Bug 111097 – app-text/ghostscript is not useable by media-gfx/imagemagick when built with the hardened toolchain

• Product: Gentoo Linux
• Status: RESOLVED TEST-REQUEST

[Description Marcus D. Hanwell (RETIRED) 2005-11-01 01:53:39 UTC]

Whilst setting up LaTeX formulas for use with trac I discovered that 
imagemagick could not convert eps files to png/jpg or anything else. Upon 
further investigation I discovered that imagemagick uses ghostscript to 
interpret all postscript files, but ghostscript was failing despite being 
installed. 
 
The only way to fix the issue was to recompile ghostscript with the vanilla 
toolchain. Everything else on the system is built with the hardened toolchain 
using a hardened kernel. The versions and USE flags below allow it to work and 
convert eps files to png as required. I am not sure how to fix this issue, 
advice from the hardened herd? It could be worth testing on an x86 hardened 
system to see if this is an amd64 issue or not. 
 
[ebuild   R   ] app-text/ghostscript-7.07.1-r10  -X -cjk +cups -emacs -gtk 0 
kB 
[ebuild   R   ] media-gfx/imagemagick-6.2.5.2  -X +cups -doc -fpx -graphviz 
-jbig +jpeg +lcms +mpeg +perl +png +tiff +truetype -wmf +xml2 0 kB

[Comment 1 SpanKY 2005-11-04 22:49:08 UTC]

you neglected to post `emerge info` like the bug report page told you to

[Comment 2 Marcus D. Hanwell (RETIRED) 2005-11-05 03:16:43 UTC]

I forgot, here you go.... 
 
Portage 2.0.51.22-r3 (hardened/amd64, gcc-3.4.4, glibc-2.3.5-r2, 
2.6.13-hardened-r1 x86_64) 
================================================================= 
System uname: 2.6.13-hardened-r1 x86_64 AMD Athlon(tm) 64 Processor 3200+ 
Gentoo Base System version 1.6.13 
dev-lang/python:     2.3.5-r2, 2.4.2 
sys-apps/sandbox:    1.2.12 
sys-devel/autoconf:  2.13, 2.59-r6 
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 
sys-devel/binutils:  2.15.92.0.2-r10 
sys-devel/libtool:   1.5.20 
virtual/os-headers:  2.6.11-r2 
ACCEPT_KEYWORDS="amd64" 
AUTOCLEAN="yes" 
CBUILD="x86_64-pc-linux-gnu" 
CFLAGS="-march=k8 -O2 -pipe" 
CHOST="x86_64-pc-linux-gnu" 
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/share/config /var/bind /var/qmail/control" 
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d" 
CXXFLAGS="-march=k8 -O2 -pipe" 
DISTDIR="/usr/portage/distfiles" 
FEATURES="autoconfig collision-protect distlocks multilib-strict sandbox 
sfperms strict" 
GENTOO_MIRRORS="http://distfiles.gentoo.org 
http://distro.ibiblio.org/pub/Linux/distributions/gentoo" 
PKGDIR="/usr/portage/packages" 
PORTAGE_TMPDIR="/var/tmp" 
PORTDIR="/usr/portage" 
PORTDIR_OVERLAY="/usr/local/portage" 
SYNC="rsync://rsync.gentoo.org/gentoo-portage" 
USE="amd64 apache2 bash-completion berkdb bzip2 cracklib crypt cups curl 
ffmpeg fortran gd gdbm gpm hardened imagemagick ipv6 jpeg justify lcms ldap 
libwww mailwrapper mcal mpeg mysql ncurses netpbm nls nptl odbc pam perl pic 
png python readline sasl snmp spell sqlite ssl tcpd tetex tiff truetype udev 
userlocales vda vhosts virus-scan xml2 zlib userland_GNU kernel_linux 
elibc_glibc" 
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, MAKEOPTS 

[Comment 3 Dan Johansson 2005-12-04 02:27:51 UTC]

I just want to add a "me too". If I compile ghostscript with the hardened gcc 
(x86_64-pc-linux-gnu-3.4.4) it always fails with a segfault, but if it is 
compiled with the vanilla gcc (x86_64-pc-linux-gnu-3.4.4-vanilla) it works 
without problem.

And here is my "emerge --info"
Portage 2.0.51.22-r3 (default-linux/amd64/2005.1, gcc-3.4.4, glibc-2.3.5-r2, 2.
6.14-gentoo-r2 x86_64)
=================================================================
System uname: 2.6.14-gentoo-r2 x86_64 AMD Athlon(tm) 64 Processor 3800+
Gentoo Base System version 1.6.13
dev-lang/python:     2.3.5-r2, 2.4.2
sys-apps/sandbox:    1.2.12
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.20
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="amd64"
AUTOCLEAN="yes"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config /usr/lib/
fax /usr/share/config /var/bind /var/qmail/control /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=k8 -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks sandbox sfperms strict"
GENTOO_MIRRORS="http://gentoo.osuosl.org/"
MAKEOPTS="-j2"
PKGDIR="/var/pkgdir"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://prince.dmj.nu/gentoo-portage"
USE="amd64 apache2 avi bash-completion berkdb bitmap-fonts bzip2 crypt cups curl 
eds emboss encode expat fam fax foomaticdb fortran gdbm gif gmp gstreamer 
hardened idn imlib jpeg lzw lzw-tiff mp3 mpeg ncurses nls no-htdocs opengl 
pdflib perl png ppds python quicktime readline samba scanner sdl ssl tcpd tiff 
truetype-fonts type1-fonts udev usb userlocales xml2 xpm xv zlib userland_GNU 
kernel_linux elibc_glibc"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS

[Comment 4 Simon Stelling (RETIRED) 2007-02-01 10:33:52 UTC]

This bug is untouched for over 2 years. Is the problem gone with newer versions?

[Comment 5 Marcus D. Hanwell (RETIRED) 2007-02-13 02:15:54 UTC]

I am currently using the vanilla toolchain on my amd64 server due to issues like this, so I cannot easily test whether this problem is still present. May be if I get some free time one day...

[Comment 6 Jakub Moc (RETIRED) 2007-04-08 17:39:40 UTC]

Well, if someone can still reproduce this, reopen. Doesn't go anywhere.

[Comment 7 Marcus D. Hanwell (RETIRED) 2007-04-08 18:25:07 UTC]

For now I have stopped using the hardened toolchain on my amd64 kit - it seemed to me that there wasn't anyone actively working on it. I don't have the knowledge or time to figure it out. Last time I tried it the problem was still present. Hopefully anyone hitting it will come across this bug.