Bug#887661: ghostscript: segfault in txtwrite_process_plain_text()

[Jakub Wilk <jwilk@jwilk.net>]

Package: ghostscript
Version: 9.22~dfsg-1

Ghostscript crashes on the attached file:

  $ gs -q -dSAFER -sDEVICE=txtwrite -o - djvu.ps
  Segmentation fault

Backtrace:

  #0  txtwrite_process_plain_text (pte=0x55cad6040ed0) at ./devices/vector/gdevtxtw.c:1940
  #1  textw_text_process (pte=0x55cad6040ed0) at ./devices/vector/gdevtxtw.c:2185
  #2  0x00007f4c7f5f7e8b in op_show_continue_pop (i_ctx_p=i_ctx_p@entry=0x55cad5d35e00, npop=npop@entry=1) at ./psi/zchar.c:584
  #3  0x00007f4c7f5b5595 in zglyphshow (i_ctx_p=0x55cad5d35e00) at ./psi/zcharx.c:69
  #4  0x00007f4c7f5d9bb3 in interp (pi_ctx_p=pi_ctx_p@entry=0x55cad5ce6e40, pref=<optimized out>, perror_object=perror_object@entry=0x7fff0e6ced60) at ./psi/interp.c:1207
  #5  0x00007f4c7f5db245 in gs_call_interp (perror_object=0x7fff0e6ced60, pexit_code=0x7fff0e6ced5c, user_errors=1, pref=0x7fff0e6cebf0, pi_ctx_p=<optimized out>) at ./psi/interp.c:517
  #6  gs_interpret (pi_ctx_p=<optimized out>, pref=pref@entry=0x7fff0e6ced20, user_errors=1, pexit_code=0x7fff0e6ced5c, perror_object=<optimized out>) at ./psi/interp.c:474
  #7  0x00007f4c7f5cf715 in gs_main_interpret (perror_object=<optimized out>, pexit_code=<optimized out>, user_errors=<optimized out>, pref=0x7fff0e6ced20, minst=<optimized out>) at ./psi/imain.c:235
  #8  gs_main_run_string_end (minst=<optimized out>, user_errors=<optimized out>, pexit_code=<optimized out>, perror_object=<optimized out>) at ./psi/imain.c:651
  #9  0x00007f4c7f5d11d9 in run_string (minst=minst@entry=0x55cad5ce6da0, str=str@entry=0x55cad5ddfe10 "<646a76752e7073>.runfile", options=options@entry=3) at ./psi/imainarg.c:983
  #10 0x00007f4c7f5d134b in runarg (minst=0x55cad5ce6da0, pre=0x7f4c7f6bcf65 "", arg=<optimized out>, post=0x7f4c7f6daffc ".runfile", options=3) at ./psi/imainarg.c:973
  #11 0x00007f4c7f5d2bd0 in gs_main_init_with_args (minst=0x55cad5ce6da0, argc=7, argv=0x7fff0e6cf958) at ./psi/imainarg.c:238
  #12 0x000055cad3f88a91 in main (argc=7, argv=0x7fff0e6cf958) at ./psi/dxmainc.c:86


-- System Information:
Architecture: amd64

Versions of packages ghostscript depends on:
ii  libc6        2.26-4
ii  libgs9       9.22~dfsg-1
ii  debconf      1.5.65

--
Jakub Wilk

Attachment: djvu.ps
Description: PostScript document