Cuneiform for Linux

buffer overflow detected

Bug #369233 reported by nucleo on 2009-04-29

This bug affects 4 people

Affects		Status	Importance	Assigned to	Milestone
	Cuneiform for Linux	New	Undecided	Unassigned

Bug Description

On some tif images Cuneiform rev 389 crashes:

$ cuneiform Image3.tif
Cuneiform for Linux 0.6.0
*** buffer overflow detected ***: cuneiform ======= Backtrace: =========
/lib/libc.so.6(__fortify_so.6[0x30b1a30]
/usr/lib/libfon32.so[0xe334a8]
libfon32.so[0xe33cc2]
libfon32.so(FONRecog2Glulibpass2.so[0x2376aa]
libpass2.so[0x2378d8]
libpass2.so[0x23a50b]
libpass2.so(p2_proc+librstr.so[0xce1086]
librstr.so(RSTRRecognizlibrstr.so(RSTRRecognizlibrstr.so(RSTR_libpuma.so[0x5e1e55]
libpuma.so(PUMA_0x804a985]
/lib/libc.so.6(__libc_start_0x80497d1]
======= Memory map: ========
00110000-0011c000 r-xp 00000000 08:04 5012230 0011c000-0011f000 rw-p 0000c000 08:04 5012230 0011f000-00121000 rw-p 0011f000 00:00 0
00121000-00129000 r-xp 00000000 08:04 5012231 00129000-0012a000 rw-p 00008000 08:04 5012231 0012a000-0014c000 r-xp 00000000 08:04 5012235 0014c000-0014d000 rw-p 00022000 08:04 5012235 0014d000-00152000 rw-p 0014d000 00:00 0
00152000-0016a000 r-xp 00000000 08:04 5012224 0016a000-0016b000 rw-p 00017000 08:04 5012224 0016b000-0016c000 rw-p 0016b000 00:00 0
0016c000-0017d000 r-xp 00000000 08:04 5012225 0017d000-0017e000 rw-p 00010000 08:04 5012225 0017e000-0018a000 r-xp 00000000 08:04 5012239 0018a000-0018b000 rw-p 0000b000 08:04 5012239 0018b000-001d4000 rw-p 0018b000 00:00 0
001d4000-001de000 r-xp 00000000 08:04 4992827 001de000-001df000 rw-p 0000a000 08:04 4992827 001df000-001e1000 rw-p 001df000 00:00 0
001e1000-001ee000 r-xp 00000000 08:04 5012202 001ee000-001ef000 rw-p 0000d000 08:04 5012202 001ef000-001f3000 r-xp 00000000 08:04 5012222 001f3000-001f4000 rw-p 00003000 08:04 5012222 001f4000-001fd000 r-xp 00000000 08:04 5012240 001fd000-001fe000 rw-p 00009000 08:04 5012240 001fe000-00201000 r-xp 00000000 08:04 5012233 00201000-00202000 rw-p 00003000 08:04 5012233 00202000-00203000 rw-p 00202000 00:00 0
00203000-00210000 r-xp 00000000 08:04 5012232 00210000-00211000 rw-p 0000c000 08:04 5012232 00211000-00228000 rw-p 00211000 00:00 0
00228000-00230000 r-xp 00000000 08:04 5012201 00230000-00231000 rw-p 00008000 08:04 5012201 00231000-0023f000 r-xp 00000000 08:04 5012389 0023f000-00240000 rw-p 0000e000 08:04 5012389 00240000-00243000 rw-p 00240000 00:00 0
00243000-00244000 r-xp 00000000 08:04 5012203 00244000-00245000 rw-p 00000000 08:04 5012203 00246000-0024c000 r-xp 00000000 08:04 5012236 0024c000-0024d000 rw-p 00005000 08:04 5012236 0024d000-0025a000 r-xp 00000000 08:04 5012221 0025a000-0025c000 rw-p 0000d000 08:04 5012221 0025c000-0027c000 rw-p 0025c000 00:00 0
0027c000-00283000 r-xp 00000000 08:04 5012234 00283000-00284000 rw-p 00007000 08:04 5012234 00284000-00289000 r-xp 00000000 08:04 4983077 00289000-0028a000 rw-p 00004000 08:04 4983077 0028b000-00294000 r-xp 00000000 08:04 5012220 00294000-00295000 rw-p 00008000 08:04 5012220 00295000-002da000 rw-p 00295000 00:00 0
002da000-002f9000 r-xp 00000000 08:04 5012459 002f9000-002fa000 rw-p 0001e000 08:04 5012459 002fa000-002fc000 rw-p 002fa000 00:00 0
002fc000-00315000 r-xp 00000000 08:04 5012384 00315000-00316000 rw-p 00018000 08:04 5012384 00316000-0031b000 rw-p 00316000 00:00 0
0031b000-00323000 r-xp 00000000 08:04 5012205 00323000-00324000 rw-p 00008000 08:04 5012205 00324000-00335000 rw-p 00324000 00:00 0
00335000-00337000 r-xp 00000000 08:04 131623 00337000-00338000 rw-p 00001000 08:04 131623 00338000-003a6000 r-xp 00000000 08:04 5012193 003a6000-003a9000 rw-p 0006d000 08:04 5012193 003a9000-003b2000 r-xp 00000000 08:04 5012383 003b2000-003b3000 rw-p 00009000 08:04 5012383 003b3000-003f6000 rw-p 003b3000 00:00 0
003f6000-003fa000 r-xp 00000000 08:04 5012242 003fa000-003fb000 rw-p 00003000 08:04 5012242 003fb000-004c7000 r-xp 00000000 08:04 132454 004c7000-004c9000 rw-p 000cc000 08:04 132454 004c9000-004d4000 r-xp 00000000 08:04 5012208 004d4000-004d5000 rw-p 0000b000 08:04 5012208 004d5000-00555000 rw-p 004d5000 00:00 0
00555000-00556000 r-xp 00000000 08:04 131849 00556000-00557000 rw-p 00000000 08:04 131849 00557000-00562000 r-xp 00000000 08:04 5012228 00562000-00563000 rw-p 0000a000 08:04 5012228 00563000-0057d000 r-xp 00000000 08:04 5012206 0057d000-00581000 rw-p 00019000 08:04 5012206 00581000-00584000 rw-p 00581000 00:00 0
00587000-005a7000 r-xp 00000000 08:04 4981418 005a8000-005a9000 r--p 00020000 08:04 4981418 005a9000-005aa000 rw-p 00021000 08:04 4981418 005aa000-005b3000 r-xp 00000000 08:04 5012382 005b3000-005b4000 rw-p 00009000 08:04 5012382 005b4000-005bb000 r-xp 00000000 08:04 5012217 005bb000-005bc000 rw-p 00006000 08:04 5012217 005bc000-005bf000 rw-p 005bc000 00:00 0
005bf000-005cc000 r-xp 00000000 08:04 4981449 005cc000-005cd000 rw-p 0000c000 08:04 4981449 005cd000-005d3000 r-xp 00000000 08:04 132407 005d3000-005d4000 rw-p 00006000 08:04 132407 005d7000-005ea000 r-xp 00000000 08:04 5012216 005ea000-005ec000 rw-p 00012000 08:04 5012216 005ec000-005fc000 rw-p 005ec000 00:00 0
005fc000-00600000 r-xp 00000000 08:04 5012212 00600000-00601000 rw-p 00003000 08:04 5012212 00601000-00668000 rw-p 00601000 00:00 0
00668000-0068f000 r-xp 00000000 08:04 4981529 0068f000-00690000 r--p 00026000 08:04 4981529 00690000-00691000 rw-p 00027000 08:04 4981529 00691000-0069e000 r-xp 00000000 08:04 5012200 0069e000-0069f000 rw-p 0000c000 08:04 5012200 0069f000-006a3000 r-xp 00000000 08:04 5012388 006a3000-006a4000 rw-p 00004000 08:04 5012388 006a4000-006e5000 rw-p 006a4000 00:00 0
006e5000-006fb000 r-xp 00000000 08:04 4983764 006fb000-006fc000 r--p 00015000 08:04 4983764 006fc000-006fd000 rw-p 00016000 08:04 4983764 006fd000-006ff000 rw-p 006fd000 00:00 0
006ff000-00721000 r-xp 00000000 08:04 131570 00721000-00722000 rw-p 00021000 08:04 131570 00723000-008ca000 r-xp 00000000 08:04 132452 008ca000-00913000 rw-p 001a6000 08:04 132452 00913000-0092b000 rw-p 00913000 00:00 0
0092b000-00960000 r-xp 00000000 08:04 4983105 00960000-00962000 rw-p 00034000 08:04 4983105 00962000-00964000 rw-p 00962000 00:00 0
00964000-00992000 r-xp 00000000 08:04 4981953 00992000-00993000 rw-p 0002e000 08:04 4981953 00993000-0099a000 r-xp 00000000 08:04 131613 0099a000-0099b000 rw-p 00006000 08:04 131613 0099b000-0099e000 r-xp 00000000 08:04 4982664 0099e000-0099f000 rw-p 00003000 08:04 4982664 009a2000-009b4000 r-xp 00000000 08:04 5012229 009b4000-009b5000 rw-p 00011000 08:04 5012229 009b5000-009c4000 r-xp 00000000 08:04 131885 009c4000-009c5000 rw-p 0000e000 08:04 131885 009c5000-009d5000 r-xp 00000000 08:04 4981531 009d5000-009d6000 rw-p 00010000 08:04 4981531 009d6000-009e9000 r-xp 00000000 08:04 4980835 009e9000-009ea000 rw-p 00012000 08:04 4980835 009ec000-009fd000 r-xp 00000000 08:04 5012241 009fd000-009fe000 rw-p 00011000 08:04 5012241 009fe000-00a03000 rw-p 009fe000 00:00 0
00a03000-00a1a000 r-xp 00000000 08:04 131606 00a1a000-00a1b000 rw-p 00016000 08:04 131606 00a1b000-00a1d000 rw-p 00a1b000 00:00 0
00a1d000-00a38000 r-xp 00000000 08:04 131859 00a38000-00a39000 rw-p 0001b000 08:04 131859 00a39000-00a3e000 r-xp 00000000 08:04 131629 00a3e000-00a3f000 rw-p 00004000 08:04 131629 00a3f000-00a52000 r-xp 00000000 08:04 5012238 00a52000-00a53000 rw-p 00012000 08:04 5012238 00a53000-00a58000 r-xp 00000000 08:04 5112564 00a58000-00a59000 rw-p 00004000 08:04 5112564 00a5c000-00a5d000 r-xp 00000000 08:04 5012387 00a5d000-00a5e000 rw-p 00000000 08:04 5012387 00a5e000-00a9e000 rw-p 00a5e000 00:00 0
00a9e000-00ac3000 r-xp 00000000 08:04 4983866 00ac3000-00ac5000 rw-p 00024000 08:04 4983866 00ac5000-00acf000 r-xp 00000000 08:04 5112694 00acf000-00ad0000 rw-p 00009000 08:04 5112694 00ad1000-00afc000 r-xp 00000000 08:04 5012385 00afc000-00afd000 rw-p 0002a000 08:04 5012385 00afd000-00afe000 rw-p 00afd000 00:00 0
00afe000-00b55000 r-xp 00000000 08:04 131363 00b55000-00b57000 rw-p 00057000 08:04 131363 00b6f000-00b98000 r-xp 00000000 08:04 5012223 00b98000-00b99000 rw-p 00029000 08:04 5012223 00b99000-00b9d000 rw-p 00b99000 00:00 0
00b9d000-00bf2000 r-xp 00000000 08:04 131895 00bf2000-00bf5000 rw-p 00055000 08:04 131895 00bf5000-00bf6000 rw-p 00bf5000 00:00 0
00c0d000-00c35000 r-xp 00000000 08:04 5012219 00c35000-00c36000 rw-p 00027000 08:04 5012219 00c36000-00c3c000 rw-p 00c36000 00:00 0
00c3c000-00d4a000 r-xp 00000000 08:04 5012237 00d4a000-00d53000 rw-p 0010d000 08:04 5012237 00d53000-00dd7000 rw-p 00d53000 00:00 0
00ded000-00e06000 r-xp 00000000 08:04 4983195 00e06000-00e07000 rw-p 00019000 08:04 4983195 00e11000-00e3a000 r-xp 00000000 08:04 5012209 00e3a000-00e3c000 rw-p 00029000 08:04 5012209 00e3c000-00e5b000 rw-p 00e3c000 00:00 0
00ed8000-00eea000 r-xp 00000000 08:04 5012227 00eea000-00eeb000 rw-p 00012000 08:04 5012227 00eeb000-00efd000 rw-p 00eeb000 00:00 0
00f26000-00f27000 r-xp 00f26000 00:00 0 00f32000-00f45000 r-xp 00000000 08:04 5012226 00f45000-00f46000 rw-p 00012000 08:04 5012226 00f46000-00f58000 rw-p 00f46000 00:00 0
00f58000-00fe7000 r-xp 00000000 08:04 4988385 00fe7000-00feb000 rw-p 0008e000 08:04 4988385 00ff7000-00ffa000 r-xp 00000000 08:04 4983869 00ffa000-00ffb000 r--p 00002000 08:04 4983869 00ffb000-00ffc000 rw-p 00003000 08:04 4983869 00ffc000-010e1000 r-xp 00000000 08:04 131291 010e1000-010e5000 r--p 000e4000 08:04 131291 010e5000-010e6000 rw-p 000e8000 08:04 131291 010e6000-010ec000 rw-p 010e6000 00:00 0
02fb6000-03124000 r-xp 00000000 08:04 4981528 03124000-03126000 r--p 0016e000 08:04 4981528 03126000-03127000 rw-p 00170000 08:04 4981528 03127000-0312a000 rw-p 03127000 00:00 0
068f6000-069f3000 r-xp 00000000 08:04 4983076 069f3000-069f6000 rw-p 000fd000 08:04 4983076 069f6000-069f7000 rw-p 069f6000 00:00 0
08048000-0804c000 r-xp 00000000 08:04 5012380 0804c000-0804d000 rw-p 00003000 08:04 5012380 094cc000-09b89000 rw-p 094cc000 00:00 0 b1974000-b1b6b000 rw-p b1974000 00:00 0
b4674000-b4a7c000 rw-p b4674000 00:00 0
b4b52000-b4c72000 rw-p b4b52000 00:00 0
b4c73000-b7fc7000 rw-p b4c73000 00:00 0
b7fe9000-b7fea000 rw-p b7fe9000 00:00 0
bfe6a000-bfeea000 rw-p bff80000 00:00 0 terminated
/>fail+0x48)[0x30b3938]
/> /> />e+0x216)[0xe1ffb6]
/> /> /> />0xb9c)[0x23bb4c]
/> />eMain+0x23f)[0xcf731f]
/>e+0x2d)[0xcf80dd]
/>Recog+0x25)[0xcf8145]
/> />XFinalRecognition+0x10b)[0x5e381b]
/>main+0xe5)[0x2fcc6e5]
/usr/lib/librout.so
/usr/lib/librout.so
/usr/lib/librpic.so
/usr/lib/librpic.so
/usr/lib/librselstr.so
/usr/lib/librselstr.so
/usr/lib/librimage.so
/usr/lib/librimage.so
/usr/lib/librline.so
/usr/lib/librline.so
/usr/lib/librverline.so
/usr/lib/librverline.so
/usr/lib/libcfio.so
/usr/lib/libcfio.so
/usr/lib/libcpage.so
/usr/lib/libcpage.so
/usr/lib/librdib.so
/usr/lib/librdib.so
/usr/lib/libsmetric.so
/usr/lib/libsmetric.so
/usr/lib/librreccom.so
/usr/lib/librreccom.so
/usr/lib/librpstr.so
/usr/lib/librpstr.so
/usr/lib/libcline.so
/usr/lib/libcline.so
/usr/lib/libpass2.so
/usr/lib/libpass2.so
/usr/lib/libcpu32.so
/usr/lib/libcpu32.so
/usr/lib/librshelllines.so
/usr/lib/librshelllines.so
/usr/lib/librcutp.so
/usr/lib/librcutp.so
/usr/lib/librsadd.so
/usr/lib/librsadd.so
/usr/lib/libccom.so
/usr/lib/libccom.so
/usr/lib/librcorrkegl.so
/usr/lib/librcorrkegl.so
/usr/lib/librbal.so
/usr/lib/librbal.so
/usr/lib/libleo32.so
/usr/lib/libleo32.so
/usr/lib/libctb32.so
/usr/lib/libctb32.so
/usr/lib/libXau.so.6.0.0
/usr/lib/libXau.so.6.0.0
/usr/lib/libMagick++.so.1.0.0
/usr/lib/libMagick++.so.1.0.0
/usr/lib/libevn32.so
/usr/lib/libevn32.so
/usr/lib/libwindummy.so
/usr/lib/libwindummy.so
/usr/lib/libMagickWand.so.1.0.0
/usr/lib/libMagickWand.so.1.0.0
/usr/lib/libexc.so
/usr/lib/libexc.so
/usr/lib/libxcb-xlib.so.0.0.0
/usr/lib/libxcb-xlib.so.0.0.0
/usr/lib/librmarker.so
/usr/lib/librmarker.so
/usr/lib/libdif32.so
/usr/lib/libdif32.so
/lib/ld-2.9.so
/lib/ld-2.9.so
/lib/ld-2.9.so
/usr/lib/libcstr.so
/usr/lib/libcstr.so
/usr/lib/libr3532.so
/usr/lib/libr3532.so
/lib/libgcc_s-4.3.2-20081105.so.1
/lib/libgcc_s-4.3.2-20081105.so.1
/usr/lib/libltdl.so.3.1.6
/usr/lib/libltdl.so.3.1.6
/usr/lib/libpuma.so
/usr/lib/libpuma.so
/usr/lib/libloc32.so
/usr/lib/libloc32.so
/lib/libm-2.9.so
/lib/libm-2.9.so
/lib/libm-2.9.so
/usr/lib/libcimage.so
/usr/lib/libcimage.so
/usr/lib/libmsk32.so
/usr/lib/libmsk32.so
/lib/libpthread-2.9.so
/lib/libpthread-2.9.so
/lib/libpthread-2.9.so
/usr/lib/libjpeg.so.62.0.0
/usr/lib/libjpeg.so.62.0.0
/usr/lib/libMagickCore.so.1.0.0
/usr/lib/libMagickCore.so.1.0.0
/usr/lib/liblcms.so.1.0.18
/usr/lib/liblcms.so.1.0.18
/usr/lib/libfontconfig.so.1.3.0
/usr/lib/libfontconfig.so.1.3.0
/usr/lib/libSM.so.6.0.0
/usr/lib/libSM.so.6.0.0
/lib/libuuid.so.1.2
/lib/libuuid.so.1.2
/usr/lib/librneg.so
/usr/lib/librneg.so
/usr/lib/libXext.so.6.4.0
/usr/lib/libXext.so.6.4.0
/lib/libbz2.so.1.0.4
/lib/libbz2.so.1.0.4
/lib/libz.so.1.2.3
/lib/libz.so.1.2.3
/usr/lib/libstd32.so
/usr/lib/libstd32.so
/usr/lib/libICE.so.6.3.0
/usr/lib/libICE.so.6.3.0
/usr/lib/libxcb.so.1.0.0
/usr/lib/libxcb.so.1.0.0
/usr/lib/libXdmcp.so.6.0.0
/usr/lib/libXdmcp.so.6.0.0
/usr/lib/librstuff.so
/usr/lib/librstuff.so
/usr/lib/ImageMagick-6.4.0/modules-Q16/coders/dib.so
/usr/lib/ImageMagick-6.4.0/modules-Q16/coders/dib.so
/usr/lib/libmmx32.so
/usr/lib/libmmx32.so
/lib/libexpat.so.1.5.2
/lib/libexpat.so.1.5.2
/usr/lib/ImageMagick-6.4.0/modules-Q16/coders/tiff.so
/usr/lib/ImageMagick-6.4.0/modules-Q16/coders/tiff.so
/usr/lib/liblns32.so
/usr/lib/liblns32.so
/usr/lib/libtiff.so.3.8.2
/usr/lib/libtiff.so.3.8.2
/usr/lib/librfrmt.so
/usr/lib/librfrmt.so
/usr/lib/libXt.so.6.0.0
/usr/lib/libXt.so.6.0.0
/usr/lib/librblock.so
/usr/lib/librblock.so
/usr/lib/librstr.so
/usr/lib/librstr.so
/usr/lib/libced.so
/usr/lib/libced.so
/usr/lib/libfon32.so
/usr/lib/libfon32.so
/usr/lib/librlings.so
/usr/lib/librlings.so
[vdso]
/usr/lib/librling.so
/usr/lib/librling.so
/usr/lib/libfreetype.so.6.3.18
/usr/lib/libfreetype.so.6.3.18
/lib/libdl-2.9.so
/lib/libdl-2.9.so
/lib/libdl-2.9.so
/usr/lib/libstdc++.so.6.0.10
/usr/lib/libstdc++.so.6.0.10
/usr/lib/libstdc++.so.6.0.10
/lib/libc-2.9.so
/lib/libc-2.9.so
/lib/libc-2.9.so
/usr/lib/libX11.so.6.2.0
/usr/lib/libX11.so.6.2.0
/usr/bin/cuneiform
/usr/bin/cuneiform
[heap]
[stack]

Revision history for this message

Polevoy Dmitry (openocr-polevoy) wrote on 2009-04-29: Re: [Bug 369233] [NEW] buffer overflow detected

Please, attach image.

2009/4/29 nucleo <email address hidden>

> Public bug reported:
>
> On some tif images Cuneiform rev 389 crashes:
>
> $ cuneiform Image3.tif
> Cuneiform for Linux 0.6.0
> *** buffer overflow detected ***: cuneiform terminated
> ======= Backtrace: =========
> /lib/libc.so.6(__fortify_fail+0x48)[0x30b3938]
> /lib/libc.so.6[0x30b1a30]
> /usr/lib/libfon32.so[0xe334a8]
> /usr/lib/libfon32.so[0xe33cc2]
> /usr/lib/libfon32.so(FONRecog2Glue+0x216)[0xe1ffb6]
> /usr/lib/libpass2.so[0x2376aa]
> ...
> b7fe9000-b7fea000 rw-p b7fe9000 00:00 0
> bfe6a000-bfeea000 rw-p bff80000 00:00 0 [stack]
>
> ** Affects: cuneiform-linux
> Importance: Undecided
> Status: New
>
> --
> buffer overflow detected
> https://bugs.launchpad.net/bugs/369233
> You received this bug notification because you are a member of Cuneiform
> Linux, which is the registrant for Cuneiform for Linux.
>
> Status in Linux port of Cuneiform: New
>
> Bug description:
> On some tif images Cuneiform rev 389 crashes:
>
> $ cuneiform Image3.tif
> Cuneiform for Linux 0.6.0
> *** buffer overflow detected ***: cuneiform terminated
> ======= Backtrace: =========
> /lib/libc.so.6(__fortify_fail+0x48)[0x30b3938]
> /lib/libc.so.6[0x30b1a30]
> /usr/lib/libfon32.so[0xe334a8]
> /usr/lib/libfon32.so[0xe33cc2]
> /usr/lib/libfon32.so(FONRecog2Glue+0x216)[0xe1ffb6]
> /usr/lib/libpass2.so[0x2376aa]
> ...
> b7fe9000-b7fea000 rw-p b7fe9000 00:00 0
> bfe6a000-bfeea000 rw-p bff80000 00:00 0 [stack]
>

Revision history for this message

nucleo (nucleo) wrote on 2009-04-29:

buffer overflow with this image Edit (2.0 MiB, image/tiff)

Revision history for this message

Jussi Pakkanen (jpakkane) wrote on 2009-05-05:

Could you post full debug info backtrace. The readme tells you how to enable debug if you have not done it yet.

Revision history for this message

nucleo (nucleo) wrote on 2009-05-06:

Download full text (16.5 KiB)

$ gdb cuneiform                                                                                                                          
GNU gdb Fedora (6.8-29.fc10)                                                                                                                                 
Copyright (C) 2008 Free Software Foundation, Inc.                                                                                                            
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>                                                                                
This is free software: you are free to change and redistribute it.                                                                                           
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"                                                                                   
and "show warranty" for details.                                                                                                                             
This GDB was configured as "i386-redhat-linux-gnu"...                                                                                                        
(gdb) run Image3.tif                                                                                                                                         
Starting program: /usr/bin/cuneiform Image3.tif                                                                                                              
[Thread debugging using libthread_db enabled]                                                                                                                
Cuneiform for Linux 0.6.0                                                                                                                                    
[New Thread 0xb7fcb700 (LWP 26917)]                                                                                                                          
*** buffer overflow detected ***: /usr/bin/cuneiform terminated                                                                                              
======= Backtrace: =========                                                                                                                                 
/lib/libc.so.6(__fortify_fail+0x48)[0x10e4938]                                                                                                               
/lib/libc.so.6[0x10e2a30]                                                                                                                                    
/usr/lib/libfon32.so[0x9994a8]                                                                                                                               
/usr/lib/libfon32.so[0x999cc2]                                                                                                                               
/usr/lib/libfon32.so(FONRecog2Glue+0x216)[0x985fb6]                                                                                                          
/usr/lib/libpass2.so[0x7026aa]                                                                                                                               
/usr/lib/libpass2.so[0x7028d8]                                                                                                                               
/usr/lib/libpass2.so[0x70550b]                                                                                                                               
/usr/lib/libpass2.so(p2_proc+0xb9c)[0x706b4c]                                                                                                                
/usr/lib/librstr.so[0x5fd046]                                                                                                                                
/usr/lib/librstr.so(RSTRRecognizeMain+0x23f)[0x6132df]                                                                                                       
/usr/lib/librstr.so(RSTRRecognize+0x2d)[0x61409d]                                                                                                            
/usr/lib/librstr.so(RSTR_Recog+0x25)[0x614105]                                                                                                               
/usr/lib/libpuma.so[0x8c7e55]                                                                                                                                
/usr/lib/libpuma.so(PUMA_XFinalRecognition+0x10b)[0x8c981b]                                                                                                  
/usr/bin/cuneiform[0x804a985]                                                                                                                                
/lib/libc.so.6(__libc_start_main+0xe5)[0xffd6e5]                                                                                                             
/usr/bin/cuneiform[0x80497d1]                                                                                                                                
======= Memory map: ========                                                                                                                                 
00110000-002b7000 r-xp 00000000 08:04 132452     /usr/lib/libMagickCore.so.1.0.0                                                                             
002b7000-00300000 rw-p 001a6000 08:04 132452     /usr/lib/libMagickCore.so.1.0.0                                                                             
00300000-00318000 rw-p 00300000 00:00 0                                                                                                                      
00318000-00340000 r-xp 00000000 08:04 5012205    /usr/lib/librblock.so                                                                                       
00340000-00341000 rw-p 00027000 08:04 5012205    /usr/lib/librblock.so                                                                                       
00341000-00347000 rw-p 00341000 00:00 0                                                                                                                      
00347000-00353000 r-xp 00000000 08:04 5012221    /usr/lib/librout.so                                                                                         
00353000-00356000 rw-p 0000c000 08:04 5012221    /usr/lib/librout.so                                                                                         
00356000-00358000 rw-p 00356000 00:00 0                                                                                                                      
00358000-0037a000 r-xp 00000000 08:04 5012226    /usr/lib/librselstr.so                                                                                      
0037a000-0037b000 rw-p 00022000 08:04 5012226    /usr/lib/librselstr.so                                                                                      
0037b000-00380000 rw-p 0037b000 00:00 0                                                                                                                      
00380000-00393000 r-xp 00000000 08:04 5012229    /usr/lib/librstuff.so                                                                                       
00393000-00394000 rw-p 00012000 08:04 5012229    /usr/lib/librstuff.so                                                                                       
00394000-003ac000 r-xp 00000000 08:04 5012215    /usr/lib/librimage.so                                                                                       
003ac000-003ad000 rw-p 00017000 08:04 5012215    /usr/lib/librimage.so                                                                                       
003ad000-003ae000 rw-p 003ad000 00:00 0                                                                                                                      
003ae000-003bf000 r-xp 00000000 08:04 5012216    /usr/lib/librline.so                                                                                        
003bf000-003c0000 rw-p 00010000 08:04 5012216    /usr/lib/librline.so                                                                                        
003c0000-003cc000 r-xp 00000000 08:04 5012230    /usr/lib/librverline.so                                                                                     
003cc000-003cd000 rw-p 0000b000 08:04 5012230    /usr/lib/librverline.so                                                                                     
003cd000-00416000 rw-p 003cd000 00:00 0                                                                                                                      
00416000-00423000 r-xp 00000000 08:04 4986469    /usr/lib/libcpage.so                                                                                        
00423000-00424000 rw-p 0000d000 08:04 4986469    /usr/lib/libcpage.so                                                                                        
00424000-0044f000 r-xp 00000000 08:04 5010421    /usr/lib/liblns32.so                                                                                        
0044f000-00450000 rw-p 0002a000 08:04 5010421    /usr/lib/liblns32.so                                                                                        
00450000-00451000 rw-p 00450000 00:00 0                                                                                                                      
00451000-0045a000 r-xp 00000000 08:04 5012231    /usr/lib/libsmetric.so                                                                                      
0045a000-0045b000 rw-p 00009000 08:04 5012231    /usr/lib/libsmetric.so                                                                                      
0045b000-00466000 r-xp 00000000 08:04 5010410    /usr/lib/libexc.so                                                                                          
00466000-00467000 rw-p 0000b000 08:04 5010410    /usr/lib/libexc.so                                                                                          
00467000-004e7000 rw-p 00467000 00:00 0                                                                                                                      
004e7000-004eb000 r-xp 00000000 08:04 5010422    /usr/lib/libloc32.so                                                                                        
004eb000-004ec000 rw-p 00003000 08:04 5010422    /usr/lib/libloc32.so                                                                                        
004ec000-00553000 rw-p 004ec000 00:00 0                                                                                                                      
00553000-00556000 r-xp 00000000 08:04 5012224    /usr/lib/librreccom.so                                                                                      
00556000-00557000 rw-p 00003000 08:04 5012224    /usr/lib/librreccom.so                                                                                      
00557000-00558000 rw-p 00557000 00:00 0                                                                                                                      
00558000-00666000 r-xp 00000000 08:04 5012228    /usr/lib/librstr.so                                                                                         
00666000-0066f000 rw-p 0010d000 08:04 5012228    /usr/lib/librstr.so                                                                                         
0066f000-006f3000 rw-p 0066f000 00:00 0                                                                                                                      
006f3000-006fb000 r-xp 00000000 08:04 4986119    /usr/lib/libcline.so                                                                                        
006fb000-006fc000 rw-p 00008000 08:04 4986119    /usr/lib/libcline.so                                                                                        
006fc000-0070a000 r-xp 00000000 08:04 5012201    /usr/lib/libpass2.so                                                                                        
0070a000-0070b000 rw-p 0000e000 08:04 5012201    /usr/lib/libpass2.so                                                                                        
0070b000-0070e000 rw-p 0070b000 00:00 0                                                                                                                      
0070e000-0072d000 r-xp 00000000 08:04 5012204    /usr/lib/librbal.so                                                                                         
0072d000-0072e000 rw-p 0001e000 08:04 5012204    /usr/lib/librbal.so
0072e000-00730000 rw-p 0072e000 00:00 0
00730000-00749000 r-xp 00000000 08:04 5010420    /usr/lib/libleo32.so
00749000-0074a000 rw-p 00018000 08:04 5010420    /usr/lib/libleo32.so
0074a000-0074f000 rw-p 0074a000 00:00 0
0074f000-00750000 r-xp 00000000 08:04 4987889    /usr/lib/libcpu32.so
00750000-00751000 rw-p 00000000 08:04 4987889    /usr/lib/libcpu32.so
00751000-00758000 r-xp 00000000 08:04 5012203    /usr/lib/libr3532.so
00758000-00759000 rw-p 00006000 08:04 5012203    /usr/lib/libr3532.so
00759000-0075c000 rw-p 00759000 00:00 0
0075c000-00760000 r-xp 00000000 08:04 5012233    /usr/l
Program received signal SIGABRT, Aborted.
0x00e80416 in __kernel_vsyscall ()
Missing separate debuginfos, use: debuginfo-install ImageMagick-6.4.0.10-2.fc10.i386 ImageMagick-c++-6.4.0.10-2.fc10.i386 bzip2-libs-1.0.5-3.fc10.i386 e2fsprogs-libs-1.41.4-4.fc10.i386 expat-2.0.1-5.i386 fontconfig-2.6.0-3.fc10.2.i386 freetype-2.3.7-3.fc10.1.i386 glibc-2.9-3.i686 lcms-libs-1.18-1.fc10.i386 libICE-1.0.4-4.fc10.i386 libSM-1.1.0-2.fc10.i386 libX11-1.1.5-3.fc10.i386 libXau-1.0.4-1.fc10.i386 libXdmcp-1.0.2-6.fc10.i386 libXext-1.0.4-1.fc9.i386 libXt-1.0.5-1.fc10.i386 libgcc-4.3.2-7.i386 libjpeg-6b-43.fc10.i386 libstdc++-4.3.2-7.i386 libtiff-3.8.2-11.fc10.i386 libtool-ltdl-1.5.26-4.fc10.i386 libxcb-1.1.91-5.fc10.i386 zlib-1.2.3-18.fc9.i386
(gdb) bt
#0  0x00e80416 in __kernel_vsyscall ()
#1  0x01012460 in raise () from /lib/libc.so.6
#2  0x01013e28 in abort () from /lib/libc.so.6
#3  0x0104ffed in __libc_message () from /lib/libc.so.6
#4  0x010e4938 in __fortify_fail () from /lib/libc.so.6
#5  0x010e2a30 in __chk_fail () from /lib/libc.so.6
#6  0x009994a8 in memcpy () at /usr/include/bits/string3.h:52
#7  MoveUpDownBitmap2 (xbyte=<value optimized out>, yrow=<value optimized out>, bDest=0x9a6ec0 "")
    at /usr/src/debug/cuneiform/cuneiform_src/Kern/fon/src/p2_thick.c:208
#8  0x00999cc2 in Razmaz2 (bSource=0x9a5ec0 "\003\a", bDest=0x9a6ec0 "", xbit=148, yrow=54, porogX=0, porogY=20)
    at /usr/src/debug/cuneiform/cuneiform_src/Kern/fon/src/p2_thick.c:316
#9  0x00985fb6 in FONRecog2Glue (firLeo=0x831edc0, lasLeo=0x8320820, firOut=0x8539c38, lasOut=0x8535548, lang=0, porog=240, nNaklon=-5, countRazmaz=10)
    at /usr/src/debug/cuneiform/cuneiform_src/Kern/fon/src/dist_bou.c:1923
#10 0x007026aa in RerecogInRect (rect=0xbfffb888, lineRaw=0x831b0d0, firstNew=0x8539c38, lastNew=0x8535548, lang=0)
    at /usr/src/debug/cuneiform/cuneiform_src/Kern/pass2/src/p2_proc.c:1921
#11 0x007028d8 in GlueRerecog (first=0x853e208, last=0x852a95c, lineRaw=0x831b0d0, boAll=0)
    at /usr/src/debug/cuneiform/cuneiform_src/Kern/pass2/src/p2_proc.c:2007
#12 0x0070550b in p2_processWord (lineRaw=0x831b0d0, lineFon=0x852a808, firOld=0xbfffd0a0, last=0x85493a0, fontinfo=0xbfffbc34, useSpell=1)
    at /usr/src/debug/cuneiform/cuneiform_src/Kern/pass2/src/p2_proc.c:574
#13 0x00706b4c in p2_proc (lineRaw=0x831b0d0, lineOne=0x83185c0, p2glob=0xbfffd578) at /usr/src/debug/cuneiform/cuneiform_src/Kern/pass2/src/p2_proc.c:1307
#14 0x005fd046 in pass3 (ln=0x831b0d0, lout=0x83185c0) at /usr/src/debug/cuneiform/cuneiform_src/Kern/rstr/src/pass3.c:776
#15 0x006132df in RSTRRecognizeMain (lin=0x831b0d0, lino=0x83185c0) at /usr/src/debug/cuneiform/cuneiform_src/Kern/rstr/src/rcm.c:1692
#16 0x0061409d in RSTRRecognize (lin=0x831b0d0, lino=0x83185c0) at /usr/src/debug/cuneiform/cuneiform_src/Kern/rstr/src/rcm.c:1374
#17 0x00614105 in RSTR_Recog (lini=0x831b0d0, lino=0x83185c0) at /usr/src/debug/cuneiform/cuneiform_src/Kern/rstr/src/rcm.c:2099
#18 0x008c7e55 in RecognizeStringsPass2 () at /usr/src/debug/cuneiform/cuneiform_src/Kern/puma/c/partrecog.cpp:357
#19 Recognize () at /usr/src/debug/cuneiform/cuneiform_src/Kern/puma/c/partrecog.cpp:679
#20 0x008c981b in PUMA_XFinalRecognition () at /usr/src/debug/cuneiform/cuneiform_src/Kern/puma/main/puma.cpp:600
#21 0x0804a985 in main (argc=2, argv=0xbffff3d4) at /usr/src/debug/cuneiform/cuneiform_src/Kern/cuneiform-cli.cpp:348
(gdb) q
The program is running.  Exit anyway? (y or n) y

Revision history for this message

nucleo (nucleo) wrote on 2009-05-06:

This backtrace for revision 391.

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

buffer overflow with this image Edit

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.