GNU GhostScript 7.05 comes with broken security "features"
[email protected] (David Kastrup)
| Newsgroups | gmane.comp.printing.ghostscript.bugs |
|---|---|
| Message-ID | <[email protected]> |
This was already available in 6.54 or so, and it is close to impossible to find a bug reporting address for GNU GhostScript. Basically, save .setsafe restore is _not_ a noop with regard to security settings: it irretrievably sets the secure operation mode. This renders the .runandhide operator ridiculous. GNU GhostScript got this wrong when it first backported this functionality from 7.03 AFPL GhostScript, and it seemingly still contains the broken backport in spite of being based off AFPL GhostScript 7.04 or so. This makes security management for persistent sessions (like in GhostView, or in preview-latex) impossible. With preview-latex, I will have to implement checking the version number and specifically disabling security for GhostScript 7.05. Please make sure that I will not have to do junk like that for future versions as well. Thanks, -- David Kastrup, Kriemhildstr. 15, 44793 Bochum Email: [email protected]