Bug 1500619 - [abrt] hplip: sprintf(): hpps killed by SIGABRT
Summary: [abrt] hplip: sprintf(): hpps killed by SIGABRT
Keywords:
Status: CLOSED DUPLICATE of bug 1716582
Alias: None
Product: Fedora
Classification: Fedora
Component: hplip
Version: 29
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Zdenek Dohnal
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:abeb695b9a4025dad613fda2948...
: 1571449 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-10-11 08:23 UTC by Pierre Ossman
Modified: 2019-09-06 07:42 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2019-09-06 07:42:53 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
File: backtrace (16.39 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: cgroup (289 bytes, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: core_backtrace (3.21 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: cpuinfo (1.17 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: dso_list (3.38 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: environ (902 bytes, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: limits (1.29 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: maps (16.46 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: open_fds (247 bytes, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: proc_pid_status (1.23 KB, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
File: var_log_messages (315 bytes, text/plain)
2017-10-11 08:23 UTC, Pierre Ossman 		no flags Details
View All

Description Pierre Ossman 2017-10-11 08:23:05 UTC 
Description of problem:
I tried printing 5 pages out of a 300 page pdf.

Version-Release number of selected component:
hplip-3.17.9-1.fc26

Additional info:
reporter:       libreport-2.9.1
backtrace_rating: 4
cmdline:        M570dn 284 ossman KOMMISSIONENS  DELEGERADE  F RORDNING  (EU)  2016/  1969  -  av  den  12  september  2016  -  om   ndring  av  r dets  f rordning  (EG)  nr 428  /  2009  om  uppr ttande  av  en  gemenskapsordning  f r  kontroll  av  export,   verf ring,  f rmed 1 HPRGBEmulation=DefaultSRGB HPGraphicsNeutralGrays=Black HPPaperSource=AutomaticallySelect noHPEconoMode number-up=1 noCollate HPEdgeControl=Normal HPGeneralHalftone=Smooth PageSize=A4 HPPhotoNeutralGrays=ProcessBlack HPTextNeutralGrays=Black Duplex=None HPEasyColor MediaType=Plain noHPColorAsGray job-uuid=urn:uuid:30805d84-21ec-33eb-6217-49b98939f303 job-originating-host-name=localhost date-time-at-creation= date-time-at-processing= time-at-creation=1507709200 time-at-processing=1507709200
crash_function: sprintf
executable:     /usr/lib/cups/filter/hpps
journald_cursor: s=32b55581e41f4362a0537a0648a8be00;i=2484fc;b=972a186726a04d2481207d030d5fe549;m=1a2d1886ff3;t=55b40e74d5ec8;x=cc955eb29394106c
kernel:         4.12.13-300.fc26.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            4

Truncated backtrace:
Thread no. 1 (2 frames)
 #10 sprintf at /usr/include/bits/stdio2.h:33
 #11 WriteHeader at prnt/hpps/hppsfilter.c:239
Comment 1 Pierre Ossman 2017-10-11 08:23:14 UTC 
Created attachment 1337035 [details]
File: backtrace
Comment 2 Pierre Ossman 2017-10-11 08:23:15 UTC 
Created attachment 1337036 [details]
File: cgroup
Comment 3 Pierre Ossman 2017-10-11 08:23:17 UTC 
Created attachment 1337037 [details]
File: core_backtrace
Comment 4 Pierre Ossman 2017-10-11 08:23:19 UTC 
Created attachment 1337038 [details]
File: cpuinfo
Comment 5 Pierre Ossman 2017-10-11 08:23:21 UTC 
Created attachment 1337039 [details]
File: dso_list
Comment 6 Pierre Ossman 2017-10-11 08:23:22 UTC 
Created attachment 1337040 [details]
File: environ
Comment 7 Pierre Ossman 2017-10-11 08:23:24 UTC 
Created attachment 1337042 [details]
File: limits
Comment 8 Pierre Ossman 2017-10-11 08:23:26 UTC 
Created attachment 1337043 [details]
File: maps
Comment 9 Pierre Ossman 2017-10-11 08:23:27 UTC 
Created attachment 1337044 [details]
File: open_fds
Comment 10 Pierre Ossman 2017-10-11 08:23:29 UTC 
Created attachment 1337045 [details]
File: proc_pid_status
Comment 11 Pierre Ossman 2017-10-11 08:23:31 UTC 
Created attachment 1337046 [details]
File: var_log_messages
Comment 12 Zdenek Dohnal 2017-10-12 17:27:47 UTC 
Hi Pierre,

thank you for reporting this issue. Hpps code doesn't have any checks for length of arrays and uses sprintf, which doesn't check any lengths too - fix will be adding checks and new ways of dealing with long strings.
Comment 13 Zdenek Dohnal 2017-10-20 15:36:06 UTC 
Reported upstream https://bugs.launchpad.net/hplip/+bug/1725342
Comment 14 Zdenek Dohnal 2018-04-25 06:02:31 UTC 
*** Bug 1571449 has been marked as a duplicate of this bug. ***
Comment 15 Jan Kurik 2018-08-14 10:17:23 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora 29 development cycle.
Changing version to '29'.
Comment 16 Zdenek Dohnal 2019-09-06 07:42:53 UTC 

*** This bug has been marked as a duplicate of bug 1716582 ***
Note You need to log in before you can comment on or make changes to this bug.