Your message dated Mon, 06 Apr 2009 21:32:28 +0200
with message-id <[email protected]>
and subject line Package kpdf removed from Debian
has caused the Debian Bug report #421306,
regarding kpdf: excessive resource usage on malformed pdf
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
421306: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=421306
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: kpdf
Version: 4:3.5.6-2
Severity: normal
I found that certain .pdf files can lead to memory exhaustion when
opened with kpdf, and sometimes in gv.
The attached pdf file was created by openoffice [1], and when opened
with xpdf it shows an empty page. However kpdf start using huge
amounts of memory when trying to open the page (2049M of virt memory,
and 1023M of RES memory).
The problem occured on Athlon64, with 2Gb of physical memory. If swap
is disactivated, kpdf makes the system freeze for a few minutes (till
the OOM killer starts killing some apps, but as usual it kills
everything [even X]).
If swap is available kpdf uses 2049MB of virt. memory, the system load
rises, and it uses approx. 900MB of swap.
I consider that for a .pdf of 1k, the amount of memory used by kpdf is
insane, and kpdf shouldn't blindly accept any size read from a pdf.
1]
The .pdf was created by selecting 3 charts in an OpenSpreadsheet
document, and using 'Export as PDF'. The charts weren't exported
correctly, but the bigger problem is that opening it in kpdf causes a
DoS. Tthe .pdf wasn't manipulated in any way, it is exactly as
openoffice created it.
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.20-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages kpdf depends on:
ii kdelibs4c2a 4:3.5.6.r1.dfsg.1-4 core libraries and binaries for al
ii libc6 2.5-4 GNU C Library: Shared libraries
ii libfontconfig1 2.4.2-1.2 generic font configuration library
ii libfreetype6 2.2.1-5 FreeType 2 font engine, shared lib
ii libgcc1 1:4.1.2-4 GCC support library
ii libjpeg62 6b-13 The Independent JPEG Group's JPEG
ii libpaper1 1.1.21 Library for handling paper charact
ii libqt3-mt 3:3.3.7-4+b1 Qt GUI Library (Threaded runtime v
ii libstdc++6 4.1.2-4 The GNU Standard C++ Library v3
ii libx11-6 2:1.0.3-7 X11 client-side library
ii libxft2 2.1.12-2 FreeType-based font drawing librar
ii zlib1g 1:1.2.3-13 compression library - runtime
Versions of packages kpdf recommends:
ii kghostview 4:3.5.6-2 PostScript viewer for KDE
-- no debconf information
oom.pdf
Description: Adobe PDF document
--- End Message ---
--- Begin Message ---
Version: 4:3.5.9-3+rm
Hi,
You filed the bug http://bugs.debian.org/421306
in the Debian BTS against the package kpdf.
Debian has switched to KDE 4 in unstable and kpdf
does not exist in KDE 4. Therefore, I am closing this bug as fixed
in *unstable*. The bug will remain open for stable since it is
shipping KDE 3.5.
For viewing PDF files in KDE 4 you can use okular.
Ana
--- End Message ---