Bug 624728

Summary: ghostscript-8.71-10.fc13 crash with SIGSEGV
Product: [Fedora] Fedora Reporter: Peter H. Jones <jones.peter.busi>
Component: ghostscriptAssignee: Tim Waugh <twaugh>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 13CC: twaugh
Target Milestone: ---   
Target Release: ---   
Hardware: i686   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-08-20 05:05:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
want to delete coverletter.pdf, which containss some personal information none

Description Peter H. Jones 2010-08-17 15:27:53 UTC 
Additional info:Package:    	ghostscript-8.71-10.fc13
Latest Crash:	Tue 17 Aug 2010 11:08:34 AM 
Command:    	gs coverletter.pdf
Reason:     	Process /usr/bin/gs was killed by signal 11 (SIGSEGV)
Comment:    	None
Bug Reports:	


How reproducible:
Didn't try.

Steps to Reproduce:
1. Tried to run gs.
2.
3.
  
Actual results:
Showed PDF briefly, then crashed. Also complained about a missing font and doing a substitution.


Expected results:
Stable PDF

abrt would not submit a report because the suggested command,
"debuginfo-install ghostscript" didn't find compatible debugging information.

Here's the stack trace I was able to copy and paste:
"warning: the debug information found in "/usr/lib/debug//usr/bin/gs.debug" does not match "/usr/bin/gs" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug/usr/bin/gs.debug" does not match "/usr/bin/gs" (CRC mismatch).

[New Thread 2599]
warning: the debug information found in "/usr/lib/debug//usr/lib/libgs.so.8.71.debug" does not match "/usr/lib/libgs.so.8" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug/usr/lib/libgs.so.8.71.debug" does not match "/usr/lib/libgs.so.8" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug//usr/lib/ghostscript/8.71/X11.so.debug" does not match "/usr/lib/ghostscript/8.71/X11.so" (CRC mismatch).

warning: the debug information found in "/usr/lib/debug/usr/lib/ghostscript/8.71/X11.so.debug" does not match "/usr/lib/ghostscript/8.71/X11.so" (CRC mismatch).

Core was generated by `gs coverletter.pdf'.
Program terminated with signal 11, Segmentation fault.
#0  0x0076807d in gs_closedevice () from /usr/lib/libgs.so.8

Thread 1 (Thread 2599):
#0  0x0076807d in gs_closedevice () from /usr/lib/libgs.so.8
No symbol table info available.
#1  0x005a9116 in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#2  0x00768099 in gs_closedevice () from /usr/lib/libgs.so.8
No symbol table info available.
#3  0x00769bff in gx_device_finalize () from /usr/lib/libgs.so.8
No symbol table info available.
#4  0x0075cd30 in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#5  0x0077c172 in rc_free_struct_only () from /usr/lib/libgs.so.8
No symbol table info available.
#6  0x00783841 in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#7  0x0078391b in gs_grestore_only () from /usr/lib/libgs.so.8
No symbol table info available.
#8  0x007839fd in gs_grestore () from /usr/lib/libgs.so.8
No symbol table info available.
#9  0x005478f0 in zgrestore () from /usr/lib/libgs.so.8
No symbol table info available.
#10 0x005146c4 in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#11 0x005158d0 in gs_interpret () from /usr/lib/libgs.so.8
No symbol table info available.
#12 0x005088f9 in gs_main_run_string_end () from /usr/lib/libgs.so.8
No symbol table info available.
#13 0x00508d7a in gs_main_run_string_with_length () from /usr/lib/libgs.so.8
No symbol table info available.
#14 0x00508ddb in gs_main_run_string () from /usr/lib/libgs.so.8
No symbol table info available.
#15 0x00509bf1 in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#16 0x0050a4b8 in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#17 0x0050a76a in ?? () from /usr/lib/libgs.so.8
No symbol table info available.
#18 0x0050c1d2 in gs_main_init_with_args () from /usr/lib/libgs.so.8
No symbol table info available.
#19 0x0050d43f in gsapi_init_with_args () from /usr/lib/libgs.so.8
No symbol table info available.
#20 0x080487f4 in main ()
No symbol table info available.
From        To          Syms Read   Shared Object Library
0x0049edb0  0x007eb168  Yes (*)     /usr/lib/libgs.so.8
0x00126aa0  0x002461f4  Yes         /lib/libc-2.12.so
0x002a3f80  0x002da598  Yes         /usr/lib/libjasper.so.1.0.0
0x002f9210  0x00353688  Yes         /usr/lib/libcairo.so.2.10800.10
0x0467bd40  0x046aef18  Yes         /usr/lib/libtiff.so.3.9.4
0x0497f2d0  0x049996b8  Yes         /usr/lib/libjpeg.so.62.0.0
0x003745f0  0x00387e98  Yes         /usr/lib/libcupsimage.so.2
0x07393680  0x073caac8  Yes         /usr/lib/libcups.so.2
0x00390750  0x003b2418  Yes         /lib/libgssapi_krb5.so.2.2
0x044cee50  0x04531e98  Yes         /lib/libkrb5.so.3.3
0x003bd7f0  0x003d8208  Yes         /lib/libk5crypto.so.3.1
0x003e5d10  0x003e6938  Yes         /lib/libcom_err.so.2.1
0x00c7e470  0x00c98968  Yes         /lib/libm-2.12.so
0x073588b0  0x0735da18  Yes         /lib/libcrypt-2.12.so
0x003eb6f0  0x004076d8  Yes         /usr/lib/libpng12.so.0.44.0
0x00ca6620  0x00cb18e8  Yes         /lib/libz.so.1.2.3
0x00cb8a60  0x00cb9a88  Yes         /lib/libdl-2.12.so
0x0428a610  0x042fd098  Yes         /usr/lib/libstdc++.so.6.0.13
0x00cc0f60  0x00cdccc8  Yes         /usr/lib/libfontconfig.so.1.4.4
0x00cf65e0  0x00d02558  Yes         /lib/libpthread-2.12.so
0x00410830  0x004283bf  Yes         /lib/ld-2.12.so
0x00d10b40  0x00d68a68  Yes         /usr/lib/libpixman-1.so.0.18.0
0x00d7d3c0  0x00de66e8  Yes         /usr/lib/libfreetype.so.6.3.22
0x00e0f2c0  0x00e15178  Yes         /usr/lib/libXrender.so.1.3.0
0x00f40370  0x00fd1908  Yes         /usr/lib/libX11.so.6.3.0
0x00e19550  0x00e1f788  Yes         /usr/lib/libavahi-common.so.3
0x073e08e0  0x073e9f08  Yes         /usr/lib/libavahi-client.so.3
0x073fe8a0  0x07478ed8  Yes (*)     /usr/lib/libgnutls.so.26
0x045fd240  0x0464f988  Yes (*)     /lib/libgcrypt.so.11
0x00e245e0  0x00e24ba8  Yes (*)     /lib/libgpg-error.so.0
0x00e29c60  0x00e2e238  Yes         /lib/libkrb5support.so.0.1
0x00e31860  0x00e31fc8  Yes         /lib/libkeyutils.so.1
0x00e36650  0x00e44f68  Yes         /lib/libresolv-2.12.so
0x045ae9a0  0x045dd958  Yes (*)     /lib/libfreebl3.so
0x00e4efa0  0x00e67438  Yes         /lib/libgcc_s-4.4.4-20100630.so.1
0x00e6d040  0x00e85ef8  Yes         /lib/libexpat.so.1
0x00e99e80  0x00ea8608  Yes         /usr/lib/libxcb.so.1
0x00eb6220  0x00ee2578  Yes         /lib/libdbus-1.so.3.4.0
0x00ef9880  0x00efd6b8  Yes         /lib/librt-2.12.so
0x0749d170  0x074a99c8  Yes (*)     /usr/lib/libtasn1.so.3
0x00f05190  0x00f163b8  Yes         /lib/libselinux.so.1
0x00f1fa00  0x00f207f8  Yes         /usr/lib/libXau.so.6
0x089e5800  0x089efc78  Yes (*)     /usr/lib/ghostscript/8.71/X11.so
0x075e1b40  0x0761e9e8  Yes         /usr/lib/libXt.so.6.0.0
0x00f23380  0x00f27d28  Yes         /usr/lib/libSM.so.6.0.0
0x06d4a530  0x06d5a1f8  Yes         /usr/lib/libICE.so.6.3.0
0x04a216e0  0x04a2bef8  Yes         /usr/lib/libXext.so.6.4.0
0x05095f00  0x05097b48  Yes         /lib/libuuid.so.1
(*): Shared library is missing debugging information.
$1 = 0x0
No symbol "__glib_assert_msg" in current context.
eax            0x0	0
ecx            0x0	0
edx            0x0	0
ebx            0x9bcb58	10210136
esp            0xbfdaf540	0xbfdaf540
ebp            0xbfdaf558	0xbfdaf558
esi            0x0	0
edi            0x0	0
eip            0x76807d	0x76807d <gs_closedevice+13>
eflags         0x210246	[ PF ZF IF RF ID ]
cs             0x73	115
ss             0x7b	123
ds             0x7b	123
es             0x7b	123
fs             0x0	0
gs             0x33	51
Dump of assembler code for function gs_closedevice:
   0x00768070 <+0>:	push   %ebp
   0x00768071 <+1>:	xor    %eax,%eax
   0x00768073 <+3>:	mov    %esp,%ebp
   0x00768075 <+5>:	push   %esi
   0x00768076 <+6>:	lea    -0x14(%esp),%esp
   0x0076807a <+10>:	mov    0x8(%ebp),%esi
=> 0x0076807d <+13>:	mov    0x2c(%esi),%edx
   0x00768080 <+16>:	test   %edx,%edx
   0x00768082 <+18>:	jne    0x768090 <gs_closedevice+32>
   0x00768084 <+20>:	lea    0x14(%esp),%esp
   0x00768088 <+24>:	pop    %esi
   0x00768089 <+25>:	pop    %ebp
   0x0076808a <+26>:	ret    
   0x0076808b <+27>:	nop
   0x0076808c <+28>:	lea    0x0(%esi,%eiz,1),%esi
   0x00768090 <+32>:	mov    %esi,(%esp)
   0x00768093 <+35>:	call   *0x3d8(%esi)
   0x00768099 <+41>:	movl   $0x0,0x2c(%esi)
   0x007680a0 <+48>:	lea    0x14(%esp),%esp
   0x007680a4 <+52>:	pop    %esi
   0x007680a5 <+53>:	pop    %ebp
   0x007680a6 <+54>:	ret    
End of assembler dump.
Comment 1 Tim Waugh 2010-08-17 15:47:27 UTC 
So 'debuginfo-install ghostscript' didn't try to install ghostscript-debuginfo-8.71-10.fc13?  Would be much easier to debug if we had that...

Are you able to attach the PDF that caused the crash?
Comment 2 Peter H. Jones 2010-08-20 04:55:10 UTC 
Created attachment 439861 [details]
PDF file causing crash
Comment 3 Peter H. Jones 2010-08-20 05:05:55 UTC 
Ran it again, abrt created bug report 625671.

*** This bug has been marked as a duplicate of bug 625671 ***
Comment 4 Peter H. Jones 2010-08-20 12:30:37 UTC 
Created attachment 439929 [details]
want to delete coverletter.pdf, which containss some personal information

intended to make previous PDF file invisible. When gs crashed, I didn't have time to notice that the document contains personal information. Bug seems to have been fixed upstream.