pdftopdf crashed with SIGSEGV in cmsGetColorSpace()

Bug #467919 reported by Jeffery Stone
34
This bug affects 5 people
Affects Status Importance Assigned to Milestone
cups (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: cups

$ lsb_release -rd
Description: Ubuntu 9.10
Release: 9.10

$ apt-cache policy cups
cups:
  Installed: 1.4.1-5ubuntu2
  Candidate: 1.4.1-5ubuntu2
  Version table:
 *** 1.4.1-5ubuntu2 0
        500 http://ftp.ussg.iu.edu karmic/main Packages
        100 /var/lib/dpkg/status

---

Expected: I expected the attached pdf to print in draft grayscale per the printer setting.

---

What happened: pdftopdf crashed and nothing printed

ProblemType: Crash
Architecture: i386
CrashCounter: 1
Date: Sat Oct 31 23:30:30 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/lib/cups/filter/pdftopdf
Lpstat:
 device for HP_DeskJet_932C_Black: hp:/usb/DeskJet_930C?serial=CN0CC1R0V4JL
 device for HP_DeskJet_932C_Color: hp:/usb/DeskJet_930C?serial=CN0CC1R0V4JL
 device for PDF: cups-pdf:/
Lsusb:
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
 Bus 002 Device 004: ID 03f0:1204 Hewlett-Packard DeskJet 930c
 Bus 002 Device 003: ID 045e:000b Microsoft Corp. Natural Keyboard Elite
 Bus 002 Device 002: ID 046d:c016 Logitech, Inc. M-UV69a/HP M-UV96 Optical Wheel Mouse
 Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: Dell Inc Dimension E521
NonfreeKernelModules: nvidia
Package: cups 1.4.1-5ubuntu2
Papersize: a4
PpdFiles:
 hp_deskjet_932c_black: HP DeskJet 932C Foomatic/cdj550
 HP_DeskJet_932C_Black: HP Deskjet 932c hpijs, 3.9.8
 PDF: Generic CUPS-PDF Printer
 HP_DeskJet_932C_Color: HP Deskjet 932c hpijs, 3.9.8
ProcCmdLine: root=UUID=733687ec-6bc3-4e49-ba14-94ad8e0db2ed ro pci=noacpi quiet splash vga=792
ProcCmdline: HP_DeskJet_932C_Black 490 jeff AcroUQpDfE 1 Duplex=None\ finishings=3\ media=na_letter_8.5x11in\ number-up=1\ PageSize=Letter\ sides=one-sided\ job-uuid=urn:uuid:7f67759d-95d9-35b7-7d75-d4a0d958e3ef\ job-originating-host-name=localhost
ProcEnviron:
 PATH=(custom, no user)
 LANG=en_US.UTF-8
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SegvAnalysis:
 Segfault happened at: 0x132044 <cmsGetColorSpace+4>: mov 0x8(%eax),%eax
 PC (0x00132044) ok
 source "0x8(%eax)" (0x00000008) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: cups
StacktraceTop:
 cmsGetColorSpace () from /usr/lib/liblcms.so.1
 GfxICCBasedColorSpace::parse(Array*) ()
 GfxColorSpace::parse(Object*) ()
 ?? () from /usr/lib/cups/filter/pdftopdf
 ?? () from /usr/lib/cups/filter/pdftopdf
Title: pdftopdf crashed with SIGSEGV in cmsGetColorSpace()
Uname: Linux 2.6.31-14-generic i686
UserGroups:

dmi.bios.date: 08/02/2007
dmi.bios.vendor: Dell Inc
dmi.bios.version: 1.1.11
dmi.board.name: 0UW457
dmi.board.vendor: Dell Inc
dmi.board.version: A03
dmi.chassis.type: 3
dmi.chassis.vendor: Dell Inc
dmi.modalias: dmi:bvnDellInc:bvr1.1.11:bd08/02/2007:svnDellInc:pnDimensionE521:pvr:rvnDellInc:rn0UW457:rvrA03:cvnDellInc:ct3:cvr:
dmi.product.name: Dimension E521
dmi.sys.vendor: Dell Inc

Related branches

Revision history for this message
Jeffery Stone (jefferystone) wrote :
Revision history for this message
Jeffery Stone (jefferystone) wrote :

I've added the pdf as an attachment.

Revision history for this message
Jeffery Stone (jefferystone) wrote :

I attempted to print the attached pdf using the Printout mode: Normal

There was no crash, but there was no output to the printer.

Revision history for this message
Jeffery Stone (jefferystone) wrote :

Here is the output of applicable /var/log/mesages related (nothing significant around these messages):

Oct 31 23:30:30 kernel: [ 2012.925112] pdftopdf[6112]: segfault at 8 ip 00132044 sp bf896f7c error 4 in liblcms.so.1.0.18[126000+30000]
Oct 31 23:54:26 kernel: [ 3448.706549] pdftopdf[6590]: segfault at 8 ip 009fc044 sp bfbe649c error 4 in liblcms.so.1.0.18[9f0000+30000]
Nov 1 00:02:09 kernel: [ 290.589366] pdftopdf[4828]: segfault at 8 ip 0073c044 sp bff6ce9c error 4 in liblcms.so.1.0.18[730000+30000]

visibility: private → public
Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt (retraced)

StacktraceTop:cmsGetColorSpace () from /usr/lib/liblcms.so.1
GfxICCBasedColorSpace::parse ()
GfxColorSpace::parse () from /usr/lib/libpoppler.so.5
?? () from /usr/lib/cups/filter/pdftopdf
?? () from /usr/lib/cups/filter/pdftopdf

Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt (retraced)
Changed in cups (Ubuntu):
importance: Undecided → Medium
tags: removed: need-i386-retrace
Revision history for this message
mariusno (mariusno) wrote :

Nov 18 23:36:19 cathrine-laptop kernel: [256512.658710] pdftopdf[27295]: segfault at 8 ip 00148044 sp bf8467dc error 4 in liblcms.so.1.0.18[13c000+30000]

Revision history for this message
Don Estberg (destberg1) wrote :

Probably the same thing happened to me. Let me know if you want the core file in /var/crash. I suspect it is not an application problem, since I've gotten cores in several different packages since upgrading to Karmic.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cups - 1.4.2-6

---------------
cups (1.4.2-6) unstable; urgency=medium

  [ Till Kamppeter ]
  * Urgency medium, this only fixes a highly visible crash.
  * debian/local/filters/pdf-filters/pdftopdf/P2PGfx.cxx: Fixed segfault of
    the pdftopdf filter when the input PDF file has ICC-profile-based color
    space inline images. Thanks to Koji Otani for the fix. Fixes:
    LP: #407344, LP: #466119, LP: #467919, LP: #475330, LP: #488752.

  [ Martin Pitt ]
  * debian/rules: Have a failed test suite fail the build on Ubuntu again,
    buildds were fixed. (LP: #447919)
 -- Martin Pitt <email address hidden> Mon, 21 Dec 2009 10:19:44 +0100

Changed in cups (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.