scanadf invalid pointer: crash with Fujitsu M3091DCd

[Dave Webb]

scanadf (and/or sane) crashes when scanning duplex documents when using a Fujitsu M3091DCd document scanner.
The same hardware worked perfectly with older versions of sane/scanadf.

Simplex documents (omitting the 'source' option) works well.

user@alpha:/tmp$ scanadf -d fujitsu:/dev/sg1 --source "ADF Duplex" --mode Lineart -l 0 -t 0 -x 201 -y 297 -o pat%04d.pnm
scanadf: rounded value of br-x from 201 to 200.994
scanadf: rounded value of br-y from 297 to 279.364
*** glibc detected *** scanadf: free(): invalid pointer: 0x00000000022057c0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x78a8f)[0x7fdcbc6a9a8f]
/lib/x86_64-linux-gnu/libc.so.6(cfree+0x73)[0x7fdcbc6ad8e3]
/usr/lib/sane/libsane-fujitsu.so.1(sane_fujitsu_read+0x6dc)[0x7fdcbc21d9fc]
scanadf[0x40292e]
scanadf[0x4045a6]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xff)[0x7fdcbc64feff]
scanadf[0x401549]
======= Memory map: ========
00400000-00406000 r-xp 00000000 fc:02 6049415 /usr/bin/scanadf
00606000-00607000 r--p 00006000 fc:02 6049415 /usr/bin/scanadf
00607000-00608000 rw-p 00007000 fc:02 6049415 /usr/bin/scanadf
00608000-00616000 rw-p 00000000 00:00 0
021d1000-02226000 rw-p 00000000 00:00 0 [heap]
7fdcb4000000-7fdcb4021000 rw-p 00000000 00:00 0
7fdcb4021000-7fdcb8000000 ---p 00000000 00:00 0
7fdcbbde2000-7fdcbbdf7000 r-xp 00000000 fc:02 2752583 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fdcbbdf7000-7fdcbbff6000 ---p 00015000 fc:02 2752583 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fdcbbff6000-7fdcbbff7000 r--p 00014000 fc:02 2752583 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fdcbbff7000-7fdcbbff8000 rw-p 00015000 fc:02 2752583 /lib/x86_64-linux-gnu/libgcc_s.so.1
7fdcbbff8000-7fdcbbffe000 r-xp 00000000 fc:02 2752692 /lib/libusb-0.1.so.4.4.4
7fdcbbffe000-7fdcbc1fe000 ---p 00006000 fc:02 2752692 /lib/libusb-0.1.so.4.4.4
7fdcbc1fe000-7fdcbc1ff000 r--p 00006000 fc:02 2752692 /lib/libusb-0.1.so.4.4.4
7fdcbc1ff000-7fdcbc200000 rw-p 00007000 fc:02 2752692 /lib/libusb-0.1.so.4.4.4
7fdcbc200000-7fdcbc201000 rw-p 00000000 00:00 0
7fdcbc201000-7fdcbc22a000 r-xp 00000000 fc:02 789120 /usr/lib/sane/libsane-fujitsu.so.1.0.22
7fdcbc22a000-7fdcbc429000 ---p 00029000 fc:02 789120 /usr/lib/sane/libsane-fujitsu.so.1.0.22
7fdcbc429000-7fdcbc42a000 r--p 00028000 fc:02 789120 /usr/lib/sane/libsane-fujitsu.so.1.0.22
7fdcbc42a000-7fdcbc42b000 rw-p 00029000 fc:02 789120 /usr/lib/sane/libsane-fujitsu.so.1.0.22
7fdcbc42b000-7fdcbc42d000 rw-p 00000000 00:00 0
7fdcbc42d000-7fdcbc42f000 r-xp 00000000 fc:02 2756494 /lib/x86_64-linux-gnu/libdl-2.13.so
7fdcbc42f000-7fdcbc62f000 ---p 00002000 fc:02 2756494 /lib/x86_64-linux-gnu/libdl-2.13.so
7fdcbc62f000-7fdcbc630000 r--p 00002000 fc:02 2756494 /lib/x86_64-linux-gnu/libdl-2.13.so
7fdcbc630000-7fdcbc631000 rw-p 00003000 fc:02 2756494 /lib/x86_64-linux-gnu/libdl-2.13.so
7fdcbc631000-7fdcbc7bb000 r-xp 00000000 fc:02 2756491 /lib/x86_64-linux-gnu/libc-2.13.so
7fdcbc7bb000-7fdcbc9ba000 ---p 0018a000 fc:02 2756491 /lib/x86_64-linux-gnu/libc-2.13.so
7fdcbc9ba000-7fdcbc9be000 r--p 00189000 fc:02 2756491 /lib/x86_64-linux-gnu/libc-2.13.so
7fdcbc9be000-7fdcbc9bf000 rw-p 0018d000 fc:02 2756491 /lib/x86_64-linux-gnu/libc-2.13.so
7fdcbc9bf000-7fdcbc9c5000 rw-p 00000000 00:00 0
7fdcbc9c5000-7fdcbc9cc000 r-xp 00000000 fc:02 6034241 /usr/lib/libsane.so.1.0.22
7fdcbc9cc000-7fdcbcbcb000 ---p 00007000 fc:02 6034241 /usr/lib/libsane.so.1.0.22
7fdcbcbcb000-7fdcbcbcc000 r--p 00006000 fc:02 6034241 /usr/lib/libsane.so.1.0.22
7fdcbcbcc000-7fdcbcbcd000 rw-p 00007000 fc:02 6034241 /usr/lib/libsane.so.1.0.22
7fdcbcbcd000-7fdcbcc51000 r-xp 00000000 fc:02 2756495 /lib/x86_64-linux-gnu/libm-2.13.so
7fdcbcc51000-7fdcbce50000 ---p 00084000 fc:02 2756495 /lib/x86_64-linux-gnu/libm-2.13.so
7fdcbce50000-7fdcbce51000 r--p 00083000 fc:02 2756495 /lib/x86_64-linux-gnu/libm-2.13.so
7fdcbce51000-7fdcbce52000 rw-p 00084000 fc:02 2756495 /lib/x86_64-linux-gnu/libm-2.13.so
7fdcbce52000-7fdcbce73000 r-xp 00000000 fc:02 2756488 /lib/x86_64-linux-gnu/ld-2.13.so
7fdcbcf55000-7fdcbd048000 rw-p 00000000 00:00 0
7fdcbd06f000-7fdcbd072000 rw-p 00000000 00:00 0
7fdcbd072000-7fdcbd073000 r--p 00020000 fc:02 2756488 /lib/x86_64-linux-gnu/ld-2.13.so
7fdcbd073000-7fdcbd075000 rw-p 00021000 fc:02 2756488 /lib/x86_64-linux-gnu/ld-2.13.so
7fff81c4a000-7fff81c6b000 rw-p 00000000 00:00 0 [stack]
7fff81c94000-7fff81c95000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
Aborted

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: sane 1.0.14-9
ProcVersionSignature: Ubuntu 2.6.38-11.48-generic 2.6.38.8
Uname: Linux 2.6.38-11-generic x86_64
NonfreeKernelModules: fglrx
Architecture: amd64
Date: Thu Sep 8 10:03:21 2011
ProcEnviron:
 LANGUAGE=
 PATH=(custom, no username)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: sane-frontends
UpgradeStatus: Upgraded to natty on 2011-06-01 (98 days ago)

[penalvch (penalvch)]

Dave Webb, thank you for reporting this and helping make Ubuntu better.

As per https://wiki.ubuntu.com/Releases your release is EOL.

If you have an issue in a supported release (ex. 16.04) please file a new report, and feel free to subscribe me to it.