Cuneiform crash

Bug #593409 reported by Sciko
32
This bug affects 7 people
Affects Status Importance Assigned to Milestone
Cuneiform for Linux
New
Undecided
Unassigned
cuneiform (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Ubuntu 10.04 lucid

$ cuneiform -f text -l rus out.bmp
Cuneiform for Linux 0.7.0
*** buffer overflow detected ***: cuneiform terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x50)[0xb75dd390]
/lib/tls/i686/cmov/libc.so.6(+0xe12ca)[0xb75dc2ca]
/usr/lib/cuneiform/libfon32.so(+0x227eb)[0xb6f117eb]
/usr/lib/cuneiform/libfon32.so(+0x23014)[0xb6f12014]
/usr/lib/cuneiform/libfon32.so(FONRecog2Glue+0x217)[0xb6efd217]
/usr/lib/cuneiform/libpass2.so(+0x6338)[0xb6fd4338]
/usr/lib/cuneiform/libpass2.so(+0x6560)[0xb6fd4560]
/usr/lib/cuneiform/libpass2.so(+0x93bd)[0xb6fd73bd]
/usr/lib/cuneiform/libpass2.so(p2_proc+0xb6c)[0xb6fd8bbc]
/usr/lib/cuneiform/librstr.so(+0xa3095)[0xb70be095]
/usr/lib/cuneiform/librstr.so(RSTRRecognizeMain+0x237)[0xb70d3557]
/usr/lib/cuneiform/librstr.so(RSTRRecognize+0x2c)[0xb70d42fc]
/usr/lib/cuneiform/librstr.so(RSTR_Recog+0x24)[0xb70d4364]
/usr/lib/cuneiform/libpuma.so(+0xb54a)[0xb779154a]
/usr/lib/cuneiform/libpuma.so(PUMA_XFinalRecognition+0xf3)[0xb7792e63]
cuneiform[0x804a5e6]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb7511bd6]
cuneiform[0x8049461]
======= Memory map: ========
08048000-0804c000 r-xp 00000000 08:06 8827 /usr/bin/cuneiform
0804c000-0804d000 r--p 00003000 08:06 8827 /usr/bin/cuneiform
0804d000-0804e000 rw-p 00004000 08:06 8827 /usr/bin/cuneiform
09cef000-0a43a000 rw-p 00000000 00:00 0 [heap]
b0e4a000-b101c000 rw-p 00000000 00:00 0
b3739000-b3b1c000 rw-p 00000000 00:00 0
b3c1b000-b3ced000 rw-p 00000000 00:00 0
b3cee000-b6d75000 rw-p 00000000 00:00 0
b6d75000-b6d99000 r-xp 00000000 08:06 13066 /lib/tls/i686/cmov/libm-2.11.1.so
b6d99000-b6d9a000 r--p 00023000 08:06 13066 /lib/tls/i686/cmov/libm-2.11.1.so
b6d9a000-b6d9b000 rw-p 00024000 08:06 13066 /lib/tls/i686/cmov/libm-2.11.1.so
b6d9b000-b6d9d000 r-xp 00000000 08:06 13065 /lib/tls/i686/cmov/libdl-2.11.1.so
b6d9d000-b6d9e000 r--p 00001000 08:06 13065 /lib/tls/i686/cmov/libdl-2.11.1.so
b6d9e000-b6d9f000 rw-p 00002000 08:06 13065 /lib/tls/i686/cmov/libdl-2.11.1.so
b6d9f000-b6da2000 r-xp 00000000 08:06 416746 /usr/lib/cuneiform/libwindummy.so
b6da2000-b6da3000 r--p 00002000 08:06 416746 /usr/lib/cuneiform/libwindummy.so
b6da3000-b6da4000 rw-p 00003000 08:06 416746 /usr/lib/cuneiform/libwindummy.so
b6da4000-b6db5000 r-xp 00000000 08:06 416737 /usr/lib/cuneiform/libstd32.so
b6db5000-b6db6000 r--p 00010000 08:06 416737 /usr/lib/cuneiform/libstd32.so
b6db6000-b6db7000 rw-p 00011000 08:06 416737 /usr/lib/cuneiform/libstd32.so
b6db7000-b6dbd000 rw-p 00000000 00:00 0
b6dbd000-b6dc2000 r-xp 00000000 08:06 416353 /usr/lib/cuneiform/libccom.so
b6dc2000-b6dc3000 r--p 00004000 08:06 416353 /usr/lib/cuneiform/libccom.so
b6dc3000-b6dc4000 rw-p 00005000 08:06 416353 /usr/lib/cuneiform/libccom.so
b6dc4000-b6dcd000 r-xp 00000000 08:06 416430 /usr/lib/cuneiform/libcstr.so
b6dcd000-b6dce000 r--p 00008000 08:06 416430 /usr/lib/cuneiform/libcstr.so
b6dce000-b6dcf000 rw-p 00009000 08:06 416430 /usr/lib/cuneiform/libcstr.so
b6dcf000-b6de0000 r-xp 00000000 08:06 416635 /usr/lib/cuneiform/librlings.so
b6de0000-b6de1000 r--p 00011000 08:06 416635 /usr/lib/cuneiform/librlings.so
b6de1000-b6de2000 rw-p 00012000 08:06 416635 /usr/lib/cuneiform/librlings.so
b6de2000-b6df4000 rw-p 00000000 00:00 0
b6df4000-b6e06000 r-xp 00000000 08:06 416629 /usr/lib/cuneiform/librling.so
b6e06000-b6e07000 r--p 00011000 08:06 416629 /usr/lib/cuneiform/librling.so
b6e07000-b6e08000 rw-p 00012000 08:06 416629 /usr/lib/cuneiform/librling.so
b6e08000-b6e1a000 rw-p 00000000 00:00 0
b6e1a000-b6e1b000 r-xp 00000000 08:06 416502 /usr/lib/cuneiform/libmmx32.so
b6e1b000-b6e1c000 r--p 00000000 08:06 416502 /usr/lib/cuneiform/libmmx32.so
b6e1c000-b6e1d000 rw-p 00001000 08:06 416502 /usr/lib/cuneiform/libmmx32.so
b6e1d000-b6e5e000 rw-p 00000000 00:00 0
b6e5e000-b6e64000 r-xp 00000000 08:06 416537 /usr/lib/cuneiform/libr3532.so
b6e64000-b6e65000 r--p 00005000 08:06 416537 /usr/lib/cuneiform/libr3532.so
b6e65000-b6e66000 rw-p 00006000 08:06 416537 /usr/lib/cuneiform/libr3532.so
b6e66000-b6e69000 rw-p 00000000 00:00 0
b6e69000-b6e6a000 r-xp 00000000 08:06 416417 /usr/lib/cuneiform/libcpu32.so
b6e6a000-b6e6b000 r--p 00000000 08:06 416417 /usr/lib/cuneiform/libcpu32.so
b6e6b000-b6e6c000 rw-p 00001000 08:06 416417 /usr/lib/cuneiform/libcpu32.so
b6e6c000-b6e84000 r-xp 00000000 08:06 416443 /usr/lib/cuneiform/libdif32.so
b6e84000-b6e85000 r--p 00017000 08:06 416443 /usr/lib/cuneiform/libdif32.so
b6e85000-b6e89000 rw-p 00018000 08:06 416443 /usr/lib/cuneiform/libdif32.so
b6e89000-b6e8c000 rw-p 00000000 00:00 0
b6e8c000-b6e90000 r-xp 00000000 08:06 416514 /usr/lib/cuneiform/libmsk32.so
b6e90000-b6e91000 r--p 00003000 08:06 416514 /usr/lib/cuneiform/libmsk32.so
b6e91000-b6e92000 rw-p 00004000 08:06 416514 /usr/lib/cuneiform/libmsk32.so
b6e92000-b6ed3000 rw-p 00000000 00:00 0
b6ed3000-b6edb000 r-xp 00000000 08:06 416435 /usr/lib/cuneiform/libctb32.so
b6edb000-b6edc000 r--p 00007000 08:06 416435 /usr/lib/cuneiform/libctb32.so
b6edc000-b6edd000 rw-p 00008000 08:06 416435 /usr/lib/cuneiform/libctb32.so
b6edd000-b6eef000 rw-p 00000000 00:00 0
b6eef000-b6f14000 r-xp 00000000 08:06 416476 /usr/lib/cuneiform/libfon32.so
b6f14000-b6f15000 r--p 00024000 08:06 416476 /usr/lib/cuneiform/libfon32.so
b6f15000-b6f17000 rw-p 00025000 08:06 416476 /usr/lib/cuneiform/libfon32.so
b6f17000-b6f36000 rw-p 00000000 00:00 0
b6f36000-b6f3f000 r-xp 00000000 08:06 416462 /usr/lib/cuneiform/libevn32.so
b6f3f000-b6f40000 r--p 00008000 08:06 416462 /usr/lib/cuneiform/libevn32.so
b6f40000-b6f41000 rw-p 00009000 08:06 416462 /usr/lib/cuneiform/libevn32.so
b6f41000-b6f84000 rw-p 00000000 00:00 0
b6f84000-b6f9c000 r-xp 00000000 08:06 416483 /usr/lib/cuneiform/libleo32.so
b6f9c000-b6f9d000 r--p 00017000 08:06 416483 /usr/lib/cuneiform/libleo32.so
b6f9d000-b6f9e000 rw-p 00018000 08:06 416483 /usr/lib/cuneiform/libleo32.so
b6f9e000-b6fa3000 rw-p 00000000 00:00 0
b6fa3000-b6faa000 r-xp 00000000 08:06 416700 /usr/lib/cuneiform/librsadd.so
b6faa000-b6fab000 r--p 00006000 08:06 416700 /usr/lib/cuneiform/librsadd.so
b6fab000-b6fac000 rw-p 00007000 08:06 416700 /usr/lib/cuneiform/librsadd.so
b6fac000-b6fca000 r-xp 00000000 08:06 416543 /usr/lib/cuneiform/librbal.so
b6fca000-b6fcb000 r--p 0001d000 08:06 416543 /usr/lib/cuneiform/librbal.so
b6fcb000-b6fcc000 rw-p 0001e000 08:06 416543 /usr/lib/cuneiform/librbal.so
b6fcc000-b6fce000 rw-p 00000000 00:00 0
b6fce000-b6fdc000 r-xp 00000000 08:06 416524 /usr/lib/cuneiform/libpass2.so
b6fdc000-b6fdd000 r--p 0000d000 08:06 416524 /usr/lib/cuneiform/libpass2.so
b6fdd000-b6fde000 rw-p 0000e000 08:06 416524 /usr/lib/cuneiform/libpass2.soАварийный останов

affects: ubuntu → cuneiform (Ubuntu)
Changed in cuneiform (Ubuntu):
status: New → Confirmed
importance: Undecided → Medium
Revision history for this message
Daniel Koć (kocio) wrote :

I had crashing problems under 10.10 too, but with newest code from repository it works with no such problems. We need probably newer packages right now - even if they would be not perfect, they are at least perfectly usable.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cuneiform - 1.1.0+dfsg-6

---------------
cuneiform (1.1.0+dfsg-6) unstable; urgency=medium

  [ Andreas Beckmann ]
  * QA upload.
  * Incorporate changes from Ubuntu.
  * gcc-6.patch: New, fix more FTBFS issues with GCC 6.
  * typos.patch: New, fix typos.

  [ Bhavani Shankar ]
  * Fix double FTBFS with unsigned char and GCC 6. (LP: #791305)
    (Closes: #787207, #837360)
  * Incorporate patch to fix buffer overflow during crash. Thanks
    Sławomir Nizio. Hopefully fix (LP: #978183), (LP: #593409), (LP: #791864),
    (LP: #996309). (Closes: #781354)

 -- Andreas Beckmann <email address hidden> Sun, 23 Apr 2017 14:02:07 +0200

Changed in cuneiform (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.