scanimage --batch crashed with SIGSEGV in gt68xx_line_reader_free_delays()

Bug #604798 reported by Ben Harris on 2010-07-12
26
This bug affects 4 people
Affects Status Importance Assigned to Milestone
sane-backends (Ubuntu)
Medium
Unassigned

Bug Description

I'm using SANE with a Mustek BearPaw 1200CU Plus scanner, using the firmware from <http://www.meier-geinitz.de/sane/gt68xx-backend/firmware/PS1Gfw.usb> (MD5 f2f275c5a8ad5dbdc43793f046612417). When I run "scanimage --batch", scanimage segfaults after scanning the first page and returning the head to the home position:

bjh21@sole:~$ scanimage --batch
Scanning -1 pages, incrementing by 1, numbering from 1
Scanning page 1
Scanned page 1. (scanner status = 5)
Scanning page 2
scanimage: sane_start: Invalid argument
Segmentation fault (core dumped)

Scanning multiple pages in succession using multiple invocations of "scanimage" works correctly.

This bug differs from #117577 in that in my case the scanning head moves back to the home position and scanimage segfaults, neither of which happened there. Otherwise it seems very similar.

ProblemType: Crash
DistroRelease: Ubuntu 10.04
Package: sane-utils 1.0.20-13ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-23.37-generic 2.6.32.15+drm33.5
Uname: Linux 2.6.32-23-generic i686
NonfreeKernelModules: wl
Architecture: i386
Date: Mon Jul 12 21:57:57 2010
DistributionChannelDescriptor:
 # This is a distribution channel descriptor
 # For more information see http://wiki.ubuntu.com/DistributionChannelDescriptor
 canonical-oem-motts-20100121-3
EcryptfsInUse: Yes
ExecutablePath: /usr/bin/scanimage
InstallationMedia: Ubuntu GNU/Linux 9.10 "Karmic" - Build i386 LIVE Binary 20100121-21:52
ProcCmdline: scanimage --batch
ProcEnviron:
 SHELL=/bin/bash
 LANG=en_GB.utf8
SegvAnalysis:
 Segfault happened at: 0xde31c9 <gt68xx_line_reader_free_delays+9>: mov 0x88(%eax),%edx
 PC (0x00de31c9) ok
 source "0x88(%eax)" (0x00000088) not located in a known VMA region (needed readable region)!
 destination "%edx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: sane-backends
StacktraceTop:
 gt68xx_line_reader_free_delays (reader=0x0) at gt68xx_mid.c:957
 gt68xx_line_reader_free (reader=0x0) at gt68xx_mid.c:1153
 gt68xx_scanner_stop_scan (scanner=0x9243128)
 sane_gt68xx_cancel (handle=0x9243128) at gt68xx.c:2108
 sane_dll_cancel (handle=0x922a348) at dll.c:1263
Title: scanimage crashed with SIGSEGV in gt68xx_line_reader_free_delays()
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

Ben Harris (bjh21.me.uk) wrote :
visibility: private → public

StacktraceTop:
 gt68xx_line_reader_free_delays (reader=0x0) at gt68xx_mid.c:957
 gt68xx_line_reader_free (reader=0x0) at gt68xx_mid.c:1153
 gt68xx_scanner_stop_scan (scanner=0x9243128)
 sane_gt68xx_cancel (handle=0x9243128) at gt68xx.c:2108
 sane_dll_cancel (handle=0x922a348) at dll.c:1263

Changed in sane-backends (Ubuntu):
importance: Undecided → Medium
tags: removed: need-i386-retrace
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in sane-backends (Ubuntu):
status: New → Confirmed
Ben (pumrum) wrote :

confirmed on Ubuntu 14.04.03 fully patched as of 27 Jan 2016 with Plustek OpticSlim M12 (networks scanner)

scanimage (sane-backends) 1.0.23; backend version 1.0.23

scanimage -d gt68xx --batch="scanned_image-%d.tiff" --batch-prompt --format=tiff
Scanning -1 pages, incrementing by 1, numbering from 1
Place document no. 1 on the scanner.
Press <RETURN> to continue.
Press Ctrl + D to terminate.

Scanning page 1
Scanned page 1. (scanner status = 5)
Place document no. 2 on the scanner.
Press <RETURN> to continue.
Press Ctrl + D to terminate.

Scanning page 2
scanimage: sane_start: Invalid argument
Segmentation fault (core dumped)

The scanner feeds about 1mm of the second page then segfaults

Ben (pumrum) wrote :

confirmed on Ubuntu MATE 16.04 fully patched as of 30 Aug 2016 with Plustek OpticSlim M12 (networks scanner)

scanimage (sane-backends) 1.0.25git; backend version 1.0.25

scanimage -d gt68xx --batch="scanned_image-%d.tiff" --batch-prompt --format=tiff
Scanning -1 pages, incrementing by 1, numbering from 1
Place document no. 1 on the scanner.
Press <RETURN> to continue.
Press Ctrl + D to terminate.

Scanning page 1
Scanned page 1. (scanner status = 5)
Place document no. 2 on the scanner.
Press <RETURN> to continue.
Press Ctrl + D to terminate.

Scanning page 2
scanimage: sane_start: Invalid argument
Segmentation fault (core dumped)

The scanner feeds about 1mm of the second page then segfaults

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers