Package: gnuplot
Version: 4.2.2-1.1
Severity: normal

gnuplot crashes when setting a label which uses formatting characters
that goes off the page.

Following gnuplot script can reproduce the error reliably on my system:

----
m = 1.2345678901                                                                
set label sprintf('%10g %10g %10g %10g %10g %10g %10g %10g %10g %10g %10g 
%10g', m, m, m, m, m, m, m, m, m, m, m, m) at graph 0.05, 0.95                  
     
                                                                                
plot sin(x)
----

And the error message I get when the gnuplot crashes is:

----
*** glibc detected *** gnuplot: double free or corruption (!prev): 0x09429198 
***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6[0xb73de8f5]
/lib/i686/cmov/libc.so.6(cfree+0x90)[0xb73e2360]
gnuplot[0x806c8d3]
gnuplot[0x809417e]
gnuplot[0x806cbf3]
gnuplot[0x806d01f]
gnuplot[0x80a2699]
gnuplot[0x80bcb94]
gnuplot[0x80c27dd]
gnuplot[0x806230f]
gnuplot[0x809b832]
gnuplot[0x80a2d15]
/lib/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7389450]
gnuplot(gdImagePolygon+0x3d)[0x8058161]
======= Memory map: ========
08048000-08164000 r-xp 00000000 fe:00 25146568   /usr/bin/gnuplot
08164000-08175000 rw-p 0011b000 fe:00 25146568   /usr/bin/gnuplot
08175000-08180000 rw-p 08175000 00:00 0 
0940f000-09430000 rw-p 0940f000 00:00 0          [heap]
b6b00000-b6b21000 rw-p b6b00000 00:00 0 
b6b21000-b6c00000 ---p b6b21000 00:00 0 
b6c8c000-b6c8f000 rw-p b6c8c000 00:00 0 
b6c8f000-b6c90000 r-xp 00000000 fe:00 25138323   /usr/lib/libxcb-xlib.so.0.0.0
b6c90000-b6c91000 rw-p 00000000 fe:00 25138323   /usr/lib/libxcb-xlib.so.0.0.0
b6c91000-b6c92000 rw-p b6c91000 00:00 0 
b6c92000-b6c96000 r-xp 00000000 fe:00 25134092   /usr/lib/libXdmcp.so.6.0.0
b6c96000-b6c97000 rw-p 00003000 fe:00 25134092   /usr/lib/libXdmcp.so.6.0.0
b6c97000-b6c99000 r-xp 00000000 fe:00 25135082   /usr/lib/libXau.so.6.0.0
b6c99000-b6c9a000 rw-p 00001000 fe:00 25135082   /usr/lib/libXau.so.6.0.0
b6c9a000-b6ca2000 r-xp 00000000 fe:00 25137119   /usr/lib/libXcursor.so.1.0.2
b6ca2000-b6ca3000 rw-p 00007000 fe:00 25137119   /usr/lib/libXcursor.so.1.0.2
b6ca3000-b6ca8000 r-xp 00000000 fe:00 25133538   /usr/lib/libXrandr.so.2.1.0
b6ca8000-b6ca9000 rw-p 00005000 fe:00 25133538   /usr/lib/libXrandr.so.2.1.0
b6ca9000-b6caa000 rw-p b6ca9000 00:00 0 
b6caa000-b6cb1000 r-xp 00000000 fe:00 25137051   /usr/lib/libXi.so.6.0.0
b6cb1000-b6cb2000 rw-p 00006000 fe:00 25137051   /usr/lib/libXi.so.6.0.0
b6cb2000-b6cbf000 r-xp 00000000 fe:00 25134642   /usr/lib/libXext.so.6.4.0
b6cbf000-b6cc0000 rw-p 0000c000 fe:00 25134642   /usr/lib/libXext.so.6.4.0
b6cc0000-b6cc4000 r-xp 00000000 fe:00 25136536   /usr/lib/libXfixes.so.3.1.0
b6cc4000-b6cc5000 rw-p 00003000 fe:00 25136536   /usr/lib/libXfixes.so.3.1.0
b6cc5000-b6cc7000 r-xp 00000000 fe:00 25134083   /usr/lib/libXdamage.so.1.1.0
b6cc7000-b6cc8000 rw-p 00001000 fe:00 25134083   /usr/lib/libXdamage.so.1.1.0
b6cc8000-b6cca000 r-xp 00000000 fe:00 25134038   /usr/lib/libXcomposite.so.1.0.0
b6cca000-b6ccb000 rw-p 00001000 fe:00 25134038   /usr/lib/libXcomposite.so.1.0.0
b6ccb000-b6ccc000 rw-p b6ccb000 00:00 0 
b6ccc000-b6cf2000 r-xp 00000000 fe:00 25137402   /usr/lib/libpcre.so.3.12.1
b6cf2000-b6cf3000 rw-p 00025000 fe:00 25137402   /usr/lib/libpcre.so.3.12.1
b6cf3000-b6d0a000 r-xp 00000000 fe:00 6946932    /lib/libselinux.so.1
b6d0a000-b6d0c000 rw-p 00016000 fe:00 6946932    /lib/libselinux.so.1
b6d0c000-b6d34000 r-xp 00000000 fe:00 25135445   /usr/lib/libpixman-1.so.0.10.0
b6d34000-b6d35000 rw-p 00027000 fe:00 25135445   /usr/lib/libpixman-1.so.0.10.0
b6d35000-b6e20000 r-xp 00000000 fe:00 12501046   /usr/lib/libX11.so.6.2.0
b6e20000-b6e23000 rw-p 000eb000 fe:00 12501046   /usr/lib/libX11.so.6.2.0
b6e23000-b6e24000 rw-p b6e23000 00:00 0 
b6e24000-b6e2c000 r-xp 00000000 fe:00 25134306   /usr/lib/libXrender.so.1.3.0
b6e2c000-b6e2d000 rw-p 00007000 fe:00 25134306   /usr/lib/libXrender.so.1.3.0
b6e2d000-b6e2e000 rw-p b6e2d000 00:00 0 
b6e2e000-b6e45000 r-xp 00000000 fe:00 25140727   /usr/lib/libxcb.so.1.0.0
b6e45000-b6e46000 rw-p 00016000 fe:00 25140727   /usr/lib/libxcb.so.1.0.0
b6e46000-b6e4c000 r-xp 00000000 fe:00 12501194   /usr/lib/libxcb-render.so.0.0.0
b6e4c000-b6e4d000 rw-p 00005000 fe:00 12501194   /usr/lib/libxcb-render.so.0.0.0
b6e4d000-b6e50000 r-xp 00000000 fe:00 12501197   
/usr/lib/libxcb-render-util.so.0.0.0
b6e50000-b6e51000 rw-p 00002000 fe:00 12501197   
/usr/lib/libxcb-render-util.so.0.0.0
b6e51000-b6e7a000 r-xp 00000000 fe:00 12501155   /usr/lib/libfontconfig.so.1.3.0
b6e7a000-b6e7b000 rw-p 00029000 fe:00 12501155   /usr/lib/libfontconfig.so.1.3.0
b6e7b000-b6ea1000 zsh: abort      gnuplot -persist gnuplot-crash-test.plt
----

This error doesn't appear to be that critical since no one would
actually want to set a label so that it goes off the page, but in that
case, gnuplot should output an appropriate error message rather than
crashing with some memory error.

Regards,

Andrzej


-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (650, 'testing'), (600, 'unstable'), (550, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.25-2-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnuplot depends on:
ii  gnuplot-nox                   4.2.2-1.1  A command-line driven interactive 
ii  gnuplot-x11                   4.2.2-1.1  X11-terminal driver for gnuplot

gnuplot recommends no packages.

Versions of packages gnuplot suggests:
pn  gnuplot-doc                   <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to