Bug 1045209

Summary: Segmentation fault in sane-backends pixma when done scanning
Product: [Fedora] Fedora Reporter: Orion Poplawski <orion>
Component: sane-backendsAssignee: Nils Philippsen <nphilipp>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 19CC: nphilipp
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
URL: https://alioth.debian.org/tracker/index.php?func=detail&aid=314551&group_id=30186&atid=410366
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-02-17 19:43:43 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Orion Poplawski 2013-12-19 21:09:14 UTC
Description of problem:

This is with a Caon MF3010 which uses the pixma driver.

(gdb) run > /dev/null
Starting program: /usr/bin/scanimage > /dev/null
 14:01:19 up 7 min, 21 users,  load average: 0.66, 0.53, 0.31
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
[New Thread 0x7ffff0c14700 (LWP 2506)]
[New Thread 0x7fffdb8d8700 (LWP 2508)]
[Thread 0x7fffdb8d8700 (LWP 2508) exited]

Program received signal SIGSEGV, Segmentation fault.
pthread_detach (th=th@entry=140736876873472) at pthread_detach.c:31
31        if (INVALID_NOT_TERMINATED_TD_P (pd))
Missing separate debuginfos, use: debuginfo-install jbigkit-libs-2.0-8.fc19.x86_64 libgcc-4.8.2-7.fc19.x86_64 libtool-ltdl-2.4.2-21.fc19.x86_64 systemd-libs-204-18.fc19.x86_64 zlib-1.2.7-10.fc19.x86_64
(gdb) bt
#0  pthread_detach (th=th@entry=140736876873472) at pthread_detach.c:31
#1  0x00007ffff3bbf049 in sanei_thread_waitpid (pid=pid@entry=140736876873472, status=status@entry=0x7fffffffa7fc)
    at sanei_thread.c:519
#2  0x00007fffe21e5997 in terminate_reader_task (ss=0x5555557991f0, exit_code=0x0) at pixma.c:1097
#3  0x00007fffe21e5b8f in read_image (ss=ss@entry=0x5555557991f0, buf=buf@entry=0x55555579b760, size=size@entry=32768, 
    readlen=readlen@entry=0x7fffffffa878) at pixma.c:1221
#4  0x00007fffe21e701b in read_image (readlen=0x7fffffffa878, size=32768, buf=0x55555579b760, ss=0x5555557991f0) at pixma.c:1184
#5  sane_pixma_read (h=<optimized out>, buf=0x55555579b760 '\377' <repeats 200 times>..., maxlen=32768, len=0x7fffffffa9c4)
    at pixma.c:1562
#6  0x0000555555556a93 in scan_it () at scanimage.c:1327
#7  main (argc=<optimized out>, argv=<optimized out>) at scanimage.c:2310
(gdb) print pd
$1 = (struct pthread *) 0x7fffdb8d8700
(gdb) print *pd
Cannot access memory at address 0x7fffdb8d8700
(gdb) up
#1  0x00007ffff3bbf049 in sanei_thread_waitpid (pid=pid@entry=140736876873472, status=status@entry=0x7fffffffa7fc)
    at sanei_thread.c:519
519             pthread_detach((pthread_t)pid);
(gdb) print pid
$2 = 140736876873472
(gdb) print *(pthread_t)pid
Cannot access memory at address 0x7fffdb8d8700
(gdb) up
#2  0x00007fffe21e5997 in terminate_reader_task (ss=0x5555557991f0, exit_code=0x0) at pixma.c:1097
1097      result = sanei_thread_waitpid (pid, &status);
(gdb) print pid
$3 = 140736876873472
(gdb) up
#3  0x00007fffe21e5b8f in read_image (ss=ss@entry=0x5555557991f0, buf=buf@entry=0x55555579b760, size=size@entry=32768, 
    readlen=readlen@entry=0x7fffffffa878) at pixma.c:1221
1221          terminate_reader_task (ss, NULL);
(gdb) print *ss
$4 = {next = 0x0, s = 0x55555579ac40, sp = {line_size = 1920, image_size = 1683840, channels = 3, depth = 8, xdpi = 75, ydpi = 75, 
    x = 0, y = 0, w = 640, h = 877, xs = 0, wx = 0, tpu_offset_added = 0, software_lineart = 0, threshold = 127, 
    threshold_curve = 0, lineart_lut = '\000' <repeats 255 times>, gamma_table = 0x555555799bd0 "", source = PIXMA_SOURCE_FLATBED, 
    mode = PIXMA_SCAN_MODE_COLOR, adf_pageid = 0}, cancel = 0, idle = 0, scanning = 1, last_read_status = SANE_STATUS_GOOD, opt = {
    {sod = {name = 0x7fffe21f8f83 "", title = 0x7fffe21f9286 "Number of options", 
        desc = 0x7fffe21f9a00 "Read-only option that specifies how many options a specific devices supports.", 
        type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, size = 4, cap = 4, constraint_type = SANE_CONSTRAINT_NONE, constraint = {
          string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 25, i = 25, b = 25, f = 25, 
        s = 0x19 <Address 0x19 out of bounds>, ptr = 0x19}, def = {w = 25, i = 25, b = 25, f = 25, 
        s = 0x19 <Address 0x19 out of bounds>, ptr = 0x19}, info = 0}, {sod = {name = 0x0, title = 0x7fffe21f9298 "Scan mode", 
        desc = 0x7fffe21f9298 "Scan mode", type = SANE_TYPE_GROUP, unit = SANE_UNIT_NONE, size = 0, cap = 0, 
        constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {
        name = 0x7fffe21f92a7 "resolution", title = 0x7fffe21f92a2 "Scan resolution", 
        desc = 0x7fffe21f9a50 "Sets the resolution of the scanned image.", type = SANE_TYPE_INT, unit = SANE_UNIT_DPI, size = 4, 
        cap = 21, constraint_type = SANE_CONSTRAINT_WORD_LIST, constraint = {string_list = 0x555555799b60, 
          word_list = 0x555555799b60, range = 0x555555799b60}}, val = {w = 75, i = 75, b = 75, f = 75, 
        s = 0x4b <Address 0x4b out of bounds>, ptr = 0x4b}, def = {w = 75, i = 75, b = 75, f = 75, 
        s = 0x4b <Address 0x4b out of bounds>, ptr = 0x4b}, info = 4}, {sod = {name = 0x7fffe21f929d "mode", 
        title = 0x7fffe21f9298 "Scan mode", desc = 0x7fffe21f9a80 "Selects the scan mode (e.g., lineart, monochrome, or color).", 
        type = SANE_TYPE_STRING, unit = SANE_UNIT_NONE, size = 31, cap = 21, constraint_type = SANE_CONSTRAINT_STRING_LIST, 
        constraint = {string_list = 0x555555799b88, word_list = 0x555555799b88, range = 0x555555799b88}}, val = {w = 0, i = 0, 
        b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = -501247842, i = -501247842, b = -501247842, f = -501247842, 
        s = 0x7fffe21f909e "Color", ptr = 0x7fffe21f909e}, info = 4}, {sod = {name = 0x7fffe21f92b7 "source", 
        title = 0x7fffe21f92b2 "Scan source", 
        desc = 0x7fffe21f9ac0 "Selects the scan source (such as a document-feeder). Set source before mode and resolution. Resets mode and resolution to auto values.", type = SANE_TYPE_STRING, unit = SANE_UNIT_NONE, size = 31, cap = 5, 
        constraint_type = SANE_CONSTRAINT_STRING_LIST, constraint = {string_list = 0x55555579abd0, word_list = 0x55555579abd0, 
          range = 0x55555579abd0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = -501247417, i = -501247417, 
        b = -501247417, f = -501247417, s = 0x7fffe21f9247 "Flatbed", ptr = 0x7fffe21f9247}, info = 0}, {sod = {
        name = 0x7fffe21f92d5 "button-controlled", title = 0x7fffe21f92be "Button-controlled scan", 
        desc = 0x7fffe21f9b48 "When enabled, scan process will not start immediately. To proceed, press \"SCAN\" button (for MP150) or \"COLOR\" button (for other models). To cancel, press \"GRAY\" button.", type = SANE_TYPE_BOOL, unit = SANE_UNIT_NONE, 
        size = 4, cap = 5, constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, 
          range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, 
        ptr = 0x0}, info = 0}, {sod = {name = 0x0, title = 0x7fffe21f92e7 "Gamma", desc = 0x7fffe21f92e7 "Gamma", 
        type = SANE_TYPE_GROUP, unit = SANE_UNIT_NONE, size = 0, cap = 0, constraint_type = SANE_CONSTRAINT_NONE, constraint = {
          string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, 
---Type <return> to continue, or q <return> to quit---
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {name = 0x7fffe21f9304 "custom-gamma", 
        title = 0x7fffe21f92ed "Use custom gamma table", 
        desc = 0x7fffe21f9bf8 "Determines whether a builtin or a custom gamma-table should be used.", type = SANE_TYPE_BOOL, 
        unit = SANE_UNIT_NONE, size = 4, cap = 53, constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, 
          word_list = 0x0, range = 0x0}}, val = {w = 1, i = 1, b = 1, f = 1, s = 0x1 <Address 0x1 out of bounds>, ptr = 0x1}, 
      def = {w = 1, i = 1, b = 1, f = 1, s = 0x1 <Address 0x1 out of bounds>, ptr = 0x1}, info = 0}, {sod = {
        name = 0x7fffe21f9321 "gamma-table", title = 0x7fffe21f9311 "Image intensity", 
        desc = 0x7fffe21f9c40 "Gamma-correction table.  In color mode this option equally affects the red, green, and blue channels simultaneously (i.e., it is an intensity gamma table).", type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, size = 16384, cap = 53, 
        constraint_type = SANE_CONSTRAINT_RANGE, constraint = {string_list = 0x7fffe21f9520 <constraint_gamma_table>, 
          word_list = 0x7fffe21f9520 <constraint_gamma_table>, range = 0x7fffe21f9520 <constraint_gamma_table>}}, val = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {
        name = 0x7fffe21f930b "gamma", title = 0x7fffe21f932d "Gamma function exponent", 
        desc = 0x7fffe21f9345 "Changes intensity of midtones", type = SANE_TYPE_FIXED, unit = SANE_UNIT_NONE, size = 4, cap = 53, 
        constraint_type = SANE_CONSTRAINT_RANGE, constraint = {string_list = 0x7fffe21f9514 <constraint_gamma>, 
          word_list = 0x7fffe21f9514 <constraint_gamma>, range = 0x7fffe21f9514 <constraint_gamma>}}, val = {w = 144179, 
        i = 144179, b = 144179, f = 144179, s = 0x23333 <Address 0x23333 out of bounds>, ptr = 0x23333}, def = {w = 144179, 
        i = 144179, b = 144179, f = 144179, s = 0x23333 <Address 0x23333 out of bounds>, ptr = 0x23333}, info = 0}, {sod = {
        name = 0x0, title = 0x7fffe21f9363 "Geometry", desc = 0x7fffe21f9363 "Geometry", type = SANE_TYPE_GROUP, 
        unit = SANE_UNIT_NONE, size = 0, cap = 0, constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, 
          word_list = 0x0, range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, 
        f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {name = 0x7fffe21f9377 "tl-x", title = 0x7fffe21f936c "Top-left x", 
        desc = 0x7fffe21f9ce0 "Top-left x position of scan area.", type = SANE_TYPE_FIXED, unit = SANE_UNIT_MM, size = 4, 
        cap = 21, constraint_type = SANE_CONSTRAINT_RANGE, constraint = {string_list = 0x555555799b48, word_list = 0x555555799b48, 
          range = 0x555555799b48}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, 
        s = 0x0, ptr = 0x0}, info = 4}, {sod = {name = 0x7fffe21f9387 "tl-y", title = 0x7fffe21f937c "Top-left y", 
        desc = 0x7fffe21f9d08 "Top-left y position of scan area.", type = SANE_TYPE_FIXED, unit = SANE_UNIT_MM, size = 4, 
        cap = 21, constraint_type = SANE_CONSTRAINT_RANGE, constraint = {string_list = 0x555555799b54, word_list = 0x555555799b54, 
          range = 0x555555799b54}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, 
        s = 0x0, ptr = 0x0}, info = 4}, {sod = {name = 0x7fffe21f939b "br-x", title = 0x7fffe21f938c "Bottom-right x", 
        desc = 0x7fffe21f9d30 "Bottom-right x position of scan area.", type = SANE_TYPE_FIXED, unit = SANE_UNIT_MM, size = 4, 
        cap = 21, constraint_type = SANE_CONSTRAINT_RANGE, constraint = {string_list = 0x555555799b48, word_list = 0x555555799b48, 
          range = 0x555555799b48}}, val = {w = 14204709, i = 14204709, b = 14204709, f = 14204709, 
        s = 0xd8bf25 <Address 0xd8bf25 out of bounds>, ptr = 0xd8bf25}, def = {w = 14204709, i = 14204709, b = 14204709, 
        f = 14204709, s = 0xd8bf25 <Address 0xd8bf25 out of bounds>, ptr = 0xd8bf25}, info = 4}, {sod = {
        name = 0x7fffe21f93af "br-y", title = 0x7fffe21f93a0 "Bottom-right y", 
        desc = 0x7fffe21f9d58 "Bottom-right y position of scan area.", type = SANE_TYPE_FIXED, unit = SANE_UNIT_MM, size = 4, 
        cap = 21, constraint_type = SANE_CONSTRAINT_RANGE, constraint = {string_list = 0x555555799b54, word_list = 0x555555799b54, 
---Type <return> to continue, or q <return> to quit---
          range = 0x555555799b54}}, val = {w = 19464891, i = 19464891, b = 19464891, f = 19464891, 
        s = 0x12902bb <Address 0x12902bb out of bounds>, ptr = 0x12902bb}, def = {w = 19464891, i = 19464891, b = 19464891, 
        f = 19464891, s = 0x12902bb <Address 0x12902bb out of bounds>, ptr = 0x12902bb}, info = 4}, {sod = {name = 0x0, 
        title = 0x7fffe21f93b4 "Buttons", desc = 0x7fffe21f93b4 "Buttons", type = SANE_TYPE_GROUP, unit = SANE_UNIT_NONE, 
        size = 0, cap = 0, constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, 
          range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, 
        ptr = 0x0}, info = 0}, {sod = {name = 0x7fffe21f93d0 "button-update", title = 0x7fffe21f93bc "Update button state", 
        desc = 0x7fffe21f93bc "Update button state", type = SANE_TYPE_BUTTON, unit = SANE_UNIT_NONE, size = 0, cap = 69, 
        constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {
        name = 0x7fffe21f93e7 "button-1", title = 0x7fffe21f93de "Button 1", desc = 0x7fffe21f93de "Button 1", 
        type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, size = 4, cap = 68, constraint_type = SANE_CONSTRAINT_NONE, constraint = {
          string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {name = 0x7fffe21f93f9 "button-2", 
        title = 0x7fffe21f93f0 "Button 2", desc = 0x7fffe21f93f0 "Button 2", type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, 
        size = 4, cap = 68, constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, 
          range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, 
        ptr = 0x0}, info = 0}, {sod = {name = 0x7fffe21f941b "original", title = 0x7fffe21f9402 "Type of original to scan", 
        desc = 0x7fffe21f9402 "Type of original to scan", type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, size = 4, cap = 68, 
        constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {
        name = 0x7fffe21f943a "target", title = 0x7fffe21f9424 "Target operation type", 
        desc = 0x7fffe21f9424 "Target operation type", type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, size = 4, cap = 68, 
        constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {
        name = 0x7fffe21f9441 "scan-resolution", title = 0x7fffe21f92a2 "Scan resolution", 
        desc = 0x7fffe21f92a2 "Scan resolution", type = SANE_TYPE_INT, unit = SANE_UNIT_NONE, size = 4, cap = 68, 
        constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, word_list = 0x0, range = 0x0}}, val = {w = 0, 
        i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {
        name = 0x0, title = 0x7fffe21f9451 "Extras", desc = 0x7fffe21f9451 "Extras", type = SANE_TYPE_GROUP, 
        unit = SANE_UNIT_NONE, size = 0, cap = 0, constraint_type = SANE_CONSTRAINT_NONE, constraint = {string_list = 0x0, 
          word_list = 0x0, range = 0x0}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {w = 0, i = 0, b = 0, 
        f = 0, s = 0x0, ptr = 0x0}, info = 0}, {sod = {name = 0x7fffe21f9462 "threshold", title = 0x7fffe21f9458 "Threshold", 
        desc = 0x7fffe21f9d80 "Select minimum-brightness to get a white point", type = SANE_TYPE_INT, unit = SANE_UNIT_PERCENT, 
        size = 4, cap = 53, constraint_type = SANE_CONSTRAINT_RANGE, constraint = {
          string_list = 0x7fffe21f9508 <constraint_threshold>, word_list = 0x7fffe21f9508 <constraint_threshold>, 
          range = 0x7fffe21f9508 <constraint_threshold>}}, val = {w = 50, i = 50, b = 50, f = 50, 
        s = 0x32 <Address 0x32 out of bounds>, ptr = 0x32}, def = {w = 50, i = 50, b = 50, f = 50, 
---Type <return> to continue, or q <return> to quit---
        s = 0x32 <Address 0x32 out of bounds>, ptr = 0x32}, info = 0}, {sod = {name = 0x7fffe21f947c "threshold-curve", 
        title = 0x7fffe21f946c "Threshold curve", 
        desc = 0x7fffe21f9db0 "Dynamic threshold curve, from light to dark, normally 50-65", type = SANE_TYPE_INT, 
        unit = SANE_UNIT_NONE, size = 4, cap = 53, constraint_type = SANE_CONSTRAINT_RANGE, constraint = {
          string_list = 0x7fffe21f94fc <constraint_threshold_curve>, word_list = 0x7fffe21f94fc <constraint_threshold_curve>, 
          range = 0x7fffe21f94fc <constraint_threshold_curve>}}, val = {w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, def = {
        w = 0, i = 0, b = 0, f = 0, s = 0x0, ptr = 0x0}, info = 0}}, button_option_is_cached = "\000\000\000\000", xrange = {
    min = 0, max = 14204709, quant = 0}, yrange = {min = 0, max = 19464891, quant = 0}, dpi_list = {4, 75, 150, 300, 600, 0, 0, 0, 
    0}, mode_list = {0x7fffe21f909e "Color", 0x7fffe21f90a4 "Gray", 0x0, 0x0, 0x0, 0x0}, mode_map = {PIXMA_SCAN_MODE_COLOR, 
    PIXMA_SCAN_MODE_GRAY, PIXMA_SCAN_MODE_COLOR, PIXMA_SCAN_MODE_COLOR, PIXMA_SCAN_MODE_COLOR, PIXMA_SCAN_MODE_COLOR}, 
  gamma_table = '\000' <repeats 4095 times>, source_list = {0x7fffe21f9247 "Flatbed", 0x0, 0x0, 0x0}, source_map = {
    PIXMA_SOURCE_FLATBED, PIXMA_SOURCE_FLATBED, PIXMA_SOURCE_FLATBED, PIXMA_SOURCE_FLATBED}, byte_pos_in_line = 0, 
  output_line_size = 1920, image_bytes_read = 1683840, page_count = 0, reader_taskid = 140736876873472, wpipe = -1, rpipe = -1, 
  reader_stop = 1}

Version-Release number of selected component (if applicable):
sane-backends-1.0.24-7.fc19.x86_64

How reproducible:
Every time


valgrind doesn't show any errors before the segfault:

==2553== Memcheck, a memory error detector
==2553== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
==2553== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
==2553== Command: scanimage
==2553== 
==2553== Invalid read of size 4
==2553==    at 0x672DC80: pthread_detach (pthread_detach.c:31)
==2553==    by 0x4E42048: sanei_thread_waitpid (sanei_thread.c:519)
==2553==    by 0x16C13996: terminate_reader_task (pixma.c:1097)
==2553==    by 0x16C13B8E: read_image.part.3 (pixma.c:1221)
==2553==    by 0x16C1501A: sane_pixma_read (pixma.c:1184)
==2553==    by 0x10AA92: main (scanimage.c:1327)
==2553==  Address 0x29f359d0 is not stack'd, malloc'd or (recently) free'd
==2553== 
==2553== 
==2553== Process terminating with default action of signal 11 (SIGSEGV)
==2553==  Access not within mapped region at address 0x29F359D0
==2553==    at 0x672DC80: pthread_detach (pthread_detach.c:31)

Comment 1 Fedora End Of Life 2015-01-09 20:54:55 UTC
This message is a notice that Fedora 19 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 19. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained. Approximately 4 (four) weeks from now this bug will
be closed as EOL if it remains open with a Fedora 'version' of '19'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 19 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 2 Fedora End Of Life 2015-02-17 19:43:43 UTC
Fedora 19 changed to end-of-life (EOL) status on 2015-01-06. Fedora 19 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.