[gs-bugs] [Bug 691328] New: non deterministic behavior in comparefiles/Bug688807

bugzilla-daemon at ghostscript.com bugzilla-daemon at ghostscript.com
Thu May 20 22:27:28 UTC 2010


http://bugs.ghostscript.com/show_bug.cgi?id=691328

           Summary: non deterministic behavior in comparefiles/Bug688807
           Product: Ghostscript
           Version: HEAD
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P4
         Component: Font API
        AssignedTo: ken.sharp at artifex.com
        ReportedBy: henry.stiles at artifex.com
         QAContact: gs-bugs at ghostscript.com
   Estimated Hours: 0.0


the following invalid read is reproducible in the trunk and icc branch, it
might be associated with non deterministic results in the icc branch.

valgrind --auto-run-dsymutil=yes ./gs -sDEVICE=pbmraw -r300
-sOutputFile=/dev/null ~/tests_private/comparefiles/Bug688807.pdf 
==98218== Memcheck, a memory error detector.
==98218== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==98218== Using LibVEX rev 1897, a library for dynamic binary translation.
==98218== Copyright (C) 2004-2009, and GNU GPL'd, by OpenWorks LLP.
==98218== Using valgrind-3.5.0.SVN, a dynamic binary instrumentation framework.
==98218== Copyright (C) 2000-2009, and GNU GPL'd, by Julian Seward et al.
==98218== For more details, rerun with: -v
==98218== 
GPL Ghostscript SVN PRE-RELEASE 8.72 (2010-02-11)
Copyright (C) 2010 Artifex Software, Inc.  All rights reserved.
This software comes with NO WARRANTY: see the file PUBLIC for details.
Processing pages 1 through 2.
Page 1
Font --nostringval-- ( aliased from Verdana-BoldItalic ) is being rendered with
FAPI=FreeType
Font --nostringval-- ( aliased fro==98218== Invalid read of size 1
==98218==    at 0x115D31F: memcpy (mc_replace_strmem.c:482)
==98218==    by 0x4C2AC9: bytes_copy_rectangle (gsbitops.c:657)
==98218==    by 0x2971BA: cmd_put_bits (gxclbits.c:231)
==98218==    by 0x2A94B9: clist_copy_mono (gxclrect.c:632)
==98218==    by 0x509D75: clip_copy_mono (gxclip.c:401)
==98218==    by 0x5147BE: gx_dc_pure_fill_masked (gxdcolor.c:444)
==98218==    by 0x554E21: gx_default_fill_mask (gdevdbit.c:332)
==98218==    by 0x2AE6B0: clist_fill_mask (gxclimag.c:102)
==98218==    by 0x5395A1: gx_image_fill_masked (gximask.c:105)
==98218==    by 0x1BFDB6: fapi_finish_render_aux (zfapi.c:1662)
==98218==    by 0x1BFF67: fapi_finish_render (zfapi.c:1691)
==98218==    by 0x1C27E2: FAPI_do_char (zfapi.c:2328)
==98218==  Address 0x2b340ca is 0 bytes after a block of size 5,146 alloc'd
==98218==    at 0x1159516: malloc (vg_replace_malloc.c:193)
==98218==    by 0x4E79AA: gs_heap_alloc_bytes (gsmalloc.c:182)
==98218==    by 0x4E7BAC: gs_heap_alloc_byte_array (gsmalloc.c:241)
==98218==    by 0x1C3244: FF_alloc (fapi_ft.c:97)
==98218==    by 0x1DA37A: ft_mem_qalloc (ftutil.c:76)
==98218==    by 0x1DA314: ft_mem_alloc (ftutil.c:55)
==98218==    by 0x1DA4D4: ft_mem_qrealloc (ftutil.c:145)
==98218==    by 0x1DA3E1: ft_mem_realloc (ftutil.c:101)
==98218==    by 0x212B48: ft_raster1_render (ftrend1.c:199)
==98218==    by 0x1D5A81: FT_Render_Glyph_Internal (ftobjs.c:3812)
==98218==    by 0x1D5B32: FT_Render_Glyph (ftobjs.c:3852)
==98218==    by 0x1D1ADF: FT_Load_Glyph (ftobjs.c:781)
==98218== 
==98218== Invalid read of size 1
==98218==    at 0x115D326: memcpy (mc_replace_strmem.c:482)
==98218==    by 0x4C2AC9: bytes_copy_rectangle (gsbitops.c:657)
==98218==    by 0x2971BA: cmd_put_bits (gxclbits.c:231)
==98218==    by 0x2A94B9: clist_copy_mono (gxclrect.c:632)
==98218==    by 0x509D75: clip_copy_mono (gxclip.c:401)
==98218==    by 0x5147BE: gx_dc_pure_fill_masked (gxdcolor.c:444)
==98218==    by 0x554E21: gx_default_fill_mask (gdevdbit.c:332)
==98218==    by 0x2AE6B0: clist_fill_mask (gxclimag.c:102)
==98218==    by 0x5395A1: gx_image_fill_masked (gximask.c:105)
==98218==    by 0x1BFDB6: fapi_finish_render_aux (zfapi.c:1662)
==98218==    by 0x1BFF67: fapi_finish_render (zfapi.c:1691)
==98218==    by 0x1C27E2: FAPI_do_char (zfapi.c:2328)
==98218==  Address 0x2b340cb is 1 bytes after a block of size 5,146 alloc'd
==98218==    at 0x1159516: malloc (vg_replace_malloc.c:193)
==98218==    by 0x4E79AA: gs_heap_alloc_bytes (gsmalloc.c:182)
==98218==    by 0x4E7BAC: gs_heap_alloc_byte_array (gsmalloc.c:241)
==98218==    by 0x1C3244: FF_alloc (fapi_ft.c:97)
==98218==    by 0x1DA37A: ft_mem_qalloc (ftutil.c:76)
==98218==    by 0x1DA314: ft_mem_alloc (ftutil.c:55)
==98218==    by 0x1DA4D4: ft_mem_qrealloc (ftutil.c:145)
==98218==    by 0x1DA3E1: ft_mem_realloc (ftutil.c:101)
==98218==    by 0x212B48: ft_raster1_render (ftrend1.c:199)
==98218==    by 0x1D5A81: FT_Render_Glyph_Internal (ftobjs.c:3812)
==98218==    by 0x1D5B32: FT_Render_Glyph (ftobjs.c:3852)
==98218==    by 0x1D1ADF: FT_Load_Glyph (ftobjs.c:781)
==98218== 
==98218== Invalid read of size 1
==98218==    at 0x115D290: memcpy (mc_replace_strmem.c:482)
==98218==    by 0x4C2AC9: bytes_copy_rectangle (gsbitops.c:657)
==98218==    by 0x2971BA: cmd_put_bits (gxclbits.c:231)
==98218==    by 0x2A94B9: clist_copy_mono (gxclrect.c:632)
==98218==    by 0x509D75: clip_copy_mono (gxclip.c:401)
==98218==    by 0x5147BE: gx_dc_pure_fill_masked (gxdcolor.c:444)
==98218==    by 0x554E21: gx_default_fill_mask (gdevdbit.c:332)
==98218==    by 0x2AE6B0: clist_fill_mask (gxclimag.c:102)
==98218==    by 0x5395A1: gx_image_fill_masked (gximask.c:105)
==98218==    by 0x1BFDB6: fapi_finish_render_aux (zfapi.c:1662)
==98218==    by 0x1BFF67: fapi_finish_render (zfapi.c:1691)
==98218==    by 0x1C27E2: FAPI_do_char (zfapi.c:2328)
==98218==  Address 0x1cbd1cb is 1 bytes after a block of size 5,354 alloc'd
==98218==    at 0x1159516: malloc (vg_replace_malloc.c:193)
==98218==    by 0x4E79AA: gs_heap_alloc_bytes (gsmalloc.c:182)
==98218==    by 0x4E7BAC: gs_heap_alloc_byte_array (gsmalloc.c:241)
==98218==    by 0x1C3244: FF_alloc (fapi_ft.c:97)
==98218==    by 0x1DA37A: ft_mem_qalloc (ftutil.c:76)
==98218==    by 0x1DA314: ft_mem_alloc (ftutil.c:55)
==98218==    by 0x1DA4D4: ft_mem_qrealloc (ftutil.c:145)
==98218==    by 0x1DA3E1: ft_mem_realloc (ftutil.c:101)
==98218==    by 0x212B48: ft_raster1_render (ftrend1.c:199)
==98218==    by 0x1D5A81: FT_Render_Glyph_Internal (ftobjs.c:3812)
==98218==    by 0x1D5B32: FT_Render_Glyph (ftobjs.c:3852)
==98218==    by 0x1D1ADF: FT_Load_Glyph (ftobjs.c:781)
==98218== 
==98218== Invalid read of size 1
==98218==    at 0x115D298: memcpy (mc_replace_strmem.c:482)
==98218==    by 0x4C2AC9: bytes_copy_rectangle (gsbitops.c:657)
==98218==    by 0x2971BA: cmd_put_bits (gxclbits.c:231)
==98218==    by 0x2A94B9: clist_copy_mono (gxclrect.c:632)
==98218==    by 0x509D75: clip_copy_mono (gxclip.c:401)
==98218==    by 0x5147BE: gx_dc_pure_fill_masked (gxdcolor.c:444)
==98218==    by 0x554E21: gx_default_fill_mask (gdevdbit.c:332)
==98218==    by 0x2AE6B0: clist_fill_mask (gxclimag.c:102)
==98218==    by 0x5395A1: gx_image_fill_masked (gximask.c:105)
==98218==    by 0x1BFDB6: fapi_finish_render_aux (zfapi.c:1662)
==98218==    by 0x1BFF67: fapi_finish_render (zfapi.c:1691)
==98218==    by 0x1C27E2: FAPI_do_char (zfapi.c:2328)
==98218==  Address 0x1cbd1ca is 0 bytes after a block of size 5,354 alloc'd
==98218==    at 0x1159516: malloc (vg_replace_malloc.c:193)
==98218==    by 0x4E79AA: gs_heap_alloc_bytes (gsmalloc.c:182)
==98218==    by 0x4E7BAC: gs_heap_alloc_byte_array (gsmalloc.c:241)
==98218==    by 0x1C3244: FF_alloc (fapi_ft.c:97)
==98218==    by 0x1DA37A: ft_mem_qalloc (ftutil.c:76)
==98218==    by 0x1DA314: ft_mem_alloc (ftutil.c:55)
==98218==    by 0x1DA4D4: ft_mem_qrealloc (ftutil.c:145)
==98218==    by 0x1DA3E1: ft_mem_realloc (ftutil.c:101)
==98218==    by 0x212B48: ft_raster1_render (ftrend1.c:199)
==98218==    by 0x1D5A81: FT_Render_Glyph_Internal (ftobjs.c:3812)
==98218==    by 0x1D5B32: FT_Render_Glyph (ftobjs.c:3852)
==98218==    by 0x1D1ADF: FT_Load_Glyph (ftobjs.c:781)

-- 
Configure bugmail: http://bugs.ghostscript.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the gs-bugs mailing list