[Poppler-bugs] [Bug 24332] New: evince crashed with SIGSEGV in TextWord::TextWord()
bugzilla-daemon at freedesktop.org
bugzilla-daemon at freedesktop.org
Mon Oct 5 12:18:18 PDT 2009
http://bugs.freedesktop.org/show_bug.cgi?id=24332
Summary: evince crashed with SIGSEGV in TextWord::TextWord()
Product: poppler
Version: unspecified
Platform: x86 (IA32)
URL: https://bugs.edge.launchpad.net/ubuntu/+source/poppler/+
bug/436197
OS/Version: Linux (All)
Status: NEW
Severity: normal
Priority: medium
Component: general
AssignedTo: poppler-bugs at lists.freedesktop.org
ReportedBy: pvillavi at gmail.com
this report has been filed here:
https://bugs.edge.launchpad.net/ubuntu/+source/poppler/+bug/436197
"This document causes the crash.
http://www.oreilly.de/catalog/linuxhaclusterger/chapter/ch05.pdf"
".
Thread 3 (process 12515):
#0 0xb7fa6430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb79a728f in fsync () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb75a9ac4 in g_file_set_contents () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#3 0xb759769c in g_bookmark_file_to_file () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#4 0xb7ca539b in gtk_recent_manager_real_changed (manager=0x8954390)
at /build/buildd/gtk+2.0-2.18.0/gtk/gtkrecentmanager.c:409
write_error = (GError *) 0x0
priv = (GtkRecentManagerPrivate *) 0x89543a0
__PRETTY_FUNCTION__ = "gtk_recent_manager_real_changed"
#5 0xb766394c in g_cclosure_marshal_VOID__VOID ()
from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#6 0xb7654719 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#7 0xb7656092 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#8 0xb766b000 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#9 0xb766ca7d in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#10 0xb766cf06 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#11 0xb7ca76e5 in IA__gtk_recent_manager_add_full (manager=0x8954390,
uri=0x8d8d400 "file:///tmp/ch05.pdf", data=0xbffa0c10)
at /build/buildd/gtk+2.0-2.18.0/gtk/gtkrecentmanager.c:1377
priv = (GtkRecentManagerPrivate *) 0x89543a0
__PRETTY_FUNCTION__ = "IA__gtk_recent_manager_add_full"
#12 0xb7ca78ff in gtk_recent_manager_add_item_query_info (
source_object=0x8d4d0a0, res=0x8e32818, user_data=0x8954390)
at /build/buildd/gtk+2.0-2.18.0/gtk/gtkrecentmanager.c:792
recent_data = {display_name = 0x0, description = 0x0,
mime_type = 0x8d8d420 "application/pdf",
app_name = 0x8d4ee88 "Document Viewer", app_exec = 0x8def858 "evince %u",
groups = 0x0, is_private = 0}
file_info = <value optimized out>
uri = (gchar *) 0x8d8d400 "file:///tmp/ch05.pdf"
error = (GError *) 0x0
#13 0xb77ab77c in g_simple_async_result_complete ()
from /usr/lib/libgio-2.0.so.0
No symbol table info available.
#14 0xb77aba3e in ?? () from /usr/lib/libgio-2.0.so.0
No symbol table info available.
#15 0xb75b80f1 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#16 0xb75b9e78 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#17 0xb75bd720 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#18 0xb75bdb8f in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#19 0xb7c472d9 in IA__gtk_main ()
at /build/buildd/gtk+2.0-2.18.0/gtk/gtkmain.c:1205
tmp_list = (GList *) 0x88ca734
functions = (GList *) 0x0
init = (GtkInitFunction *) 0x0
loop = (GMainLoop *) 0x88bf220
#20 0x08080ba2 in ?? ()
No symbol table info available.
#21 0xb72ffb56 in __libc_start_main (
main=0x8080360 <gtk_icon_view_set_pixbuf_column at plt+142552>, argc=2,
ubp_av=0xbffa0fc4, init=0x8093050, fini=0x8093040,
rtld_fini=0xb7fb4d20 <_dl_fini>, stack_end=0xbffa0fbc) at libc-start.c:220
result = <value optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1220292620, 0, 0,
-1074131048, -2115363072, 704801041}, mask_was_saved = 0}}, priv = {
pad = {0x0, 0x0, 0x2, 0x805d6a0}, data = {prev = 0x0, cleanup = 0x0,
canceltype = 2}}}
not_first_call = <value optimized out>
#22 0x0805d6c1 in ?? ()
No symbol table info available.
.
Thread 2 (process 12518):
#0 0xb7fa6430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb79a4142 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7a190ee in ?? () from /usr/lib/libgthread-2.0.so.0
No symbol table info available.
#3 0xb7594c9c in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#4 0xb75e5837 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#5 0xb75e436f in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#6 0xb799f80e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7 0xb73b57ee in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
No locals.
.
Thread 1 (process 12516):
#0 TextWord (this=0x8cc44e8, state=0x8cf2718, rotA=3, x0=0, y0=0,
charPosA=0, fontA=0x0, fontSizeA=0) at TextOutputDev.cc:235
gfxFont = <value optimized out>
ascent = 0
descent = 0
rgb = {r = -1239507956, g = 0, b = -1215119372}
#1 0xb702e512 in TextPage::beginWord (this=0x8cc3e00, state=0x8cf2718, x0=0,
y0=0) at TextOutputDev.cc:1990
gfxFont = <value optimized out>
fontm = <value optimized out>
m = {0, 0, 0, -0}
rot = 147793688
#2 0xb702ff99 in TextPage::addChar (this=0x8cc3e00, state=0x8cf2718, x=0,
y=0, dx=0, dy=0, c=0, nBytes=1, u=0x8cc4ac8, uLen=1)
at TextOutputDev.cc:2089
y1 = 663.30700699999989
w1 = 0
overlap = <value optimized out>
i = <value optimized out>
x1 = 0
h1 = 0
base = 2.7400317276255428e-266
sp = 0
#3 0xb703010d in ActualText::endMC (this=0x8cc3f40, state=0x8cf2718)
at TextOutputDev.cc:4602
uniString = 0x8cbbc60 "þÿ"
length = 1
i = <value optimized out>
#4 0xb791c1c4 in CairoOutputDev::endMarkedContent (this=0x8d0ec68,
state=0x8cf2718) at CairoOutputDev.cc:1008
No locals.
#5 0xb6faefd4 in Gfx::opEndMarkedContent (this=0x8cc40e8, args=0xb61e9dd4,
numArgs=0) at Gfx.cc:4512
No locals.
#6 0xb6faf576 in Gfx::execOp (this=0x8cc40e8, cmd=0xb61e9f74,
args=0xb61e9dd4, numArgs=0) at Gfx.cc:790
op = <value optimized out>
name = 0x8cc2658 "EMC"
argPtr = (Object *) 0xb61e9dd4
i = 0
#7 0xb6fafb99 in Gfx::go (this=0x8cc40e8, topLevel=1) at Gfx.cc:661
timer = {start_time = {tv_sec = 1253823101, tv_usec = 310474},
end_time = {tv_sec = -1224794563, tv_usec = -1223917580}, active = 1}
obj = {type = objCmd, {booln = 147596888, intg = 147596888,
real = 663.30665740482345, string = 0x8cc2658, name = 0x8cc2658 "EMC",
array = 0x8cc2658, dict = 0x8cc2658, stream = 0x8cc2658, ref = {
num = 147596888, gen = 1082440308}, cmd = 0x8cc2658 "EMC"}}
numArgs = 0
i = <value optimized out>
lastAbortCheck = 0
args = {{type = objNone, {booln = 147596904, intg = 147596904,
real = 663.30665740482527, string = 0x8cc2668,
name = 0x8cc2668 "@&Ì\b", array = 0x8cc2668, dict = 0x8cc2668,
stream = 0x8cc2668, ref = {num = 147596904, gen = 1082440308},
cmd = 0x8cc2668 "@&Ì\b"}}, {type = objNone, {booln = 147605248,
intg = 147605248, real = 663.30665740577388, string = 0x8cc4700,
name = 0x8cc4700 "H*Ï\bxFÌ\b\b", array = 0x8cc4700, dict = 0x8cc4700,
stream = 0x8cc4700, ref = {num = 147605248, gen = 1082440308},
cmd = 0x8cc4700 "H*Ï\bxFÌ\b\b"}}, {type = objNone, {booln = -575869214,
intg = -575869214, real = 511.65402000000006, string = 0xddaceee2,
name = 0xddaceee2 <Address 0xddaceee2 out of bounds>,
array = 0xddaceee2, dict = 0xddaceee2, stream = 0xddaceee2, ref = {
num = -575869214, gen = 1082129014},
cmd = 0xddaceee2 <Address 0xddaceee2 out of bounds>}}, {type = objNone,
{booln = -1045910437, intg = -1045910437, real = 663.30700999999988,
string = 0xc1a8ac5b,
name = 0xc1a8ac5b <Address 0xc1a8ac5b out of bounds>,
array = 0xc1a8ac5b, dict = 0xc1a8ac5b, stream = 0xc1a8ac5b, ref = {
num = -1045910437, gen = 1082440308},
cmd = 0xc1a8ac5b <Address 0xc1a8ac5b out of bounds>}}, {type = objNone,
{booln = 0, intg = 0, real = 1.2731974745791634e-313, string = 0x0,
name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = 6}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -5.2374703781943357e-48, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1239507384},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -9.5605093029645369e-43, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1221242346},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -1.5974699859138047e-43, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1223917580},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = 1.2731974745791634e-313, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = 6}, cmd = 0x0}}, {
type = objNone, {booln = 0, intg = 0, real = 7.0025861101853986e-313,
string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {
num = 0, gen = 33}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = -1.4909706183973528e-42, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = -1220501512}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = 4.2439915819305446e-314, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 2},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = 4.2439915819305446e-314, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = 2}, cmd = 0x0}}, {
type = objNone, {booln = 0, intg = 0, real = -1.7837215733544617e-42,
string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {
num = 0, gen = -1220287584}, cmd = 0x0}}, {type = objNone, {
booln = 0, intg = 0, real = -1.7768300312974892e-42, string = 0x0,
name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = -1220292620}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = -5.2377627118345021e-48, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = -1239507272}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = -9.3220559265889515e-44, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = -1224695408}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = -9.1149949201075179e-43, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = -1221307458}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = 2.4196197379748035e-266, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = 147388252}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = 6.3659873728958169e-314, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = 3}, cmd = 0x0}}, {
type = objNone, {booln = 0, intg = 0, real = -9.3503145333158143e-44,
string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {
num = 0, gen = -1224692104}, cmd = 0x0}}, {type = objNone, {
booln = 0, intg = 0, real = -5.237971521577478e-48, string = 0x0,
name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = -1239507192}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = 2.4196197379748035e-266, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0,
gen = 147388252}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = 2.4195783311482876e-266, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = 147388224},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -1.5974699859138047e-43, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1223917580},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -5.2382638552176443e-48, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1239507080},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0,
string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {
num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0,
intg = 0, real = 1.0185579796633307e-312, string = 0x0, name = 0x0,
array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 48},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -1.7837872592199769e-42, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1220287536},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -1.2828312689570442e-43, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1224285456},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -9.6556580160744046e-43, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1221228440},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = 2.4196256532357343e-266, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = 147388256},
cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0,
real = -3.5294948484769161e-44, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1226231820},
cmd = 0x0}}}
#8 0xb6fb2b99 in Gfx::display (this=0x8cc40e8, obj=0xb61ea074, topLevel=1)
at Gfx.cc:630
obj2 = {type = objNone, {booln = 0, intg = 0,
real = -7.5505089889280189e-44, string = 0x0, name = 0x0, array = 0x0,
dict = 0x0, stream = 0x0, ref = {num = 0, gen = -1225068307}, cmd = 0x0}}
i = <value optimized out>
#9 0xb6ffd930 in Page::displaySlice (this=0x8e1fb98, out=0x8d0ec68, hDPI=72,
vDPI=72, rotate=0, useMediaBox=0, crop=1, sliceX=-1, sliceY=-1,
sliceW=-1, sliceH=-1, printing=0, catalog=0x8de89c8, abortCheckCbk=0,
abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
annotDisplayDecideCbkData=0x0) at Page.cc:474
gfx = (Gfx *) 0x8cc40e8
obj = {type = objStream, {booln = 147354112, intg = 147354112,
real = -9.3364851095127113e-42, string = 0x8c87200,
name = 0x8c87200 "\bo\f·\003", array = 0x8c87200, dict = 0x8c87200,
stream = 0x8c87200, ref = {num = 147354112, gen = -1217788227},
cmd = 0x8c87200 "\bo\f·\003"}}
i = <value optimized out>
#10 0xb7913901 in _poppler_page_render (page=0x8d0ee20, cairo=0x8cc3a70,
printing=0) at poppler-page.cc:560
output_dev = (class CairoOutputDev *) 0x8d0ec68
__PRETTY_FUNCTION__ = "void _poppler_page_render(PopplerPage*,
cairo_t*, GBool)"
#11 0xb7913a96 in poppler_page_render (page=0x8d0ee20, cairo=0x8cc3a70)
at poppler-page.cc:586
__PRETTY_FUNCTION__ = "void poppler_page_render(PopplerPage*,
cairo_t*)"
#12 0xb59e55b9 in ?? () from /usr/lib/evince/1/backends/libpdfdocument.so
No symbol table info available.
#13 0xb7f71a10 in ev_document_render () from /usr/lib/libevdocument.so.1
No symbol table info available.
#14 0xb7f44e21 in ?? () from /usr/lib/libevview.so.1
No symbol table info available.
#15 0xb7f420a1 in ev_job_run () from /usr/lib/libevview.so.1
No symbol table info available.
#16 0xb7f45be8 in ?? () from /usr/lib/libevview.so.1
No symbol table info available.
#17 0xb75e436f in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#18 0xb799f80e in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#19 0xb73b57ee in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
No locals."
--
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
More information about the Poppler-bugs
mailing list