Debian Bug report logs - #1026789
Broken vf files in package?

version graph

Package: texlive-fonts-extra; Maintainer for texlive-fonts-extra is Debian TeX Task Force <[email protected]>; Source for texlive-fonts-extra is src:texlive-extra (PTS, buildd, popcon).

Reported by: Hilmar Preuße <[email protected]>

Date: Wed, 21 Dec 2022 07:06:01 UTC

Severity: normal

Found in version texlive-extra/2022.20221123-2

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#1026789: Broken vf files in package?
Reply-To: Hilmar Preuße <[email protected]>, [email protected]
Resent-From: Hilmar Preuße <[email protected]>
Resent-To: [email protected]
Resent-CC: Debian TeX Task Force <[email protected]>
X-Loop: [email protected]
Resent-Date: Wed, 21 Dec 2022 07:06:01 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: report 1026789
X-Debian-PR-Package: texlive-fonts-extra
X-Debian-PR-Keywords: 
X-Debian-PR-Source: texlive-extra
Received: via spool by [email protected] id=B.16716062232434349
          (code B); Wed, 21 Dec 2022 07:06:01 +0000
Received: (at submit) by bugs.debian.org; 21 Dec 2022 07:03:43 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
	(2021-04-09) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-9.7 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_ENVFROM_END_DIGIT,
	FREEMAIL_FROM,HAS_PACKAGE,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,
	RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS autolearn=ham
	autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 83; hammy, 150; neutral, 151; spammy,
	0. spammytokens: hammytokens:0.000-+--texlive, 0.000-+--H*u:102.0,
	0.000-+--H*UA:102.0, 0.000-+--H*F:U*hille42,
	0.000-+--H*RU:[email protected]
Received: from mout.web.de ([212.227.15.3]:55857)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.94.2)
	(envelope-from <[email protected]>)
	id 1p7t8h-00ADHQ-0x
	for [email protected]; Wed, 21 Dec 2022 07:03:43 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=web.de; s=s29768273;
	t=1671606219; bh=URoEuckgUB2YcVsDbofLvyTR+7qXP8Q8KBVFyQWSvzU=;
	h=X-UI-Sender-Class:Date:From:To:Subject;
	b=Rjeh+2wH0+AG6dCG0Bx171e+POc1Ebd8s46RwH2lTI7DBDeTCx0UaoIbDJznyL3gr
	 A9nCxvn3Z0ak7k3tPfHo7GUVyjPeaqgbkHcaPPtPmutE4+Hc1OA/6rYOfMR9BF/Okt
	 TDT8a57PPbM4+eDq8KSpMrsxGECo7RMNgFdp4QP3D+Ukt1NSaJr80ekFqMqMiuiE9h
	 ju/Ak69PuyqNSgkfAARXZkMqpTxRDoEZ4Zph7irJGkgscZ8bdaWsrHBR9D9czIDbYl
	 qxztwXlzNL4zv5Lmu3HPiARZVXShyJjCW5uZ8wg+rxTL8AQfhUSz055nOSNCkE7ltS
	 v8hWvqcZB0IVw==
X-UI-Sender-Class: 814a7b36-bfc1-4dae-8640-3722d8ec6cd6
Received: from [192.168.179.3] ([62.216.203.109]) by smtp.web.de (mrweb005
 [213.165.67.108]) with ESMTPSA (Nemesis) id 1N4621-1ohezS0TpJ-0105LV for
 <[email protected]>; Wed, 21 Dec 2022 08:03:39 +0100
Message-ID: <[email protected]>
Date: Wed, 21 Dec 2022 08:03:37 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
 Thunderbird/102.6.0
Content-Language: en-GB
From: Hilmar Preuße <[email protected]>
To: [email protected]
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable
X-Provags-ID: V03:K1:w0pvWcvARKLBEZTDpMYPrD8Ee6V4JZF4phdDR/dfUZ9D2QP+6Yv
 mKMRer2WjwESw+NBJfqZ8S3V+SYk4c+rpkTyRO97Yt+Cb+eAJt5kOlo3JGRfYJzf/9ggm2i
 oJ9cgD6nHaVsD/DeMbqgDrXMkXk2P0+wGFc0ezdAshRRPuixEyxhTiHp9M+IUg/nPJ7lgn0
 3kQCdOXcW30MQpK9NoaXw==
UI-OutboundReport: notjunk:1;M01:P0:Q+Jof9zBYQQ=;b0bd7cT+GEG/t00xStQAXoNa4DH
 wdvOW2uqVjkwwMve79ALZmYN7VuptO2/RTVGfyGX1vDQuTtqUhZGQPTNvlBSod7QuSYdY7EPt
 qt4xigGpX+ekxLfaBdL4CyIT7q3g+4PDMfmGjhxRQmkj6ZL/U37CXu2oEYEjSmw37BG/cSDKG
 zieqkMcFTRw97jQHEXhM86zC4piW/lif98jFlox1ARuUeDkcnskbkSjKgT2gAMHIuYSKxKhNe
 wIDPv/gvezcj54akV1wrj2DKoINfVLQY5QifR61n5Zp/eYy4jDvIgKoFIM7Mqb7W/bw16UY1F
 8tqC3JvicMjMukuXl6TYfbvdMjMZiI8ju1HtE6tl6A0Gibnges4NbagTP+SMUiv7j2UJb5AAI
 JR0Kq40/baNVuU1xnhTTTuWhIf+WKHGAhMhCBc/94vlU/sZttmmxc18MfXCmFsZBz9Waz7+gm
 3KZPLr/p4sdqgPZOtD6r5SEixq1VJ78oSHYhFqQCczPtV7ME3KsWdgIBk2Ixb/agMMDkXAu2E
 zLwZxhBinVnLMwnAm1QogUUqPODXLRwcpjrjVGTD723CFsGCUyW3w4qZitmeeTJ72SdHOQFJj
 0/UM5UTLR7PqOFHGfmxFNgDS3LmWzrO1Z5Gw6cLV0pEmxDtwMzf0Tp3Q4olLiC+mVVqfVZg6O
 ctRDG06l+gOvpQtnah6Hrcia/XIK4fNbO2ffnlpp/mGCNzJW0Ly7d86n49L7/XYKMoySNkZXv
 IoIa+GMzOUmzxRptd/BlVdsjikAWlQ/k8AuNHjKbSuiq3avFEVZbex5qMKbC+zipO7DEAReCM
 8TwNrfX5nEeHDHOw1oFM/EG/ELrFiHBvbDBAeZXyzhiUU3xjUD+TXPdlzKatHgtjx1N+9TSdL
 vCQwF/IlrrAn8TwLGZzmWZ6A8W/3TJgTv8rMl0WEIej5EMkLIK+HSbHWuOIJp9gHFwtaU2ELd
 jhehF1ZVdTKRw4lk7f8/KCJLp8s=
Delivered-To: [email protected]

Package: texlive-fonts-extra
Version: 2022.20221123-2
Severity: normal


This is a question, which came up, when working on #1026460.

Things are worse: file(1) /does/ have magic for "TeX virtual font data"
but is *that* weak (only 16 bit, 0xf7 0xca at the start of file) it gets
beaten by the pattern for the dreaded MS-DOS executables (which is plain
nightmare).

After some searching I found the parser for virtual font files in
texk/dvipsk/virtualfont.c starting at line 189. So I could harden the
magic at least a little bit by exploiting the command byte (243, 0xf3)
at offset 0xb the earliest.

Since I had to download the huge texlive-fonts-extra .deb to extract the
reproducer, this at least also brought more than 20k samples to verify
the result. Some .vf files fail the test, and I'd like to ask you
whether they are technically correct:

# From the texlive-bin sources (bullseye)

* texk/web2c/tests/badvpl.vpl (I assume that's not a bug)

# From texlive-fonts-extra_2022.20221123-2_all.deb:

*
/usr/share/texlive/texmf-dist/fonts/vf/public/mathdesign/mdbch/mdbchbofc8t.vf
*
/usr/share/texlive/texmf-dist/fonts/vf/public/mathdesign/mdbch/mdbchrofc8t.vf

They look fairly broken (error messages inside), perhaps they shouldn't
be there anyway?

*
/usr/share/texlive/texmf-dist/fonts/vf/public/ebgaramond/EBGaramondInitials-tlf-ts1.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/gfsbodoni/gbodonio9a.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfoit0600.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfoit0700.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfost0600.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfost0700.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfotc0600.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfotc0700.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfott0600.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfott0700.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfovi0600.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfovi0700.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfovt0600.vf
* /usr/share/texlive/texmf-dist/fonts/vf/public/hfoldsty/hfovt0700.vf
*
/usr/share/texlive/texmf-dist/fonts/vf/public/libertinus-type1/LibertinusSerifInitials-Regular-tlf-ts1.vf

These are pretty small (88 octets at most, usually just 12) so still not
having them detected properly might not be the biggest loss. Are these
files technically OK?

Hilmar
--
sigfault

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Fri May 16 00:52:06 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.