[Poppler-bugs] [Bug 19790] New: evince crashed at GooString::cmp ()

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=19790

           Summary: evince crashed at GooString::cmp ()
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: critical
          Priority: medium
         Component: general
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: pvillavi at gmail.com


this report has been filed here:

https://bugs.edge.launchpad.net/poppler/+bug/321764

example file:

http://launchpadlibrarian.net/21670487/POWER_SHOT-A300.pdf

".
Thread 2 (process 18846):
#0  0xb7f33410 in __kernel_vsyscall ()
#1  0xb72a5589 in __lll_lock_wait () from /lib/tls/i686/cmov/libpthread.so.0
#2  0xb72a0ba6 in _L_lock_95 () from /lib/tls/i686/cmov/libpthread.so.0
#3  0xb72a058a in pthread_mutex_lock ()
   from /lib/tls/i686/cmov/libpthread.so.0
#4  0xb7f0cb36 in ev_document_fc_mutex_lock ()
    at /build/buildd/evince-2.22.2/./libdocument/ev-document.c:105
No locals.
#5  0x0805e166 in ev_application_open_uri_at_dest (application=0x80da940, 
    uri=0x8100888 "file:///home/vlad/PowerShot_A300.pdf", screen=0x80cc0b0, 
    dest=0x0, mode=EV_WINDOW_MODE_NORMAL, search_string=0x0, 
    unlink_temp_file=0, print_settings=0x0, timestamp=0)
    at /build/buildd/evince-2.22.2/./shell/ev-application.c:563
        new_window = (EvWindow *) 0x8112028
        __PRETTY_FUNCTION__ = "ev_application_open_uri_at_dest"
#6  0x0805e3d6 in ev_application_open_uri (application=0x80da940, 
    uri=0x8100888 "file:///home/vlad/PowerShot_A300.pdf", args=0x80da918, 
    timestamp=0, error=0x0)
    at /build/buildd/evince-2.22.2/./shell/ev-application.c:603
        dest = (EvLinkDest *) 0x0
        mode = EV_WINDOW_MODE_NORMAL
        search_string = (const gchar *) 0x0
        unlink_temp_file = 0
        print_settings = (const gchar *) 0x842cda8 "\002"
        screen = (GdkScreen *) 0x80cc0b0
#7  0x0808d480 in main (argc=2, argv=)
    at /build/buildd/evince-2.22.2/./shell/main.c:230
        enable_metadata = 1
        context = <value optimized out>
        args = (GHashTable *) 0x80da918
        program = (GnomeProgram *) 0x80ac058
.
Thread 1 (process 18847):
#0  0xb6f313ce in GooString::cmp () from /usr/lib/libpoppler.so.2
#1  0xb6eaaf87 in FormWidgetChoice::loadDefaults ()
   from /usr/lib/libpoppler.so.2
#2  0xb6ea6261 in FormField::loadChildrenDefaults ()
   from /usr/lib/libpoppler.so.2
#3  0xb6ea98ea in Form::createFieldFromDict () from /usr/lib/libpoppler.so.2
#4  0xb6eaa330 in FormField::FormField () from /usr/lib/libpoppler.so.2
#5  0xb6ea98cd in Form::createFieldFromDict () from /usr/lib/libpoppler.so.2
#6  0xb6ea9ba5 in Form::Form () from /usr/lib/libpoppler.so.2
#7  0xb6e9f098 in Catalog::Catalog () from /usr/lib/libpoppler.so.2
#8  0xb6efe926 in PDFDoc::setup () from /usr/lib/libpoppler.so.2
#9  0xb6efebc3 in PDFDoc::PDFDoc () from /usr/lib/libpoppler.so.2
#10 0xb76a23b5 in poppler_document_new_from_file ()
   from /usr/lib/libpoppler-glib.so.2
#11 0xb5a89a59 in pdf_document_load (document=0x83fb790, 
    uri=0x842a740 "file:///home/vlad/PowerShot_A300.pdf", error=0x83cd314)
    at /build/buildd/evince-2.22.2/./backend/pdf/ev-poppler.cc:291
        poppler_error = (GError *) 0x0
#12 0xb7f0d091 in ev_document_load (document=0x83fb790, 
    uri=0x842a740 "file:///home/vlad/PowerShot_A300.pdf", error=0x83cd314)
    at /build/buildd/evince-2.22.2/./libdocument/ev-document.c:122
        retval = 962151456
#13 0xb7f0d9e5 in ev_document_factory_get_document (
    uri=0x39594420 <Address 0x39594420 out of bounds>, error=0x83cd314)
    at /build/buildd/evince-2.22.2/./libdocument/ev-document-factory.c:242
        document = (EvDocument *) 0x83fb790
        result = <value optimized out>
        compression = EV_COMPRESSION_NONE
        uri_unc = (gchar *) 0x0
#14 0x08060c24 in ev_job_load_run (job=0x83cd2f0)
    at /build/buildd/evince-2.22.2/./shell/ev-jobs.c:568
        __PRETTY_FUNCTION__ = "ev_job_load_run"
#15 0x0805f469 in handle_job (job=0x83cd2f0)
    at /build/buildd/evince-2.22.2/./shell/ev-job-queue.c:133
        __PRETTY_FUNCTION__ = "handle_job"
#16 0x0805fa5c in ev_render_thread (data=0x0)
    at /build/buildd/evince-2.22.2/./shell/ev-job-queue.c:264
        job = (EvJob *) 0x83cd2f0
#17 0xb74bed2f in g_thread_create_proxy (data=0x80fb648)
    at /build/buildd/glib2.0-2.16.6/glib/gthread.c:635
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#18 0xb729e4fb in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#19 0xb7220e5e in clone () from /lib/tls/i686/cmov/libc.so.6"


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.