Bug 1087094 - [abrt] hpijs: HPCupsFilter::cleanup(): hpcups killed by SIGABRT
Summary: [abrt] hpijs: HPCupsFilter::cleanup(): hpcups killed by SIGABRT
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Fedora
Classification: Fedora
Component: hplip
Version: 20
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tim Waugh
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:ee13c6560daecabac8ba9ede812...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-04-14 00:38 UTC by Herbert Carl Meyer
Modified: 2014-04-15 12:56 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2014-04-15 11:39:43 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
File: backtrace (9.22 KB, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: cgroup (155 bytes, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: core_backtrace (2.83 KB, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: dso_list (2.56 KB, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: environ (936 bytes, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: limits (1.29 KB, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: maps (12.82 KB, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: open_fds (844 bytes, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: proc_pid_status (903 bytes, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
File: var_log_messages (213 bytes, text/plain)
2014-04-14 00:38 UTC, Herbert Carl Meyer 		no flags Details
PPD file (25.60 KB, text/plain)
2014-04-15 12:56 UTC, Herbert Carl Meyer 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1308014 0 None None None Never

Description Herbert Carl Meyer 2014-04-14 00:38:34 UTC 
Description of problem:
Trying to print a pdf displayed by chrome browser. Downloading the pdf, and printing it with Fedora Document Viewer (?Evince?) was successful.

Version-Release number of selected component:
hpijs-3.13.11-4.fc20

Additional info:
reporter:       libreport-2.2.1
backtrace_rating: 4
cmdline:        HpC5580 15 hcmeyer www.amtrak.com/ccurl/316...ans-Schedule-011314.pdf 1 'InputSlot=Auto number-up=1 MediaType=Automatic PageSize=Letter OutputMode=Draft ColorModel=CMYGray Duplex=None job-uuid=urn:uuid:63a6ed14-0657-3d22-4572-421d40ce1b82 job-originating-host-name=localhost time-at-creation=1397414453 time-at-processing=1397414453'
crash_function: HPCupsFilter::cleanup
executable:     /usr/lib/cups/filter/hpcups
kernel:         3.13.9-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            4

Truncated backtrace:
Thread no. 1 (4 frames)
 #5 HPCupsFilter::cleanup at prnt/hpcups/HPCupsFilter.cpp:223
 #6 closeFilter at prnt/hpcups/HPCupsFilter.cpp:217
 #7 HPCupsFilter::StartPrintJob at prnt/hpcups/HPCupsFilter.cpp:566
 #9 _start
Comment 1 Herbert Carl Meyer 2014-04-14 00:38:39 UTC 
Created attachment 885974 [details]
File: backtrace
Comment 2 Herbert Carl Meyer 2014-04-14 00:38:41 UTC 
Created attachment 885975 [details]
File: cgroup
Comment 3 Herbert Carl Meyer 2014-04-14 00:38:42 UTC 
Created attachment 885976 [details]
File: core_backtrace
Comment 4 Herbert Carl Meyer 2014-04-14 00:38:44 UTC 
Created attachment 885977 [details]
File: dso_list
Comment 5 Herbert Carl Meyer 2014-04-14 00:38:46 UTC 
Created attachment 885978 [details]
File: environ
Comment 6 Herbert Carl Meyer 2014-04-14 00:38:47 UTC 
Created attachment 885979 [details]
File: limits
Comment 7 Herbert Carl Meyer 2014-04-14 00:38:49 UTC 
Created attachment 885980 [details]
File: maps
Comment 8 Herbert Carl Meyer 2014-04-14 00:38:50 UTC 
Created attachment 885981 [details]
File: open_fds
Comment 9 Herbert Carl Meyer 2014-04-14 00:38:52 UTC 
Created attachment 885982 [details]
File: proc_pid_status
Comment 10 Herbert Carl Meyer 2014-04-14 00:38:53 UTC 
Created attachment 885983 [details]
File: var_log_messages
Comment 11 Tim Waugh 2014-04-14 14:03:38 UTC 
 #5 HPCupsFilter::cleanup at prnt/hpcups/HPCupsFilter.cpp:223

is here:

void HPCupsFilter::cleanup()
{
    if (m_pPrinterBuffer) {
        delete [] m_pPrinterBuffer;  <====
    }


Are you able to reproduce the problem?
Comment 12 Herbert Carl Meyer 2014-04-14 18:28:30 UTC 
No, it has not occurred again (so far).
Comment 13 Tim Waugh 2014-04-15 09:14:17 UTC 
Could you please attach the PPD file for this queue, from the /etc/cups/ppd/ directory?
Comment 14 Jiri Popelka 2014-04-15 10:49:56 UTC 
Looks like double free to me.
I've no idea what actually happened but,
given that cleanup() is called from CancelJob() as well as from closeFilter()
I'd suggest:

    if (m_pPrinterBuffer) {
        delete [] m_pPrinterBuffer;
        m_pPrinterBuffer = NULL;
    }
Comment 15 Tim Waugh 2014-04-15 11:25:10 UTC 
Ah, yes, that will be it. Nice catch.
Comment 16 Herbert Carl Meyer 2014-04-15 12:56:29 UTC 
Created attachment 886481 [details]
PPD file

Bug was caught, here is PPD anyway.
Note You need to log in before you can comment on or make changes to this bug.