[gs-bugs] [Bug 698741] - Ghostscript - Segmentation fault with J11.ps

[b***@artifex.com]

http://bugs.ghostscript.com/show_bug.cgi?id=698741

Bug ID: 698741
Summary: Segmentation fault with J11.ps
Product: Ghostscript
Version: master
Hardware: Macintosh
OS: All
Status: UNCONFIRMED
Severity: critical
Priority: P4
Component: General
Assignee: ***@artifex.com
Reporter: ***@artifex.com
QA Contact: gs-***@ghostscript.com
Word Size: ---

J11.ps produces a segmentation fault with the following command line on master:

./bin/gs -DSCANCONVERTERTYPE=2 -r600 -dGrayValues=2 -sDEVICE=plank
-dMaxPatternBitmap=20000000 -dInterpolateControl=4 -dLeadingEdge=3 -Z: -dMa\
xBitmap=1500m -dBGPrint=false -dNumRenderingThreads=0 -dNOCIE -dQUIET
-sOutputFile=/dev/null -dBATCH -dNOPAUSE -sBandListStorage=memory -dBuff\
erSpace=16m ../performance_tests/JEITA/jeita_ps/J11.ps

This can be reproduced at the latest commit in master:
143a892226b79676f5f8853f63532f9e6f4e8f5e dated Nov. 13.

[b***@artifex.com]

http://bugs.ghostscript.com/show_bug.cgi?id=698741

Ray Johnston <***@artifex.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
Priority|P4 |P1
Status|UNCONFIRMED |CONFIRMED
Severity|critical |blocker
Ever confirmed|0 |1

--- Comment #1 from Ray Johnston <***@artifex.com> ---
I could not reproduce this on a 64-bit build, but I do get a segfault with a
32-bit build on Windows. Note that on 64-bit, it produces no output file and
-Z: never shows "Outputpage start" so that also has a problem, just not a
segfault.

I elevated the priority to P1 and made it blocker.

It dies when trying to free an object that is in its own clump:
gs_free_object(mem, penum->line, "image line");
with a "corruption of the heap".

Seems like a MEMENTO build will show who is polluting memory.

[b***@artifex.com]

http://bugs.ghostscript.com/show_bug.cgi?id=698741

Chris Liddell (chrisl) <***@artifex.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |***@artifex.com

--- Comment #2 from Chris Liddell (chrisl) <***@artifex.com> ---
I strongly suspect the solution is:
http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git;a=commitdiff;h=0a37b95421


I note that page 9 of J11.ps is coming out blank (this is true with or without
the above change) - I'll open a separate bug for that shortly.

[b***@artifex.com]

http://bugs.ghostscript.com/show_bug.cgi?id=698741

Chris Liddell (chrisl) <***@artifex.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
Assignee|***@artifex.com |***@artifex.com
Status|CONFIRMED |IN_PROGRESS

[b***@artifex.com]

http://bugs.ghostscript.com/show_bug.cgi?id=698741

Chris Liddell (chrisl) <***@artifex.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|IN_PROGRESS |RESOLVED

--- Comment #3 from Chris Liddell (chrisl) <***@artifex.com> ---
Fixed in:
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8d0ca41749