[Poppler-bugs] [Bug 16762] New: app-text/evince-2.22.2-r1 (with app-text/poppler-0.8.4-r1) crashes with segfault when opening with PDF form

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=16762

           Summary: app-text/evince-2.22.2-r1 (with app-text/poppler-0.8.4-
                    r1) crashes with segfault when opening with PDF form
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: general
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: dang at gentoo.org


Per this Gentoo bug: https://bugs.gentoo.org/show_bug.cgi?id=231719

evince crashes on the pdf attached there.  (I can re-attach here, if
necessary).  I've tested it myself, and here's my backtrace:

#0  0x00007fbce23a0edf in ~Dict (this=0x7fbcd003d910) at Dict.cc:49
49          gfree(entries[i].key);
(gdb) bt
#0  0x00007fbce23a0edf in ~Dict (this=0x7fbcd003d910) at Dict.cc:49
#1  0x00007fbce23910cd in ~AnnotMarkup (this=0x7fbcd002d520) at Annot.cc:1100
#2  0x00007fbce23987b3 in ~AnnotText (this=0x7fbcd003d910) at Annot.h:584
#3  0x00007fbce238c6ae in ~Annots (this=0x7fbcd0092900) at Annot.cc:3431
#4  0x00007fbce23f3cd3 in Page::displaySlice (this=0x4f, out=0x26a1710,
hDPI=72, vDPI=72, 
    rotate=<value optimized out>, useMediaBox=<value optimized out>,
crop=<value optimized out>, 
    sliceX=<value optimized out>, sliceY=-1, sliceW=-1, sliceH=-1, printing=0,
catalog=0x2623390, 
    abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
annotDisplayDecideCbkData=0x0)
    at Page.cc:437
#5  0x00007fbce6ec0074 in _poppler_page_render (page=0x2614190,
cairo=0x27dd470, printing=0)
    at poppler-page.cc:529
#6  0x00007fbcd7bfb46f in pdf_document_render (document=<value optimized out>,
rc=0x25f6480)
    at ev-poppler.cc:488
#7  0x000000000041e34b in ev_job_render_run (job=0x2583cc0) at ev-jobs.c:372
#8  0x000000000041d5cd in handle_job (job=0x2583cc0) at ev-job-queue.c:137
#9  0x000000000041dae4 in ev_render_thread (data=<value optimized out>) at
ev-job-queue.c:264
#10 0x00007fbce513456e in g_thread_create_proxy (data=0x230eb90) at
gthread.c:635
#11 0x00007fbce5b83017 in start_thread (arg=<value optimized out>) at
pthread_create.c:297
#12 0x00007fbce4e54fdd in clone () from /lib/libc.so.6
#13 0x0000000000000000 in ?? ()
(gdb) p entries[0]
Cannot access memory at address 0x6764565458493557


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.