[Secure-testing-team] Bug#693388: ghostscript: enters an infinite loop on some PDF files, probably due to gs_2_colors patch

[Steinar H. Gunderson]

Package: ghostscript
Version: 8.71~dfsg2-9
Severity: grave

Hi,

We're having problem with gs going into infinite loops when people print some given
PDFs from CUPS, so after a few days you have fifteen gs processes that use 100%
CPU and the rest of your system doesn't really work too well.

The command line is:

gs -dFirstPage=1 -q -dBATCH -dPARANOIDSAFER -dQUIET -dNOPAUSE -sDEVICE=ijs -sIjsServer=hpijs -dDEVICEWIDTHPOINTS=612 -dDEVICEHEIGHTPOINTS=792 -sDeviceManufacturer=HEWLETT-PACKARD -sDeviceModel=HP\ LaserJet -dDuplex=false -r600 -sIjsParams=Quality:Quality=0,Quality:ColorMode=0,Quality:MediaType=0,Quality:PenSet=0,PS:MediaPosition=7 -dIjsUseOutputFD -sOutputFile=/dev/null foomatic-IU6jZL

I am unfortunately not at a liberty to include the example PDF itself
(foomatic-IU6jZL) in the BTS, as it contains non-public information;
please send me private email for a copy.

This does not happen with upstream 8.71. If I build the package without
0940_Merge_gs_2_colors_branch.patch, the problem goes away and the job completes
in 5-6 seconds. It happens every time for me with this PDF and command-line flags.

-- System Information:
Debian Release: 6.0.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.5.4 (SMP w/4 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ghostscript depends on:
ii  debconf [de 1.5.36.1                     Debian configuration management sy
ii  debianutils 3.4                          Miscellaneous utilities specific t
ii  gsfonts     1:8.11+urwcyr1.0.7~pre44-4.2 Fonts for the Ghostscript interpre
ii  libc6       2.11.3-4                     Embedded GNU C Library: Shared lib
ii  libgs8      8.71~dfsg2-9                 The Ghostscript PostScript/PDF int

ghostscript recommends no packages.

ghostscript suggests no packages.

-- debconf-show failed