[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#939794: ghostscript breaks fig2dev autopkgtest: compare arrow tips with template failed unexpectedly



Hi Paul!

On Mo, 09 Sep 2019, Paul Gevers wrote:

> > Sadly the testsuite generates a filename with /./ in it...
> > From my point of view ../.././data/arrows.eps is a valid file name on
> > Unix systems, so gs should accept it.
> > 
> > Is there a good reason to reject this file name in gs?  Then we have
> > to change the testsuite, otherwise I'd suggest fixing the behavior of
> > gs.

> I'm not sure, but does https://bugs.debian.org/bug=939044#75 help you?

I don't think so.  If I understand the above right, it's about a PS
file including or opening some external files, which may result in
some security issues.

Here it's not the problem of a PS file including some external file.
The problem is, that gs doesn't like to open ../.././data/arrows.eps
given by command line directly.  This may be triggered by some
security improvement of gs, but from my point of view
../.././data/arrows.eps is a valid file name and so gs should convert
this file and not fail on it.

In the meantime I prepared a patch for fig2dev to work around this
issue (not published), but I'm still not sure, weather the behavior of
gs is simply broken here and will lead to fail in other situations,
too.

So I delay publishing my workaround, since I think that gs should fix
the issue (or explain me, why it's behaving correct).

Greetings
Roland

Attachment: signature.asc
Description: PGP signature


Reply to: