libcups crash in ppd.c

[michaelrsweet]

Version: 1.2.11
CUPS.org User: twaugh.redhat

The attached PPD causes a segmentation fault when opened using ppdOpenFile() from libcups.

On Fedora it can be shown by just starting cupsd from the command line with this PPD in use for a printer, or like this:

python -c 'import cups; cups.PPD("XeroxPhaser6120.ppd")'
#0 0x4a911038 in strcmp () from /lib/libc.so.6
#1 0x00146be3 in ppd_get_option (group=0x884c24c,

name=0xbfd5ea71 "PageRegion") at ppd.c:2522

#2 0x0014a3ec in ppdOpen2 (fp=0x883ddb8) at ppd.c:1224
#3 0x0014bafd in ppdOpenFile (filename=0xb7eea334 "XeroxPhaser6120.ppd")

at ppd.c:2026

#4 0x0011d42b in ?? () from /usr/lib/python2.5/site-packages/cups.so
#5 0x4ae7ba05 in ?? () from /usr/lib/libpython2.5.so.1.0
#6 0x4ae32127 in PyObject_Call () from /usr/lib/libpython2.5.so.1.0
#7 0x4aeae561 in PyEval_EvalFrameEx () from /usr/lib/libpython2.5.so.1.0
#8 0x4aeb263f in PyEval_EvalCodeEx () from /usr/lib/libpython2.5.so.1.0
#9 0x4aeb26c3 in PyEval_EvalCode () from /usr/lib/libpython2.5.so.1.0
#10 0x4aecc3b6 in ?? () from /usr/lib/libpython2.5.so.1.0
#11 0x4aecc611 in PyRun_StringFlags () from /usr/lib/libpython2.5.so.1.0
#12 0x4aecd903 in PyRun_SimpleStringFlags () from /usr/lib/libpython2.5.so.1.0
#13 0x4aed77fb in Py_Main () from /usr/lib/libpython2.5.so.1.0
#14 0x080485b2 in main ()

Original bug report:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186231

[michaelrsweet]

CUPS.org User: twaugh.redhat

Hmm, this won't let me add the file here. Well, it's in the tarball here:

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=186231#c6

[michaelrsweet]

CUPS.org User: mike

Please try against the patch for STR #2408 - I'd guess the problem is the same.

(file attachment problem should be resolved now - side-effect of the server move...)

[michaelrsweet]

CUPS.org User: twaugh.redhat

Yes, that fixes it. Thanks!

[michaelrsweet]

CUPS.org User: mike

Just got a separate STR with that PPD file - same problem as #2408, already fixed.