Bug#728479: ipe: buffer overflow! I cannot complete snapping examples 2, 3, and 6

Francesco Poli (wintermute) invernomuto at paranoici.org
Fri Nov 1 17:10:33 UTC 2013


Package: ipe
Version: 7.1.3-1
Severity: important

Hello and thanks for maintaining this fantastic vector drawing editor!

While studying its manual, I encountered an issue that seems to be
related to angular snapping.
I cannot complete the following snapping examples: 2, 3, and 6.
These three examples all involve angular snapping in modes other than
the default 45 degrees mode (I am not sure this is the key element
to trigger the issue, but it could be...).
As you sure know, these examples are described in
/usr/share/ipe/7.1.3/doc/manual_26.html

While attempting to follow the instructions of any of the above
mentioned examples, I cannot complete the exercise, since
ipe aborts, as soon as a buffer overflow is detected.

For instance, while doing example 3, I can follow the istructions up
to hitting [F1]. Then, as soon as I move the mouse a little, ipe aborts
and writes the following backtrace:

*** buffer overflow detected ***: ipe terminated
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f56beb38dc7]
/lib/x86_64-linux-gnu/libc.so.6(+0xfbd80)[0x7f56beb37d80]
/lib/x86_64-linux-gnu/libc.so.6(+0xfb209)[0x7f56beb37209]
/lib/x86_64-linux-gnu/libc.so.6(__printf_fp+0x1ce3)[0x7f56bea89f63]
/lib/x86_64-linux-gnu/libc.so.6(_IO_vfprintf+0x1136)[0x7f56bea83b26]
/lib/x86_64-linux-gnu/libc.so.6(__vsprintf_chk+0x97)[0x7f56beb372a7]
/lib/x86_64-linux-gnu/libc.so.6(__sprintf_chk+0x7d)[0x7f56beb371ed]
ipe[0x411f61]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(_ZN7QWidget5eventEP6QEvent+0xbf5)[0x7f56c0230eb5]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(_ZN19QApplicationPrivate13notify_helperEP7QObjectP6QEvent+0x8c)[0x7f56c01e175c]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(_ZN12QApplication6notifyEP7QObjectP6QEvent+0x3ad)[0x7f56c01e7f0d]
/usr/lib/x86_64-linux-gnu/libQtCore.so.4(_ZN16QCoreApplication14notifyInternalEP7QObjectP6QEvent+0x6d)[0x7f56bfcb233d]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(_ZN19QApplicationPrivate14sendMouseEventEP7QWidgetP11QMouseEventS1_S1_PS1_R8QPointerIS0_Eb+0x153)[0x7f56c01e76c3]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(+0x24041b)[0x7f56c025941b]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(_ZN12QApplication15x11ProcessEventEP7_XEvent+0x5fc)[0x7f56c0257e8c]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(+0x2667e2)[0x7f56c027f7e2]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_context_dispatch+0x146)[0x7f56bdc71ea6]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x481f8)[0x7f56bdc721f8]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_context_iteration+0x2c)[0x7f56bdc7229c]
/usr/lib/x86_64-linux-gnu/libQtCore.so.4(_ZN20QEventDispatcherGlib13processEventsE6QFlagsIN10QEventLoop17ProcessEventsFlagEE+0x86)[0x7f56bfcdf4d6]
/usr/lib/x86_64-linux-gnu/libQtGui.so.4(+0x266896)[0x7f56c027f896]
/usr/lib/x86_64-linux-gnu/libQtCore.so.4(_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEE+0x2f)[0x7f56bfcb0f9f]
/usr/lib/x86_64-linux-gnu/libQtCore.so.4(_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE+0x175)[0x7f56bfcb1295]
/usr/lib/x86_64-linux-gnu/libQtCore.so.4(_ZN16QCoreApplication4execEv+0x8b)[0x7f56bfcb68db]
ipe[0x40fd29]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0xbf88)[0x7f56c0ccff88]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0x166cf)[0x7f56c0cda6cf]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0xc3cd)[0x7f56c0cd03cd]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(lua_call+0x25)[0x7f56c0ccc295]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0x1ffcc)[0x7f56c0ce3fcc]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0xbf88)[0x7f56c0ccff88]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0x166cf)[0x7f56c0cda6cf]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0xc3cd)[0x7f56c0cd03cd]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0xb6bb)[0x7f56c0ccf6bb]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(+0xc55a)[0x7f56c0cd055a]
/usr/lib/x86_64-linux-gnu/liblua5.1.so.0(lua_pcall+0x4d)[0x7f56c0ccc31d]
ipe[0x40fb49]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5)[0x7f56bea5d995]
ipe[0x40fc39]
======= Memory map: ========
00400000-0042b000 r-xp 00000000 fe:04 64861                              /usr/bin/ipe
0062a000-0062b000 r--p 0002a000 fe:04 64861                              /usr/bin/ipe
0062b000-0062d000 rw-p 0002b000 fe:04 64861                              /usr/bin/ipe
0077a000-00c02000 rw-p 00000000 00:00 0                                  [heap]
7f56b4d00000-7f56b4d52000 r--p 00000000 fe:04 145945                     /usr/share/fonts/truetype/dejavu/DejaVuSansMono.ttf
7f56b4d52000-7f56b4ee6000 rw-p 00000000 00:00 0 
7f56b4ee6000-7f56b5130000 rw-s 00000000 00:04 2424839                    /SYSV00000000 (deleted)
7f56b5130000-7f56b51e5000 r--p 00000000 fe:04 145781                     /usr/share/fonts/truetype/dejavu/DejaVuSans.ttf
7f56b51e5000-7f56b51f0000 r-xp 00000000 fe:04 196075                     /usr/lib/x86_64-linux-gnu/libjbig.so.0.0.0
7f56b51f0000-7f56b53f0000 ---p 0000b000 fe:04 196075                     /usr/lib/x86_64-linux-gnu/libjbig.so.0.0.0
7f56b53f0000-7f56b53f3000 rw-p 0000b000 fe:04 196075                     /usr/lib/x86_64-linux-gnu/libjbig.so.0.0.0
7f56b53f3000-7f56b5456000 r-xp 00000000 fe:04 193924                     /usr/lib/x86_64-linux-gnu/libtiff.so.4.3.6
7f56b5456000-7f56b5655000 ---p 00063000 fe:04 193924                     /usr/lib/x86_64-linux-gnu/libtiff.so.4.3.6
7f56b5655000-7f56b5658000 r--p 00062000 fe:04 193924                     /usr/lib/x86_64-linux-gnu/libtiff.so.4.3.6
7f56b5658000-7f56b5659000 rw-p 00065000 fe:04 193924                     /usr/lib/x86_64-linux-gnu/libtiff.so.4.3.6
7f56b5659000-7f56b5660000 r-xp 00000000 fe:04 743588                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtiff.so
7f56b5660000-7f56b585f000 ---p 00007000 fe:04 743588                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtiff.so
7f56b585f000-7f56b5860000 r--p 00006000 fe:04 743588                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtiff.so
7f56b5860000-7f56b5861000 rw-p 00007000 fe:04 743588                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtiff.so
7f56b5861000-7f56b5866000 r-xp 00000000 fe:04 743457                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtga.so
7f56b5866000-7f56b5a65000 ---p 00005000 fe:04 743457                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtga.so
7f56b5a65000-7f56b5a66000 r--p 00004000 fe:04 743457                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtga.so
7f56b5a66000-7f56b5a67000 rw-p 00005000 fe:04 743457                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqtga.so
7f56b5a67000-7f56b5abb000 r-xp 00000000 fe:04 194069                     /usr/lib/x86_64-linux-gnu/libQtSvg.so.4.8.6
7f56b5abb000-7f56b5cbb000 ---p 00054000 fe:04 194069                     /usr/lib/x86_64-linux-gnu/libQtSvg.so.4.8.6
7f56b5cbb000-7f56b5cbd000 r--p 00054000 fe:04 194069                     /usr/lib/x86_64-linux-gnu/libQtSvg.so.4.8.6
7f56b5cbd000-7f56b5cbe000 rw-p 00056000 fe:04 194069                     /usr/lib/x86_64-linux-gnu/libQtSvg.so.4.8.6
7f56b5cbe000-7f56b5cc3000 r-xp 00000000 fe:04 226308                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqsvg.so
7f56b5cc3000-7f56b5ec2000 ---p 00005000 fe:04 226308                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqsvg.so
7f56b5ec2000-7f56b5ec3000 r--p 00004000 fe:04 226308                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqsvg.so
7f56b5ec3000-7f56b5ec4000 rw-p 00005000 fe:04 226308                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqsvg.so
7f56b5ec4000-7f56b5ef9000 r-xp 00000000 fe:04 193989                     /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19
7f56b5ef9000-7f56b60f9000 ---p 00035000 fe:04 193989                     /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19
7f56b60f9000-7f56b60fa000 r--p 00035000 fe:04 193989                     /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19
7f56b60fa000-7f56b60fb000 rw-p 00036000 fe:04 193989                     /usr/lib/x86_64-linux-gnu/liblcms.so.1.0.19
7f56b60fb000-7f56b60fe000 rw-p 00000000 00:00 0 
7f56b60fe000-7f56b6184000 r-xp 00000000 fe:04 194001                     /usr/lib/x86_64-linux-gnu/libmng.so.1.1.0.10
7f56b6184000-7f56b6383000 ---p 00086000 fe:04 194001                     /usr/lib/x86_64-linux-gnu/libmng.so.1.1.0.10
7f56b6383000-7f56b6388000 rw-p 00085000 fe:04 194001                     /usr/lib/x86_64-linux-gnu/libmng.so.1.1.0.10
7f56b6388000-7f56b638d000 r-xp 00000000 fe:04 743601                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqmng.so
7f56b638d000-7f56b658d000 ---p 00005000 fe:04 743601                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqmng.so
7f56b658d000-7f56b658e000 r--p 00005000 fe:04 743601                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqmng.so
7f56b658e000-7f56b658f000 rw-p 00006000 fe:04 743601                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqmng.so
7f56b658f000-7f56b65c9000 r-xp 00000000 fe:04 195552                     /usr/lib/x86_64-linux-gnu/libjpeg.so.8.4.0
7f56b65c9000-7f56b67c8000 ---p 0003a000 fe:04 195552                     /usr/lib/x86_64-linux-gnu/libjpeg.so.8.4.0
7f56b67c8000-7f56b67c9000 rw-p 00039000 fe:04 195552                     /usr/lib/x86_64-linux-gnu/libjpeg.so.8.4.0
7f56b67c9000-7f56b67d0000 r-xp 00000000 fe:04 743604                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqjpeg.so
7f56b67d0000-7f56b69cf000 ---p 00007000 fe:04 743604                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqjpeg.so
7f56b69cf000-7f56b69d0000 r--p 00006000 fe:04 743604                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqjpeg.so
7f56b69d0000-7f56b69d1000 rw-p 00007000 fe:04 743604                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqjpeg.so
7f56b69d1000-7f56b69d8000 r-xp 00000000 fe:04 743594                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqico.so
7f56b69d8000-7f56b6bd7000 ---p 00007000 fe:04 743594                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqico.so
7f56b6bd7000-7f56b6bd8000 r--p 00006000 fe:04 743594                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqico.so
7f56b6bd8000-7f56b6bd9000 rw-p 00007000 fe:04 743594                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqico.so
7f56b6bd9000-7f56b6be0000 r-xp 00000000 fe:04 743598                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqgif.so
7f56b6be0000-7f56b6ddf000 ---p 00007000 fe:04 743598                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqgif.so
7f56b6ddf000-7f56b6de0000 r--p 00006000 fe:04 743598                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqgif.so
7f56b6de0000-7f56b6de1000 rw-p 00007000 fe:04 743598                     /usr/lib/x86_64-linux-gnu/qt4/plugins/imageformats/libqgif.so
7f56b6de1000-7f56b6df0000 r-xp 00000000 fe:04 195608                     /usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7f56b6df0000-7f56b6fef000 ---p 0000f000 fe:04 195608                     /usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7f56b6fef000-7f56b6ff0000 r--p 0000e000 fe:04 195608                     /usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7f56b6ff0000-7f56b6ff1000 rw-p 0000f000 fe:04 195608                     /usr/lib/x86_64-linux-gnu/libXi.so.6.1.0
7f56b6ff1000-7f56b6ff3000 r-xp 00000000 fe:04 194763                     /usr/lib/x86_64-linux-gnu/libXinerama.so.1.0.0
7f56b6ff3000-7f56b71f2000 ---p 00002000 fe:04 194763                     /usr/lib/x86_64-linux-gnu/libXinerama.so.1.0.0
7f56b71f2000-7f56b71f3000 r--p 00001000 fe:04 194763                     /usr/lib/x86_64-linux-gnu/libXinerama.so.1.0.0
7f56b71f3000-7f56b71f4000 rw-p 00002000 fe:04 194763                     /usr/lib/x86_64-linux-gnu/libXinerama.so.1.0.0
7f56b71f4000-7f56b71fe000 r-xp 00000000 fe:04 195439                     /usr/lib/x86_64-linux-gnu/libXcursor.so.1.0.2
7f56b71fe000-7f56b73fd000 ---p 0000a000 fe:04 195439                     /usr/lib/x86_64-linux-gnu/libXcursor.so.1.0.2
7f56b73fd000-7f56b73fe000 r--p 00009000 fe:04 195439                     /usr/lib/x86_64-linux-gnu/libXcursor.so.1.0.2
7f56b73fe000-7f56b73ff000 rw-p 0000a000 fe:04 195439                     /usr/lib/x86_64-linux-gnu/libXcursor.so.1.0.2
7f56b73ff000-7f56b7408000 r-xp 00000000 fe:04 195548                     /usr/lib/x86_64-linux-gnu/libXrandr.so.2.2.0
7f56b7408000-7f56b7607000 ---p 00009000 fe:04 195548                     /usr/lib/x86_64-linux-gnu/libXrandr.so.2.2.0
7f56b7607000-7f56b7608000 r--p 00008000 fe:04 195548                     /usr/lib/x86_64-linux-gnu/libXrandr.so.2.2.0
7f56b7608000-7f56b7609000 rw-p 00009000 fe:04 195548                     /usr/lib/x86_64-linux-gnu/libXrandr.so.2.2.0
7f56b7617000-7f56b7618000 rw-p 00000000 00:00 0 
7f56b7618000-7f56b761f000 rw-s 00000000 00:04 2523144                    /SYSV00000000 (deleted)
7f56b761f000-7f56b762a000 r--s 00000000 fe:05 449922                     /var/cache/fontconfig/6aa41aa22e18b8fa06a12da28ea9c28b-le64.cache-3
7f56b762a000-7f56b762b000 r--s 00000000 fe:05 433856                     /var/cache/fontconfig/c05880de57d1f5e948fdfacc138775d9-le64.cache-3
7f56b762b000-7f56b7634000 r--s 00000000 fe:05 433831                     /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-le64.cache-3
7f56b7634000-7f56b763a000 r--s 00000000 fe:05 482472                     /var/cache/fontconfig/6eb3985aa4124903f6ff08ba781cd364-le64.cache-3
7f56b763a000-7f56b7644000 r--s 00000000 fe:05 433852                     /var/cache/fontconfig/6d41288fd70b0be22e8c3a91e032eec0-le64.cache-3
7f56b7644000-7f56b7647000 r--s 00000000 fe:05 433851                     /var/cache/fontconfig/de156ccd2eddbdc19d37a45b8b2aac9c-le64.cache-3
7f56b7647000-7f56b7648000 r--s 00000000 fe:05 433850                     /var/cache/fontconfig/9c956a7723ca69a44b382d9179c9802f-le64.cache-3
7f56b7648000-7f56b7649000 r--s 00000000 fe:05 433849                     /var/cache/fontconfig/5d1cca7074f29429a8d18692746c2426-le64.cache-3
7f56b7649000-7f56b764a000 r--s 00000000 fe:05 449838                     /var/cache/fontconfig/4794a0821666d79190d59a36cb4f44b5-le64.cache-3
7f56b764a000-7f56b764b000 r--s 00000000 fe:05 433847                     /var/cache/fontconfig/9eae20f1ff8cc0a7d125749e875856bd-le64.cache-3
7f56b764b000-7f56b764d000 r--s 00000000 fe:05 433846                     /var/cache/fontconfig/bf2c1853a9e9b00bb02fe2e9bcf1e201-le64.cache-3
7f56b764d000-7f56b7650000 r--s 00000000 fe:05 433845                     /var/cache/fontconfig/c57959a16110560c8d0fcea73374aeeb-le64.cache-3
7f56b7650000-7f56b7655000 r--s 00000000 fe:05 482046                     /var/cache/fontconfig/3047814df9a2f067bd2d96a2b9c36e5a-le64.cache-3
7f56b7655000-7f56b7659000 r--s 00000000 fe:05 449813                     /var/cache/fontconfig/bf3b770c553c462765856025a94f1ce6-le64.cache-3
7f56b7659000-7f56b765c000 r--s 00000000 fe:05 433843                     /var/cache/fontconfig/14d493b97896515cad3840ba4896e372-le64.cache-3
7f56b765c000-7f56b765d000 r--s 00000000 fe:05 433842                     /var/cache/fontconfig/89034621ae2a8922916bb6bfa5799546-le64.cache-3
7f56b765d000-7f56b7660000 r--s 00000000 fe:05 433841                     /var/cache/fontconfig/e49e89034d371f0f9de17aab02136486-le64.cache-3
7f56b7660000-7f56b7662000 r--s 00000000 fe:05 433840                     /var/cache/fontconfig/4b14b093aebc79c320de5e86ae1d3314-le64.cache-3
7f56b7662000-7f56b7673000 r--s 00000000 fe:05 433839                     /var/cache/fontconfig/d52a8644073d54c13679302ca1180695-le64.cache-3
7f56b7673000-7f56b767a000 r--s 00000000 fe:05 433737                     /var/cache/fontconfig/3f7329c5293ffd510edef78f73874cfd-le64.cache-3
7f56b767a000-7f56b767c000 r--s 00000000 fe:05 433826                     /var/cache/fontconfig/65f976e5259cbe6dc7697b8648396239-le64.cache-3
7f56b767c000-7f56b7686000 r--s 00000000 fe:05 433812                     /var/cache/fontconfig/d589a48862398ed80a3d6066f4f56f4c-le64.cache-3
7f56b7686000-7f56b7690000 r--s 00000000 fe:05 433782                     /var/cache/fontconfig/83bf95040141907cd45bb53cf7c1c148-le64.cache-3
7f56b7690000-7f56b76b7000 r--s 00000000 fe:01 25755653                   /home/frx/.cache/fontconfig/cabbd14511b9e8a55e92af97fb3a0461-le64.cache-3
7f56b76b7000-7f56b8826000 r-xp 00000000 fe:04 323346                     /usr/lib/x86_64-linux-gnu/libicudata.so.48.1.1
7f56b8826000-7f56b8a25000 ---p 0116f000 fe:04 323346                     /usr/lib/x86_64-linux-gnu/libicudata.so.48.1.1
7f56b8a25000-7f56b8a26000 r--p 0116e000 fe:04 323346                     /usr/lib/x86_64-linux-gnu/libicudata.so.48.1.1
7f56b8a26000-7f56b8a27000 rw-p 0116f000 fe:04 323346                     /usr/lib/x86_64-linux-gnu/libicudata.so.48.1.1
7f56b8a27000-7f56b8b7e000 r-xp 00000000 fe:04 195193                     /usr/lib/x86_64-linux-gnu/libicuuc.so.48.1.1
7f56b8b7e000-7f56b8d7e000 ---p 00157000 fe:04 195193                     /usr/lib/x86_64-linux-gnu/libicuuc.so.48.1.1
7f56b8d7e000-7f56b8d8e000 r--p 00157000 fe:04 195193                     /usr/lib/x86_64-linux-gnu/libicuuc.so.48.1.1
7f56b8d8e000-7f56b8d8f000 rw-p 00167000 fe:04 195193                     /usr/lib/x86_64-linux-gnu/libicuuc.so.48.1.1
7f56b8d8f000-7f56b8d93000 rw-p 00000000 00:00 0 
7f56b8d93000-7f56b8f4e000 r-xp 00000000 fe:04 194808                     /usr/lib/x86_64-linux-gnu/libicui18n.so.48.1.1
7f56b8f4e000-7f56b914e000 ---p 001bb000 fe:04 194808                     /usr/lib/x86_64-linux-gnu/libicui18n.so.48.1.1
7f56b914e000-7f56b915a000 r--p 001bb000 fe:04 194808                     /usr/lib/x86_64-linux-gnu/libicui18n.so.48.1.1
7f56b915a000-7f56b915b000 rw-p 001c7000 fe:04 194808                     /usr/lib/x86_64-linux-gnu/libicui18n.so.48.1.1
7f56b915b000-7f56b915e000 r-xp 00000000 fe:04 212480                     /usr/lib/x86_64-linux-gnu/gconv/UTF-16.so
7f56b915e000-7f56b935d000 ---p 00003000 fe:04 212480                     /usr/lib/x86_64-linux-gnu/gconv/UTF-16.so
7f56b935d000-7f56b935e000 r--p 00002000 fe:04 212480                     /usr/lib/x86_64-linux-gnu/gconv/UTF-16.so
7f56b935e000-7f56b935f000 rw-p 00003000 fe:04 212480                     /usr/lib/x86_64-linux-gnu/gconv/UTF-16.so
7f56b935f000-7f56b9364000 r-xp 00000000 fe:04 194267                     /usr/lib/x86_64-linux-gnu/libXxf86vm.so.1.0.0
7f56b9364000-7f56b9563000 ---p 00005000 fe:04 194267                     /usr/lib/x86_64-linux-gnu/libXxf86vm.so.1.0.0
7f56b9563000-7f56b9564000 r--p 00004000 fe:04 194267                     /usr/lib/x86_64-linux-gnu/libXxf86vm.so.1.0.0
7f56b9564000-7f56b9565000 rw-p 00005000 fe:04 194267                     /usr/lib/x86_64-linux-gnu/libXxf86vm.so.1.0.0
7f56b9565000-7f56b957b000 r-xp 00000000 fe:04 193951                     /usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7f56b957b000-7f56b977a000 ---p 00016000 fe:04 193951                     /usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7f56b977a000-7f56b977c000 r--p 00015000 fe:04 193951                     /usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7f56b977c000-7f56b977d000 rw-p 00017000 fe:04 193951                     /usr/lib/x86_64-linux-gnu/libxcb-glx.so.0.0.0
7f56b977d000-7f56b9782000 r-xp 00000000 fe:04 194199                     /usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7f56b9782000-7f56b9981000 ---p 00005000 fe:04 194199                     /usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7f56b9981000-7f56b9982000 r--p 00004000 fe:04 194199                     /usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7f56b9982000-7f56b9983000 rw-p 00005000 fe:04 194199                     /usr/lib/x86_64-linux-gnu/libXfixes.so.3.1.0
7f56b9983000-7f56b9985000 r-xp 00000000 fe:04 195149                     /usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7f56b9985000-7f56b9b84000 ---p 00002000 fe:04 195149                     /usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7f56b9b84000-7f56b9b85000 r--p 00001000 fe:04 195149                     /usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7f56b9b85000-7f56b9b86000 rw-p 00002000 fe:04 195149                     /usr/lib/x86_64-linux-gnu/libXdamage.so.1.1.0
7f56b9b86000-7f56b9ba7000 r-xp 00000000 fe:04 194291                     /usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7f56b9ba7000-7f56b9da7000 ---p 00021000 fe:04 194291                     /usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7f56b9da7000-7f56b9daa000 r--p 00021000 fe:04 194291                     /usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7f56b9daa000-7f56b9dab000 rw-p 00024000 fe:04 194291                     /usr/lib/x86_64-linux-gnu/libglapi.so.0.0.0
7f56b9dab000-7f56b9dac000 rw-p 00000000 00:00 0 
7f56b9dac000-7f56b9db1000 r-xp 00000000 fe:04 195682                     /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f56b9db1000-7f56b9fb0000 ---p 00005000 fe:04 195682                     /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f56b9fb0000-7f56b9fb1000 rw-p 00004000 fe:04 195682                     /usr/lib/x86_64-linux-gnu/libXdmcp.so.6.0.0
7f56b9fb1000-7f56b9fbc000 r-xp 00000000 fe:04 194616                     /usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7f56b9fbc000-7f56ba1bb000 ---p 0000b000 fe:04 194616                     /usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7f56ba1bb000-7f56ba1bc000 r--p 0000a000 fe:04 194616                     /usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7f56ba1bc000-7f56ba1bd000 rw-p 0000b000 fe:04 194616                     /usr/lib/x86_64-linux-gnu/libdrm.so.2.4.0
7f56ba1bd000-7f56ba1cd000 r-xp 00000000 fe:00 59188                      /lib/x86_64-linux-gnu/libudev.so.1.3.5
7f56ba1cd000-7f56ba3cd000 ---p 00010000 fe:00 59188                      /lib/x86_64-linux-gnu/libudev.so.1.3.5
7f56ba3cd000-7f56ba3ce000 r--p 00010000 fe:00 59188                      /lib/x86_64-linux-gnu/libudev.so.1.3.5
7f56ba3ce000-7f56ba3cf000 rw-p 00011000 fe:00 59188                      /lib/x86_64-linux-gnu/libudev.so.1.3.5
7f56ba3cf000-7f56ba3d4000 r-xp 00000000 fe:04 194292                     /usr/lib/x86_64-linux-gnu/libgbm.so.1.0.0
7f56ba3d4000-7f56ba5d3000 ---p 00005000 fe:04 194292                     /usr/lib/x86_64-linux-gnu/libgbm.so.1.0.0
7f56ba5d3000-7f56ba5d4000 r--p 00004000 fe:04 194292                     /usr/lib/x86_64-linux-gnu/libgbm.so.1.0.0
7f56ba5d4000-7f56ba5d5000 rw-p 00005000 fe:04 194292                     /usr/lib/x86_64-linux-gnu/libgbm.so.1.0.0
7f56ba5d5000-7f56ba5e3000 r-xp 00000000 fe:04 194947                     /usr/lib/x86_64-linux-gnu/libwayland-server.so.0.1.0
7f56ba5e3000-7f56ba7e2000 ---p 0000e000 fe:04 194947                     /usr/lib/x86_64-linux-gnu/libwayland-server.so.0.1.0
7f56ba7e2000-7f56ba7e4000 r--p 0000d000 fe:04 194947                     /usr/lib/x86_64-linux-gnu/libwayland-server.so.0.1.0
7f56ba7e4000-7f56ba7e5000 rw-p 0000f000 fe:04 194947                     /usr/lib/x86_64-linux-gnu/libwayland-server.so.0.1.0
7f56ba7e5000-7f56ba7f0000 r-xp 00000000 fe:04 193959                     /usr/lib/x86_64-linux-gnu/libwayland-client.so.0.1.0
7f56ba7f0000-7f56ba9ef000 ---p 0000b000 fe:04 193959                     /usr/lib/x86_64-linux-gnu/libwayland-client.so.0.1.0
7f56ba9ef000-7f56ba9f1000 r--p 0000a000 fe:04 193959                     /usr/lib/x86_64-linux-gnu/libwayland-client.so.0.1.0
7f56ba9f1000-7f56ba9f2000 rw-p 0000c000 fe:04 193959                     /usr/lib/x86_64-linux-gnu/libwayland-client.so.0.1.0
7f56ba9f2000-7f56ba9f4000 r-xp 00000000 fe:04 194584                     /usr/lib/x86_64-linux-gnu/libxcb-shape.so.0.0.0
7f56ba9f4000-7f56babf4000 ---p 00002000 fe:04 194584                     /usr/lib/x86_64-linux-gnu/libxcb-shape.so.0.0.0
7f56babf4000-7f56babf5000 r--p 00002000 fe:04 194584                     /usr/lib/x86_64-linux-gnu/libxcb-shape.so.0.0.0
7f56babf5000-7f56babf6000 rw-p 00003000 fe:04 194584                     /usr/lib/x86_64-linux-gnu/libxcb-shape.so.0.0.0
7f56babf6000-7f56babfb000 r-xp 00000000 fe:04 195625                     /usr/lib/x86_64-linux-gnu/libxcb-xfixes.so.0.0.0
7f56babfb000-7f56badfb000 ---p 00005000 fe:04 195625                     /usr/lib/x86_64-linux-gnu/libxcb-xfixes.so.0.0.0
7f56badfb000-7f56badfc000 r--p 00005000 fe:04 195625                     /usr/lib/x86_64-linux-gnu/libxcb-xfixes.so.0.0.0
7f56badfc000-7f56badfd000 rw-p 00006000 fe:04 195625                     /usr/lib/x86_64-linux-gnu/libxcb-xfAborted



I noticed that I can manage to complete example 3, if I leave the
angular snapping at its default 45 degrees mode. Anyway, as I said
above, I am not sure this is the actual key element to trigger the
bug...

Also, we are talking about a buffer overflow.
I don't know whether this bug has security implications, but it
possibly *could*. Maybe the severity of this bug report should be
raised and a "security" tag should be added...?

Please fix this bug and/or forward this report upstream.

Thanks for your time!



-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (800, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.10-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ipe depends on:
ii  gsfonts             1:8.11+urwcyr1.0.7~pre44-4.2
ii  libc6               2.17-93
ii  libcairo2           1.12.16-2
ii  libgcc1             1:4.8.2-1
ii  libipe7.1.3         7.1.3-1
ii  liblua5.1-0         5.1.5-5
ii  libqtcore4          4:4.8.5+git121-g2a9ea11+dfsg1-2
ii  libqtgui4           4:4.8.5+git121-g2a9ea11+dfsg1-2
ii  libstdc++6          4.8.2-1
ii  texlive-latex-base  2013.20131010-2
ii  zlib1g              1:1.2.8.dfsg-1

Versions of packages ipe recommends:
ii  lua5.1  5.1.5-5

Versions of packages ipe suggests:
ii  texlive-latex-recommended  2013.20131010-2

-- no debconf information



More information about the debian-science-maintainers mailing list