Ubuntu
c2esp package

[MIR] c2esp

Bug #821940 reported by Till Kamppeter
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
c2esp (Ubuntu)
Fix Released
Medium
Unassigned
Ubuntu ubuntu-11.10-beta-1

Bug Description

This is a free software printer driver package for Kodak's photo inkjet printers and multi-function devices.

Availability: Currently available in Universe, building on all currently supported architectures, see https://launchpad.net/ubuntu/+source/c2esp

Rationale: Having this driver in main, on the Desktop CD, gives real Plug'n'Print (plug in the printer and have it automatically set up in some seconds) for the supported photo inkjets/multi-function devices from Kodak. Currently, Kodak printers are not supported by the default installation.

Security: No security vulnerabilities known at CVE and Secunia, no SUID components, no daemons.

Quality assurance: Installs without debconf questions (package has only a postinst script to update the PPDs of existing print queues), after installation package gets automatically used when connecting a Kodak printer to USB and printing on it or after setting up a Kodak network printer with system-config-printer. The package is maintained upstream as new releases occur regularly and they get packaged for Debian by Didier Raboud (OdyX, Debian developer) and synced into Ubuntu.

UI standards: Printer driver, set up automatically via Plug'n'Print for USB printers and via system-config-printer for network printers. Configuration as with other printer drivers via system-config-printer, per-print-job control via application's printing dialogs, as with other drivers. No additional UI (for example for nozzle cleaning).

Dependencies: Only standard dependencies: Standard libraries, CUPS, Python, xz-utils (the last two for compressed PPD archive).

Maintenance: See "Quality assurance".

Till Kamppeter (till-kamppeter)
Changed in c2esp (Ubuntu):
milestone: none → ubuntu-11.10-beta-1
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
Matthias Klose (doko) wrote :

buffer overflow issues in jbig_write_file, jbig_decode1, file name length from the command line is not checked.

ok, if this gets fixed

Changed in c2esp (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

Are there any references to these issues? CVEs? Or did you find them simply by code review?

Revision history for this message
Matthias Klose (doko) wrote :

just code review

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

This is the whole compiling and linking in the package (warnings removed, they are all only about variables which are defined but not used):

cc -g -O2 -O2 -Wall -c -o c2esp.o c2esp.c
cc -g -O2 -O2 -Wall -c -o jbig85.o jbig85.c
cc -g -O2 -O2 -Wall -c -o jbig.o jbig.c
cc -g -O2 -O2 -Wall -c -o jbig_ar.o jbig_ar.c
cc -g -O2 -O2 -Wall -o c2esp c2esp.o -lcupsimage -lcups -lcupsdriver jbig85.o jbig.o jbig_ar.o
cc -g -O2 -O2 -Wall -c -o command2esp.o command2esp.c
cc -g -O2 -O2 -Wall -o command2esp command2esp.o -lcups -lcupsdriver
cc -g -O2 -O2 -Wall -c -o myopldecode.o myopldecode.c
cc -g -O2 -O2 -Wall -g myopldecode.o jbig85.o jbig.o jbig_ar.o -o myopldecode

The buffer overflow issues in jbig_write_file, jbig_decode1 your are talking about are all in myopldecode.c which is a debug helper program which does not get into the driver or command parser (see compiling and linking commands above), so this code is not executed when a user prints. I can remove the file without loosing functionality of the package.

I will look into the file name length issue.

Revision history for this message
Matthias Klose (doko) wrote :

thanks for the feedback, now promoted. please handle the code issue later.

2011-08-12 07:17:07 INFO Override Component to: 'main'
2011-08-12 07:17:07 INFO 'c2esp - 18-2/universe/text' source overridden
2011-08-12 07:17:07 INFO 'c2esp-18-2/universe/text/OPTIONAL' binary overridden in oneiric/amd64
2011-08-12 07:17:07 INFO 'c2esp-18-2/universe/text/OPTIONAL' binary overridden in oneiric/armel
2011-08-12 07:17:07 INFO 'c2esp-18-2/universe/text/OPTIONAL' binary overridden in oneiric/i386
2011-08-12 07:17:07 INFO 'c2esp-18-2/universe/text/OPTIONAL' binary overridden in oneiric/powerpc

Changed in c2esp (Ubuntu):
status: Incomplete → Fix Released
Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

The file name problem is also only in myopldecode.c.

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

Uploaded c2esp_18-2ubuntu1, fixing a segfault in the driver and another security problem (output of debug files with hard-coded names in /tmp in non-debug mode). Also myopldecode is removed.

Revision history for this message
Till Kamppeter (till-kamppeter) wrote :

Can someone upload c2esp 18-2ubuntu1 for me? c2esp already moved to Main and it is not yet in my per-package upload list.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.