cupsd assert failure: free(): invalid pointer

[emk2203]

Just running in the background, no user action (printing)

ProblemType: Crash
DistroRelease: Ubuntu 19.10
Package: cups-daemon 2.2.12-2ubuntu1
ProcVersionSignature: Ubuntu 5.3.0-16.17-generic 5.3.1
Uname: Linux 5.3.0-13-generic x86_64
NonfreeKernelModules: wl
ApportVersion: 2.20.11-0ubuntu7
Architecture: amd64
AssertionMessage: free(): invalid pointer
Date: Tue Oct 1 19:41:35 2019
ExecutablePath: /usr/sbin/cupsd
InstallationDate: Installed on 2019-02-09 (234 days ago)
InstallationMedia: Ubuntu 19.04 "Disco Dingo" - Alpha amd64 (20190203)
Lpstat:
 device for HP_LaserJet_CM1415fn_44A808_: implicitclass://HP_LaserJet_CM1415fn_44A808_/
 device for Samsung_C48x_Series_SEC84251900EE44_: implicitclass://Samsung_C48x_Series_SEC84251900EE44_/
MachineType: Dell Inc. Latitude E6530
Papersize: letter
PpdFiles:
 HP_LaserJet_CM1415fn_44A808_: LaserJet CM1415fn - IPP Everywhere
 Samsung_C48x_Series_SEC84251900EE44_: C48x Series - IPP Everywhere
ProcAttrCurrent: /usr/sbin/cupsd (enforce)
ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-5.3.0-16-generic root=UUID=4cc2c833-0db9-4a3d-84d1-9f00f5785fca ro quiet splash vt.handoff=7
ProcEnviron:
 LANG=de_DE.UTF-8
 PATH=(custom, no user)
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-5.3.0-16-generic root=UUID=4cc2c833-0db9-4a3d-84d1-9f00f5785fca ro quiet splash vt.handoff=7
Signal: 6
SourcePackage: cups
StacktraceTop:
 __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f923ecb83a5 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
 malloc_printerr (str=str@entry=0x7f923ecb652a "free(): invalid pointer") at malloc.c:5332
 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4173
 ?? () from /lib/x86_64-linux-gnu/libcups.so.2
 ippDelete () from /lib/x86_64-linux-gnu/libcups.so.2
Title: cupsd assert failure: free(): invalid pointer
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups:

dmi.bios.date: 11/30/2018
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A22
dmi.board.name: 07Y85M
dmi.board.vendor: Dell Inc.
dmi.board.version: A00
dmi.chassis.type: 9
dmi.chassis.vendor: Dell Inc.
dmi.modalias: dmi:bvnDellInc.:bvrA22:bd11/30/2018:svnDellInc.:pnLatitudeE6530:pvr01:rvnDellInc.:rn07Y85M:rvrA00:cvnDellInc.:ct9:cvr:
dmi.product.name: Latitude E6530
dmi.product.sku: Latitude E6530
dmi.product.version: 01
dmi.sys.vendor: Dell Inc.
separator:

[Apport retracing service (apport)]

StacktraceTop:
 __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f923ecb83a5 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
 malloc_printerr (str=str@entry=0x7f923ecb652a "free(): invalid pointer") at malloc.c:5332
 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4173
 ipp_free_values (attr=attr@entry=0x55e4cab408e0, element=element@entry=0, count=1) at ipp.c:6440
 ippDelete (ipp=0x55e4cab848a0) at ipp.c:1759

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Nicolas DERIVE (kalon33)]

It seems to be the third time I encounter this bug in a week...

[jsc (jens-s-l)]

This happens to me too. The printer reports on the display a low toner warning right after switch on and after every finished print job.

My printer: Samsung C1860FW

This is also reported on https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=961345.

[Edgar Yajure (yajure-6)]

Also happening to me for a Samsung CLX-3300
Ubuntu 20.04 LTS

[Aleksandr Panzin (jalexoid)]

This has been happening for ages now.
18.04 to 20.10 are all affected

[Sebastien Bacher (seb128)]

The Debian report suggests there is a fix proposed on https://github.com/apple/cups/issues/5826 which has been backported to Debian

[Till Kamppeter (till-kamppeter)]

Hirsute has now the newest CUPS (2.3.3op1) with all fixes and patches. This should also include the patch mentioned.

[Sebastien Bacher (seb128)]

Could someone try if the hirsute version fixes their issue?

[Nicolas Joyard (njoyard)]

I confirm the hirsute version fixes the issue.

I created https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1915181/ recently without having seen this bug report, and I'm pretty confident it's the same issue.

I reinstalled groovy on a VM, confirmed the bug occurred (it did), rebuilt 2.3.3op1 from hirsute and installed it. The problem no longer occurs after that.

[rew (r-e-wolff)]

I'm also seeing this on a samsung printer....