[bug-gv] Re: Bug#583316: /usr/bin/gv: Insecure gs workaround "gs -P-"

[paul . szabo]

Markus Steinborn <address@hidden> wrote:

> Well, the DSC parsing seems to be "-dSAFER"-incompatible. But with the 
> following settings I can open ps and pdf files - and pdf to postscript 
> conversion has sucessfully been tested on an example.
>
> $ cat .gv
> GV.gsArguments:         -P- -dFIXEDMEDIA
> GV.antialias:           False
> GV.infoVerbose:         All
> GV.gsInterpreter:       gs
> !GV.saveposFilename:    ~/test.gv
> GV*international:               False
> GV.version:             gv 3.6.7.90
> GV.gsCmdConvPDF:        gs -P- -dSAFER -dNOPAUSE -dQUIET -dBATCH 
> -sDEVICE=pswrite -sOutputFile=%s -f %s -c save pop quit
> GV.gsCmdScanPDF:        gs -P- -dNODISPLAY -dQUIET -sPDFname=%s -sDSCname=%s 
> %s pdf2dsc.ps -c quit

Would it be possible to give the "unsafe" gs invocations an explicit
-dNOSAFER or somesuch argument, to override whatever I may set in my
wrapper, and to handle gs changing their defaults to secure settings?

> So "-P-" may work with GNU gv - but some testing would help before 
> changing the defaults.

I will try to dig up the file I was testing with, and re-do the tests.
My vague memory is that the layout of the two-page-per-sheet file
changed with -P-.

Cheers, Paul

Paul Szabo   address@hidden   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia