[Poppler-bugs] [Bug 62905] Crash when setting dash pattern

Tue Apr 9 11:35:31 PDT 2013

https://bugs.freedesktop.org/show_bug.cgi?id=62905

--- Comment #3 from Germán Poo-Caamaño <gpoo at gnome.org> ---
Similar stacktrace with cairo master (a64ce0) and poppler master (fcc146). 
Using 'thread apply all bt':

Starting program: /home/gpoo/code/evince/install/bin/poppler-glib-demo
~/test.pdf
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
_cairo_gstate_set_dash (offset=0, num_dashes=1, dash=0x0, gstate=0x843b960) at
cairo-gstate.c:542
542        if (dash[i] < 0)

Thread 1 (Thread 0xb56beac0 (LWP 9701)):
#0  _cairo_gstate_set_dash (offset=0, num_dashes=1, dash=0x0, gstate=0x843b960)
at cairo-gstate.c:542
#1  _cairo_gstate_set_dash (gstate=0x843b960, dash=0x0, num_dashes=1, offset=0)
at cairo-gstate.c:519
#2  0xb77a35e0 in cairo_set_dash (cr=0x8155a00, dashes=0x0, num_dashes=1,
offset=0) at cairo.c:1076
#3  0xb7fc3339 in CairoOutputDev::fillToStrokePathClip (this=0x815ec00,
state=0x843b628) at CairoOutputDev.cc:1163
#4  0xb7fc3a06 in CairoOutputDev::fill (this=0x815ec00, state=0x843b628) at
CairoOutputDev.cc:803
#5  0xb72a2abd in opFill (this=0x83cc6f0, args=<optimized out>,
numArgs=<optimized out>) at Gfx.cc:1841
#6  Gfx::opFill (this=0x83cc6f0, args=0xbfffd924, numArgs=0) at Gfx.cc:1831
#7  0xb72960a9 in Gfx::execOp (this=0x83cc6f0, cmd=0xbfffdac4, args=0xbfffd924,
numArgs=0) at Gfx.cc:858
#8  0xb729d760 in Gfx::go (this=0x83cc6f0, topLevel=true) at Gfx.cc:717
#9  0xb729dc5e in Gfx::display (this=0x83cc6f0, obj=0xbfffdbb4, topLevel=true)
at Gfx.cc:683
#10 0xb72e6d43 in Page::displaySlice (this=0x8228268, out=0x815ec00, hDPI=72,
vDPI=72, rotate=0, useMediaBox=false, 
    crop=true, sliceX=-1, sliceY=-1, sliceW=-1, sliceH=-1, printing=false,
abortCheckCbk=0, abortCheckCbkData=0x0, 
    annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0, copyXRef=false) at
Page.cc:580
#11 0xb7fb409a in _poppler_page_render (page=0x83e0120, cairo=0x8155a00,
printing=false, 
    print_flags=POPPLER_PRINT_DOCUMENT) at poppler-page.cc:362
#12 0x0805c5cd in pgd_render_start (button=0x80863a8, demo=0x81ad6b0) at
render.c:143
#13 0xb7725ef3 in g_cclosure_marshal_VOID__VOIDv (closure=0x82288d0,
return_value=0x0, instance=0x80863a8, 
    args=0xbfffdf6c "t\337\377\277", marshal_data=0x0, n_params=0,
param_types=0x0) at gmarshal.c:115
#14 0xb77243d7 in _g_closure_invoke_va (closure=0x82288d0, return_value=0x0,
instance=0x80863a8, 
    args=0xbfffdf6c "t\337\377\277", n_params=0, param_types=0x0) at
gclosure.c:840
#15 0xb773de53 in g_signal_emit_valist (instance=0x80863a8, signal_id=187,
detail=0, 
    var_args=0xbfffdf6c "t\337\377\277") at gsignal.c:3234
#16 0xb773ea53 in g_signal_emit (instance=0x80863a8, signal_id=187, detail=0)
at gsignal.c:3384
#17 0xb7b426fa in gtk_button_clicked (button=0x80863a8) at gtkbutton.c:1308
#18 0xb7b43500 in gtk_real_button_released (button=0x80863a8) at
gtkbutton.c:1967
#19 0xb7725ef3 in g_cclosure_marshal_VOID__VOIDv (closure=0x817ec80,
return_value=0x0, instance=0x80863a8, 
    args=0xbfffe27c
"\f㢷\030\362\t\b8\344\377\277\364?\371\267\001*÷\250c\b\b\310P5\bpl\a\b\241\067\356\266x\356\b\b*",
marshal_data=0xb7b43400, n_params=0, param_types=0x0) at gmarshal.c:115
#20 0xb7722a67 in g_type_class_meta_marshalv (closure=0x817ec80,
return_value=0x0, instance=0x80863a8, 
    args=0xbfffe27c
"\f㢷\030\362\t\b8\344\377\277\364?\371\267\001*÷\250c\b\b\310P5\bpl\a\b\241\067\356\266x\356\b\b*",
marshal_data=0x1fc, n_params=0, param_types=0x0) at gclosure.c:997
#21 0xb77243d7 in _g_closure_invoke_va (closure=0x817ec80, return_value=0x0,
instance=0x80863a8, 
    args=0xbfffe27c
"\f㢷\030\362\t\b8\344\377\277\364?\371\267\001*÷\250c\b\b\310P5\bpl\a\b\241\067\356\266x\356\b\b*",
n_params=0, param_types=0x0) at gclosure.c:840
#22 0xb773de53 in g_signal_emit_valist (instance=0x80863a8, signal_id=186,
detail=0, 
    var_args=0xbfffe27c
"\f㢷\030\362\t\b8\344\377\277\364?\371\267\001*÷\250c\b\b\310P5\bpl\a\b\241\067\356\266x\356\b\b*")
at gsignal.c:3234
#23 0xb773ea53 in g_signal_emit (instance=0x80863a8, signal_id=186, detail=0)
at gsignal.c:3384
#24 0xb7b42036 in gtk_button_button_release (widget=0x80863a8, event=<optimized
out>) at gtkbutton.c:1802
#25 gtk_button_button_release (widget=0x80863a8, event=0x83550c8) at
gtkbutton.c:1794
#26 0xb7c32a01 in _gtk_marshal_BOOLEAN__BOXEDv (closure=0x8079c70,
return_value=0xbfffe4c0, instance=0x80863a8, 
    args=0xbfffe55c
"\310P5\b\214\345\377\277\310P5\b\310P5\b\223\364\327\267\250c\b\bpl\a\b\004", 
    marshal_data=0xb7b41ff0, n_params=1, param_types=0x8079c88) at
gtkmarshalers.c:130
#27 0xb7722a67 in g_type_class_meta_marshalv (closure=0x8079c70,
return_value=0xbfffe4c0, instance=0x80863a8, 
    args=0xbfffe55c
"\310P5\b\214\345\377\277\310P5\b\310P5\b\223\364\327\267\250c\b\bpl\a\b\004", 
    marshal_data=0xc4, n_params=1, param_types=0x8079c88) at gclosure.c:997
#28 0xb77243d7 in _g_closure_invoke_va (closure=0x8079c70,
return_value=0xbfffe4c0, instance=0x80863a8, 
    args=0xbfffe55c
"\310P5\b\214\345\377\277\310P5\b\310P5\b\223\364\327\267\250c\b\bpl\a\b\004",
n_params=1, 
    param_types=0x8079c88) at gclosure.c:840
#29 0xb773de53 in g_signal_emit_valist (instance=0x80863a8, signal_id=29,
detail=0, 
    var_args=0xbfffe55c
"\310P5\b\214\345\377\277\310P5\b\310P5\b\223\364\327\267\250c\b\bpl\a\b\004")
    at gsignal.c:3234
#30 0xb773ea53 in g_signal_emit (instance=0x80863a8, signal_id=29, detail=0) at
gsignal.c:3384
#31 0xb7d7f64b in gtk_widget_event_internal (widget=0x80863a8, event=0x83550c8)
at gtkwidget.c:6714
#32 0xb7c302ef in propagate_event_up (topmost=<optimized out>, event=<optimized
out>, widget=0x80863a8)
    at gtkmain.c:2393
#33 propagate_event (widget=<optimized out>, event=0x83550c8, captured=0,
topmost=0x0) at gtkmain.c:2501
#34 0xb7c325b8 in gtk_main_do_event (event=0x83550c8) at gtkmain.c:1716
#35 0xb7a24c8c in _gdk_event_emit (event=0x83550c8) at gdkevents.c:69
#36 0xb7a528a8 in gdk_event_source_dispatch (source=0x80a52b8, callback=0,
user_data=0x0) at gdkeventsource.c:364
#37 0xb7632ce6 in g_main_dispatch (context=0x808b8b0) at gmain.c:3054
#38 g_main_context_dispatch (context=0x808b8b0) at gmain.c:3630
#39 0xb7633085 in g_main_context_iterate (dispatch=1, block=-1218179600,
context=0x808b8b0, self=<optimized out>)
    at gmain.c:3701
#40 g_main_context_iterate (context=0x808b8b0, block=-1218179600, dispatch=1,
self=<optimized out>) at gmain.c:3638
#41 0xb763355b in g_main_loop_run (loop=0x83388f8) at gmain.c:3895
#42 0xb7c3175d in gtk_main () at gtkmain.c:1156
#43 0x08050a92 in main (argc=2, argv=0xbfffe8f4) at main.c:380

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20130409/6cf7b398/attachment.html>