 #7 interp_reclaim at psi/interp.c:441
 #8 interp at psi/interp.c:1713
 #9 gs_call_interp at psi/interp.c:510

Comment 1 Miloslav Trmač 2013-12-09 20:52:49 UTC
Created attachment 834524 [details]
File: backtrace

Comment 2 Miloslav Trmač 2013-12-09 20:52:51 UTC
Created attachment 834525 [details]
File: cgroup

Comment 3 Miloslav Trmač 2013-12-09 20:52:53 UTC
Created attachment 834526 [details]
File: core_backtrace

Comment 4 Miloslav Trmač 2013-12-09 20:52:55 UTC
Created attachment 834527 [details]
File: dso_list

Comment 5 Miloslav Trmač 2013-12-09 20:52:57 UTC
Created attachment 834528 [details]
File: environ

Comment 6 Miloslav Trmač 2013-12-09 20:52:59 UTC
Created attachment 834529 [details]
File: exploitable

Comment 7 Miloslav Trmač 2013-12-09 20:53:01 UTC
Created attachment 834530 [details]
File: limits

Comment 8 Miloslav Trmač 2013-12-09 20:53:03 UTC
Created attachment 834531 [details]
File: maps

Comment 9 Miloslav Trmač 2013-12-09 20:53:05 UTC
Created attachment 834532 [details]
File: open_fds

Comment 10 Miloslav Trmač 2013-12-09 20:53:07 UTC
Created attachment 834533 [details]
File: proc_pid_status

Comment 11 Miloslav Trmač 2013-12-09 20:53:10 UTC
Created attachment 834534 [details]
File: var_log_messages

Comment 12 Tim Waugh 2013-12-10 09:54:23 UTC
Are you able to reproduce this problem by e.g. printing the same job again? If so, are you able to share the content of that job?

I can't reproduce this by running that command line with no input, so I think it must be triggered by something in the input job. That job would be a PDF file I expect, as the command line looks like something the CUPS pdftops filter would run.

Comment 13 Miloslav Trmač 2013-12-10 12:16:48 UTC
(In reply to Tim Waugh from comment #12)
> Are you able to reproduce this problem by e.g. printing the same job again?
> If so, are you able to share the content of that job?
> 
> I can't reproduce this by running that command line with no input, so I
> think it must be triggered by something in the input job. That job would be
> a PDF file I expect, as the command line looks like something the CUPS
> pdftops filter would run.

I can reproduce this by printing http://sgallagh.wordpress.com/2013/12/09/proposal-freeipa-role-for-fedora-servers/ from Firefox (with AFAICS default settings).  I still have three PDF files in the CUPS queue, will attach them.

Comment 14 Miloslav Trmač 2013-12-10 12:18:01 UTC
Created attachment 834719 [details]
d00058-001

Comment 15 Miloslav Trmač 2013-12-10 12:18:32 UTC
Created attachment 834720 [details]
d00059-001

Comment 16 Miloslav Trmač 2013-12-10 12:18:54 UTC
Created attachment 834721 [details]
d00062-001

Comment 17 Tim Waugh 2013-12-10 14:53:08 UTC
Thanks. I can reproduce this with d00062-001 on F20, but not on F19 -- even though both are built from the same git revision.

I have found that the upstream 'ghostscript-9.10' tag builds a gs that crashes, but 'master' does not crash, so I'll start a bisect run.

Comment 18 Tim Waugh 2013-12-10 15:02:51 UTC
Created attachment 834811 [details]
gs-bisected.patch

"git bisect" found this one to be the fix.

Comment 19 Fedora Update System 2013-12-10 17:28:39 UTC
ghostscript-9.10-5.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/ghostscript-9.10-5.fc19

Comment 20 Fedora Update System 2013-12-10 18:27:44 UTC
ghostscript-9.10-5.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/ghostscript-9.10-5.fc20

Comment 21 Fedora Update System 2013-12-11 02:02:50 UTC
Package ghostscript-9.10-5.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing ghostscript-9.10-5.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-23146/ghostscript-9.10-5.fc19
then log in and leave karma (feedback).

Comment 22 Fedora Update System 2013-12-20 02:02:37 UTC
ghostscript-9.10-5.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 23 Fedora Update System 2014-02-26 13:52:16 UTC
ghostscript-9.10-5.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.