Description of problem: After trying to get a preview from the multipage loader of my HP OfficeJet Pro 8600 Pro, the scanner block and XSane report an I/O error. I restarted the scanner (switch off/on), then retried to get a preview with no document in the feeder. Then XSane window disappeared. Version-Release number of selected component: xsane-0.998-12.fc17 Additional info: libreport version: 2.0.16 abrt_version: 2.0.16 backtrace_rating: 4 cmdline: xsane crash_function: get_interface kernel: 3.6.2-4.fc17.x86_64 truncated backtrace: :Thread no. 1 (10 frames) : #0 get_interface at io/hpmud/musb.c:407 : #1 musb_comp_channel_open at io/hpmud/musb.c:1540 : #2 musb_channel_open at io/hpmud/musb.c:1357 : #3 http_open at scan/sane/http.c:298 : #4 bb_is_paper_in_adf at scan/sane/bb_ledm.c:811 : #5 ledm_start at scan/sane/ledm.c:800 : #6 preview_scan_start at ../../src/xsane-preview.c:2000 : #7 preview_scan at ../../src/xsane-preview.c:5125 : #8 _g_closure_invoke_va at gclosure.c:840 : #11 gtk_real_button_released at gtkbutton.c:1725
Created attachment 633237 [details] File: core_backtrace
Created attachment 633238 [details] File: environ
Created attachment 633239 [details] File: backtrace
Created attachment 633240 [details] File: limits
Created attachment 633241 [details] File: cgroup
Created attachment 633242 [details] File: smolt_data
Created attachment 633243 [details] File: maps
Created attachment 633244 [details] File: dso_list
Created attachment 633245 [details] File: proc_pid_status
Created attachment 633246 [details] File: build_ids
Created attachment 633247 [details] File: open_fds
Created attachment 633248 [details] File: var_log_messages
The crash happens in libhpmud.so at io/hpmud/musb.c:407: --- 8< --- libusb_get_device_descriptor (dev, &device_desc); for (conf = 0 ; conf < device_desc.bNumConfigurations; conf++) { libusb_get_config_descriptor(dev, conf, &confptr); for (iface = 0, ifaceptr = confptr->interface; iface < confptr->bNumInterfaces; iface++, ifaceptr++) --- >8 --- --> confptr which is NULL gets dereferenced. According to libusb API documentation[1], libusb_get_config_descriptor() doesn't write confptr if an error occurs which is indicated by a non-zero return code (which isn't checked, likewise for libusb_get_device_descriptor() 3 lines above). Changing component to hplip. [1]: http://libusb.sourceforge.net/api-1.0/group__desc.html
reported upstream as https://bugs.launchpad.net/hplip/+bug/1073650
Fix has been commited upstream.
hplip-3.12.11-1.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/hplip-3.12.11-1.fc18
hplip-3.12.11-1.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/hplip-3.12.11-1.fc17
Package hplip-3.12.11-1.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing hplip-3.12.11-1.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-19173/hplip-3.12.11-1.fc18 then log in and leave karma (feedback).
hplip-3.12.11-1.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.
hplip-3.12.11-1.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.