bug#22289: 24.3; Emacs crashes on loading file

bug#22289: 24.3; Emacs crashes on loading file

[Alex Burr]

[-- Attachment #1.1: Type: text/plain, Size: 4227 bytes --]

This bug report will be sent to the Bug-GNU-Emacs mailing list
and the GNU bug tracker at debbugs.gnu.org.  Please check that
the From: line contains a valid email address.  After a delay of up
to one day, you should receive an acknowledgment at that address.

Please write in English if possible, as the Emacs maintainers
usually do not have translators for other languages.

Please describe exactly what actions triggered the bug, and
the precise symptoms of the bug.  If you can, give a recipe
starting from `emacs -Q':

1) loaded attached file 'nelson.art' with ctrl-x f2) emacs then proceeded to malloc all core, causing linux to grind to a halt.
Reproducable as the first command entered after emacs -Q.


If Emacs crashed, and you have the Emacs process in the gdb debugger,
please include the output from the following gdb commands:
    `bt full' and `xbacktrace'.
For information about debugging Emacs, please read the file
/usr/share/emacs/24.3/etc/DEBUG.


In GNU Emacs 24.3.1 (x86_64-pc-linux-gnu, GTK+ Version 3.10.7)
 of 2014-03-07 on lamiak, modified by Debian
Windowing system distributor `The X.Org Foundation', version 11.0.11501000
System Description:    Ubuntu 14.04.3 LTS

Configured using:
 `configure '--build' 'x86_64-linux-gnu' '--build' 'x86_64-linux-gnu'
 '--prefix=/usr' '--sharedstatedir=/var/lib' '--libexecdir=/usr/lib'
 '--localstatedir=/var/lib' '--infodir=/usr/share/info'
 '--mandir=/usr/share/man' '--with-pop=yes'
 '--enable-locallisppath=/etc/emacs24:/etc/emacs:/usr/local/share/emacs/24.3/site-lisp:/usr/local/share/emacs/site-lisp:/usr/share/emacs/24.3/site-lisp:/usr/share/emacs/site-lisp'
 '--with-crt-dir=/usr/lib/x86_64-linux-gnu' '--with-x=yes'
 '--with-x-toolkit=gtk3' '--with-toolkit-scroll-bars'
 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fstack-protector
 --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wall'
 'LDFLAGS=-Wl,-Bsymbolic-functions -Wl,-z,relro'
 'CPPFLAGS=-D_FORTIFY_SOURCE=2''

Important settings:
  value of $LANG: en_GB.UTF-8
  value of $XMODIFIERS: @im=ibus
  locale-coding-system: utf-8-unix
  default enable-multibyte-characters: t

Major mode: Fundamental

Minor modes in effect:
  tooltip-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  buffer-read-only: t
  line-number-mode: t
  transient-mark-mode: t

Recent input:
<escape> x r e p o <tab> r <tab> <return>

Recent messages:
Loading 00debian-vars...done
Loading /etc/emacs/site-start.d/50dictionaries-common.el (source)...
Loading /var/cache/dictionaries-common/emacsen-ispell-dicts.el (source)...
Error while loading 50dictionaries-common: Symbol's value as variable is void: debian-aspell-only-dictionary-alist
For information about GNU Emacs and the GNU system, type C-h C-a.
Making completion list...

Load-path shadows:
/usr/share/emacs/24.3/site-lisp/debian-startup hides /usr/share/emacs/site-lisp/debian-startup

Features:
(shadow sort gnus-util mail-extr emacsbug message format-spec rfc822 mml
mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev
gmm-utils mailheader sendmail rfc2047 rfc2045 ietf-drums mm-util
mail-prsvr mail-utils help-mode easymenu time-date tooltip ediff-hook
vc-hooks lisp-float-type mwheel x-win x-dnd tool-bar dnd fontset image
regexp-opt fringe tabulated-list newcomment lisp-mode register page
menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock
syntax facemenu font-core frame cham georgian utf-8-lang misc-lang
vietnamese tibetan thai tai-viet lao korean japanese hebrew greek
romanian slovak czech european ethiopic indian cyrillic chinese
case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer loaddefs
button faces cus-face macroexp files text-properties overlay sha1 md5
base64 format env code-pages mule custom widget hashtable-print-readable
backquote make-network-process dbusbind dynamic-setting
system-font-setting font-render-setting move-toolbar gtk x-toolkit x
multi-tty emacs)


[-- Attachment #1.2: Type: text/html, Size: 9410 bytes --]

[-- Attachment #2: nelson.art --]
[-- Type: image/x-jg, Size: 3142 bytes --]

bug#22289: 24.3; Emacs crashes on loading file

[Lars Magne Ingebrigtsen]

Alex Burr <ajb44.geo@yahoo.com> writes:

> 1) loaded attached file 'nelson.art' with ctrl-x f
> 2) emacs then proceeded to malloc all core, causing linux to grind to a halt.

If I save the image to a file and then use "display" to display it, my
machine grinds to a halt for 15 seconds, and then display says it can't
display it...

Could be an imagemagick bug of some kind...

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#22289: 24.3; Emacs crashes on loading file

[Lars Magne Ingebrigtsen]

I'm unable to make Emacs crash, though.  Emacs grows to 14GB, and
then displays the "error" image.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no

bug#22289: 24.3; Emacs crashes on loading file

[Eli Zaretskii]

> From: Lars Magne Ingebrigtsen <larsi@gnus.org>
> Date: Sat, 02 Jan 2016 03:57:17 +0100
> Cc: 22289@debbugs.gnu.org
> 
> Alex Burr <ajb44.geo@yahoo.com> writes:
> 
> > 1) loaded attached file 'nelson.art' with ctrl-x f
> > 2) emacs then proceeded to malloc all core, causing linux to grind to a halt.
> 
> If I save the image to a file and then use "display" to display it, my
> machine grinds to a halt for 15 seconds, and then display says it can't
> display it...
> 
> Could be an imagemagick bug of some kind...

Alex, was your Emacs compiled with Imagemagick support?  Mine wasn't,
so visiting that file does nothing special.

bug#22289: 24.3; Emacs crashes on loading file

[Eli Zaretskii]

> From: Lars Magne Ingebrigtsen <larsi@gnus.org>
> Date: Sat, 02 Jan 2016 03:58:59 +0100
> Cc: 22289@debbugs.gnu.org
> 
> I'm unable to make Emacs crash, though.  Emacs grows to 14GB, and
> then displays the "error" image.

Maybe your Imagemagick version is different.  Your Emacs version
certainly is ;-)

bug#22289: 24.3; Emacs crashes on loading file

[Alex Burr]

[-- Attachment #1: Type: text/plain, Size: 1820 bytes --]

Yes, it seems to have been compiled with imagemagick support. I don't have 14Gb of ram :-)So, the problem is then that this is not any kind of image. It's a text file (actually a
program for http://art.kano.me, which expects coffeescript). If I run: 
 convert Identify nelson.artimagemagick tells me that I have a 26708x29472 1-bit ART image, which explains the problem!
It loads normally if I rename the file not to have the .art suffix. So I can solve my immediate problem.

It's not clear to me whether imagemagick is making a real mistake here. it doesn't seemto do any significant checking on the image header: https://github.com/ImageMagick/ImageMagick/blob/7ce65e7125a4e1df1a274ce373c537a9df9c16cd/coders/art.cHowever these old formats often didn't include any redundancy anyway.
However it does seem like any filename ending in .art is a bit dangerous for emacs at the moment.
Alex

 

 

 
      From: Eli Zaretskii <eliz@gnu.org>
 To: Lars Magne Ingebrigtsen <larsi@gnus.org> 
Cc: ajb44.geo@yahoo.com; 22289@debbugs.gnu.org
 Sent: Saturday, January 2, 2016 8:26 AM
 Subject: Re: bug#22289: 24.3; Emacs crashes on loading file
   
> From: Lars Magne Ingebrigtsen <larsi@gnus.org>
> Date: Sat, 02 Jan 2016 03:57:17 +0100
> Cc: 22289@debbugs.gnu.org
> 
> Alex Burr <ajb44.geo@yahoo.com> writes:
> 
> > 1) loaded attached file 'nelson.art' with ctrl-x f
> > 2) emacs then proceeded to malloc all core, causing linux to grind to a halt.
> 
> If I save the image to a file and then use "display" to display it, my
> machine grinds to a halt for 15 seconds, and then display says it can't
> display it...
> 
> Could be an imagemagick bug of some kind...

Alex, was your Emacs compiled with Imagemagick support?  Mine wasn't,
so visiting that file does nothing special.


   

[-- Attachment #2: Type: text/html, Size: 5346 bytes --]

bug#22289: 24.3; Emacs crashes on loading file

[Glenn Morris]

Version: 26.2

commit a19bfb7 (HEAD, origin/emacs-26, emacs-26)
Date:   Tue Feb 19 22:04:19 2019 -0800

    Remove .art from the default list of ImageMagick extensions
    
    It seems that .art files can be non-image files that
    ImageMagick mistakenly treats as extremely large images.
    Real .art images seem rare.
    * lisp/image.el (imagemagick-enabled-types): Remove ART.  (Bug#22289)

diff --git a/lisp/image.el b/lisp/image.el
index 3019da5..9d2045d 100644
--- a/lisp/image.el
+++ b/lisp/image.el
@@ -923,7 +923,7 @@ imagemagick-types-inhibit
   :version "24.3")
 
 (defcustom imagemagick-enabled-types
-  '(3FR ART ARW AVS BMP BMP2 BMP3 CAL CALS CMYK CMYKA CR2 CRW
+  '(3FR ARW AVS BMP BMP2 BMP3 CAL CALS CMYK CMYKA CR2 CRW
     CUR CUT DCM DCR DCX DDS DJVU DNG DPX EXR FAX FITS GBR GIF
     GIF87 GRB HRZ ICB ICO ICON J2C JNG JP2 JPC JPEG JPG JPX K25
     KDC MIFF MNG MRW MSL MSVG MTV NEF ORF OTB PBM PCD PCDS PCL
@@ -957,7 +957,7 @@ imagemagick-enabled-types
   :set (lambda (symbol value)
 	 (set-default symbol value)
 	 (imagemagick-register-types))
-  :version "24.3")
+  :version "26.2")                      ; remove ART (bug#22289)
 
 (imagemagick-register-types)