[Poppler-bugs] [Bug 37190] New: pdftops crashes on solaris with memory corruption

Fri May 13 21:23:06 PDT 2011

https://bugs.freedesktop.org/show_bug.cgi?id=37190

           Summary: pdftops crashes on solaris with memory corruption
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: general
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: williambader at hotmail.com

I am using gcc-3.4.6 on Solaris 10 on a sun4u sparc.

./pdftops output-pdftopsbug.pdf output-pdftopsbug.ps
fails with a memory error.

The test pdf file is temporarily at
http://williambader.com/output-pdftopsbug.pdf

The poppler in git on 13 May 11 gives the traceback

#0  0xfec548d4 in realfree () from /lib/libc.so.1
#1  0xfec55104 in cleanfree () from /lib/libc.so.1
#2  0xfec5425c in _malloc_unlocked () from /lib/libc.so.1
#3  0xfec5414c in malloc () from /lib/libc.so.1
#4  0xff1b7734 in operator new () from /usr/local/lib/libstdc++.so.6
#5  0x0020760c in GfxState::copy (this=0x2d6788) at GfxState.h:1298
#6  0x001743cc in GfxState::save (this=0x2d6788) at GfxState.cc:5844
#7  0x001420f4 in Gfx::saveState (this=0x2cc2c8) at Gfx.cc:4974
#8  0x00129814 in Gfx::opSave (this=0x2cc2c8, args=0xffbfd3a0, numArgs=0) at
Gfx.cc:899
#9  0x0012945c in Gfx::execOp (this=0x2cc2c8, cmd=0xffbfd5b0, args=0xffbfd3a0,
numArgs=0) at Gfx.cc:851
#10 0x00128be0 in Gfx::go (this=0x2cc2c8, topLevel=true) at Gfx.cc:711
#11 0x001289b0 in Gfx::display (this=0x2cc2c8, obj=0xffbfd710, topLevel=true)
at Gfx.cc:678
#12 0x0019cde4 in Page::displaySlice (this=0x2cb2d8, out=0x28ce70, hDPI=72,
vDPI=72, rotate=0, useMediaBox=false, crop=true, sliceX=-1, sliceY=-1,
    sliceW=-1, sliceH=-1, printing=true, catalog=0x28df30, abortCheckCbk=0,
abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
    annotDisplayDecideCbkData=0x0) at Page.cc:485
#13 0x0008b350 in PSOutputDev::checkPageSlice (this=0x28dc30, page=0x2cb2d8,
rotateA=0, useMediaBox=false, crop=true, sliceX=-1, sliceY=-1, sliceW=-1,
    sliceH=-1, printing=true, catalog=0x28df30, abortCheckCbk=0,
abortCheckCbkData=0x0) at PSOutputDev.cc:3001
#14 0x0019ccc4 in Page::displaySlice (this=0x2cb2d8, out=0x28dc30, hDPI=72,
vDPI=72, rotate=0, useMediaBox=false, crop=true, sliceX=-1, sliceY=-1,
    sliceW=-1, sliceH=-1, printing=true, catalog=0x28df30, abortCheckCbk=0,
abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
    annotDisplayDecideCbkData=0x0) at Page.cc:469
#15 0x0019c89c in Page::display (this=0x2cb2d8, out=0x28dc30, hDPI=72, vDPI=72,
rotate=0, useMediaBox=false, crop=true, printing=true,
    catalog=0x28df30, abortCheckCbk=0, abortCheckCbkData=0x0,
annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:412
#16 0x00065ec8 in PDFDoc::displayPage (this=0x291978, out=0x28dc30, page=3,
hDPI=72, vDPI=72, rotate=0, useMediaBox=false, crop=true, printing=true,
    abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
annotDisplayDecideCbkData=0x0) at PDFDoc.cc:433
#17 0x00065fa0 in PDFDoc::displayPages (this=0x291978, out=0x28dc30,
firstPage=1, lastPage=4, hDPI=72, vDPI=72, rotate=0, useMediaBox=false,
crop=true,
    printing=true, abortCheckCbk=0, abortCheckCbkData=0x0,
annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at PDFDoc.cc:450
#18 0x0005afe0 in main (argc=3, argv=0xffbfde4c) at pdftops.cc:384

pdftops in poppler-0.17.0 gives

#0  0xfec548d4 in realfree () from /lib/libc.so.1
#1  0xfec55104 in cleanfree () from /lib/libc.so.1
#2  0xfec5425c in _malloc_unlocked () from /lib/libc.so.1
#3  0xfec5414c in malloc () from /lib/libc.so.1
#4  0xff1b7734 in operator new () from /usr/local/lib/libstdc++.so.6
#5  0x000eb438 in GfxState::save (this=0x1fa5e0) at GfxState.h:1298
#6  0x000c3918 in Gfx::saveState (this=0x1f0120) at Gfx.cc:4974
#7  0x000bba0c in Gfx::execOp (this=0x1f0120, cmd=0xffbfd890, args=0x0,
numArgs=0) at Gfx.cc:851
#8  0x000c4858 in Gfx::go (this=0x1f0120, topLevel=true) at Gfx.cc:711
#9  0x000c4c90 in Gfx::display (this=0x1f0120, obj=0xffbfd9d8, topLevel=true)
at Gfx.cc:678
#10 0x00107330 in Page::displaySlice (this=0x1ef130, out=0x1b0cc8, hDPI=72,
vDPI=72, rotate=0, useMediaBox=false, crop=false, sliceX=-1, sliceY=-1,
    sliceW=-1, sliceH=-1, printing=false, catalog=0x1b1d88, abortCheckCbk=0,
abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
    annotDisplayDecideCbkData=0x0) at Page.cc:486
#11 0x00063734 in PSOutputDev::checkPageSlice (this=0x1b1a88, page=0x1ef130,
rotateA=0, useMediaBox=false, crop=true, sliceX=-1, sliceY=-1, sliceW=-1,
    sliceH=-1, printing=true, catalog=0x1b1d88, abortCheckCbk=0,
abortCheckCbkData=0x0) at PSOutputDev.cc:2999
#12 0x001071b0 in Page::displaySlice (this=0x1ef130, out=0x1b1a88, hDPI=72,
vDPI=72, rotate=0, useMediaBox=false, crop=false, sliceX=-1, sliceY=-1,
    sliceW=-1, sliceH=-1, printing=false, catalog=0x1b1d88, abortCheckCbk=0,
abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
    annotDisplayDecideCbkData=0x0) at Page.cc:470
#13 0x001073d0 in Page::display (this=0x1ef130, out=0x1b1a88, hDPI=72, vDPI=72,
rotate=0, useMediaBox=false, crop=false, printing=false, catalog=0x0,
    abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
annotDisplayDecideCbkData=0x0) at Page.cc:412
#14 0x0004ed58 in PDFDoc::displayPages (this=0x1b57d0, out=0x1b1a88,
firstPage=3, lastPage=4, hDPI=72, vDPI=72, rotate=0, useMediaBox=false,
    crop=false, printing=false, abortCheckCbk=0, abortCheckCbkData=0x0,
annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at PDFDoc.cc:450
#15 0x00046a1c in main (argc=3, argv=0xffbfde84) at pdftops.cc:384

The same files produces no warnings when run on Linux with pdftops under
valgrind.
I did all of these tests with a static build and with -g (to get line numbers
in the traceback) and -O0 (to reduce the chances that it is a gcc bug).  The
default dynamic link version runs the same as the static version but it is
harder to debug.
I have a number of test files, and the Solaris pdftops works on everything but
this file.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.