Bug#972339: armhf: hpcups crashes with free() invalid pointer for some printers

[Didier 'OdyX' Raboud <odyx@debian.org>]

Control: found -1 3.20.5+dfsg0-3
Control: tags -1 +bullseye +upstream

Le vendredi, 16 octobre 2020, 14.23:59 h CEST Didier 'OdyX' Raboud a écrit :
> According to the 3.20.9-3 armhf auutopkgtest run for migration testing;
> https://ci.debian.net/data/autopkgtest/testing/armhf/h/hplip/7460676/log.gz
> 
> hpcups sometimes crashes with free(): invalid pointer. For instance, it
> seems that setting up a 'drv:///hpcups.drv/hp-officejet_pro_1150c.ppd'
> printer will let hpcups crash.
> 
> I'd welcome assistance here as I'm no C gdb fluent person.

So.

This bug can be reproduced by the following suite of  commands on armhf:

  $ export PPD=./prnt/hp-officejet_pro_1150c.ppd.gz
  $ /usr/lib/cups/filter/pdftopdf   1 debian '' 1 '' </usr/share/cups/data/default-testpage.pdf >print_step_1.pdf
  $ /usr/lib/cups/filter/gstoraster 1 debian '' 1 '' <print_step_1.pdf >print_step_2.raster
  $ /usr/lib/cups/filter/hpcups     1 debian '' 1 '' <print_step_2.raster >print_step_3.hpcups

As I have confirmed that this is also _already_ a bug in the current bullseye
version, I'll mark this RC bug as affecting the corresponding versions, and
I'll upload a version without the autopkgtest to unstable, to let this version
migrate.

As this is testable at build-time, I'll add a test for this and upload this to 
experimental. I'll report this to upstream today.

Cheers,

    OdyX

Attachment: signature.asc
Description: This is a digitally signed message part.