[Poppler-bugs] [Bug 88990] New: Evince crashed with SIGABRT in __kernel_vsyscall()

Thu Feb 5 00:17:36 PST 2015

https://bugs.freedesktop.org/show_bug.cgi?id=88990

            Bug ID: 88990
           Summary: Evince crashed with SIGABRT in __kernel_vsyscall()
           Product: poppler
           Version: unspecified
          Hardware: x86 (IA32)
                OS: All
            Status: NEW
          Severity: critical
          Priority: medium
         Component: general
          Assignee: poppler-bugs at lists.freedesktop.org
          Reporter: vhatas at gmail.com

user at ubuntu:~$ evince --version
GNOME Document Viewer 3.10.3
user at ubuntu:~$ cat /proc/version
Linux version 3.13.0-45-generic (buildd at kissel) (gcc version 4.8.2 (Ubuntu
4.8.2-19ubuntu1) ) #74-Ubuntu SMP Tue Jan 13 19:37:48 UTC 2015
user at ubuntu:~$ gdb -q evince
Traceback (most recent call last):
  File "~/peda/peda.py", line 23, in <module>
Exception: Python3 is not supported at the moment, downgrade you GDB or
recompile with Python2!
Reading symbols from evince...(no debugging symbols found)...done.
(gdb) r '/home/user/Downloads/Crasher.pdf' 
Starting program: /usr/bin/evince '/home/user/Downloads/Crasher.pdf'
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
[New Thread 0xb5effb40 (LWP 4148)]
[New Thread 0xb54ffb40 (LWP 4149)]
[New Thread 0xb4affb40 (LWP 4150)]
[New Thread 0xb42feb40 (LWP 4151)]
[New Thread 0xafe60b40 (LWP 4156)]
[New Thread 0xaf5efb40 (LWP 4157)]

** (evince:4144): WARNING **: Unimplemented action: POPPLER_ACTION_JAVASCRIPT,
please post a bug report in Evince bugzilla (http://bugzilla.gnome.org) with a
testcase.
Internal Error (0): Call to Object where the object was type 10, not the
expected type 1, 14 or 2

Program received signal SIGABRT, Aborted.
— Trace 234616
Thread 2951088960 (LWP 4156)

#0 __kernel_vsyscall
#1 __GI_raise
at ../nptl/sysdeps/unix/sysv/linux/raise.c line 56
#2 __GI_abort
at abort.c line 89
#3 Gfx::drawAnnot(Object*, AnnotBorder*, AnnotColor*, double, double, double,
double, int)
from /usr/lib/i386-linux-gnu/libpoppler.so.44
#4 AnnotWidget::draw(Gfx*, bool)
from /usr/lib/i386-linux-gnu/libpoppler.so.44
#5 Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int,
int, int, bool, bool (*)(void*), void*, bool (*)(Annot*, void*), void*, bool)
from /usr/lib/i386-linux-gnu/libpoppler.so.44
#6 ??
from /usr/lib/i386-linux-gnu/libpoppler-glib.so.8
#7 ??
from /usr/lib/evince/4/backends/libpdfdocument.so
#8 ??
from /usr/lib/evince/4/backends/libpdfdocument.so
#9 ev_document_render
from /usr/lib/libevdocument3.so.4
#10 ??
from /usr/lib/libevview3.so.3
#11 ev_job_run
from /usr/lib/libevview3.so.3
#12 ??
from /usr/lib/libevview3.so.3
#13 ??
from /lib/i386-linux-gnu/libglib-2.0.so.0
#14 start_thread
at pthread_create.c line 312
#15 clone
at ../sysdeps/unix/sysv/linux/i386/clone.S line 129
Dump of assembler code for function __kernel_vsyscall:
   0xb76ba414 <+0>:    push   %ecx
   0xb76ba415 <+1>:    push   %edx
   0xb76ba416 <+2>:    push   %ebp
   0xb76ba417 <+3>:    mov    %esp,%ebp
   0xb76ba419 <+5>:    sysenter 
   0xb76ba41b <+7>:    nop
   0xb76ba41c <+8>:    nop
   0xb76ba41d <+9>:    nop
   0xb76ba41e <+10>:    nop
   0xb76ba41f <+11>:    nop
   0xb76ba420 <+12>:    nop
   0xb76ba421 <+13>:    nop
   0xb76ba422 <+14>:    int    $0x80
=> 0xb76ba424 <+16>:    pop    %ebp
   0xb76ba425 <+17>:    pop    %edx
   0xb76ba426 <+18>:    pop    %ecx
   0xb76ba427 <+19>:    ret    
End of asse
(gdb) 
(gdb) 
(gdb) info proc status
process 4726
Name:    evince
State:    t (tracing stop)
Tgid:    4726
Ngid:    0
Pid:    4726
PPid:    4717
TracerPid:    4717
Uid:    1000    1000    1000    1000
Gid:    1000    1000    1000    1000
FDSize:    32
Groups:    4 24 27 30 46 108 124 1000 
VmPeak:      162308 kB
VmSize:      161332 kB
VmLck:           0 kB
VmPin:           0 kB
VmHWM:       28668 kB
VmRSS:       28668 kB
VmData:       62800 kB
VmStk:         136 kB
VmExe:         416 kB
VmLib:       28424 kB
VmPTE:         172 kB
VmSwap:           0 kB
Threads:    7
SigQ:    0/15973
SigPnd:    0000000000000000
ShdPnd:    0000000000000000
SigBlk:    0000000000000000
SigIgn:    0000000001001000
SigCgt:    0000000180000000
CapInh:    0000000000000000
CapPrm:    0000000000000000
CapEff:    0000000000000000
CapBnd:    0000001fffffffff
Seccomp:    0
Cpus_allowed:    ff
Cpus_allowed_list:    0-7
Mems_allowed:    1
Mems_allowed_list:    0
voluntary_ctxt_switches:    124
nonvoluntary_ctxt_switches:    508
(gdb)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20150205/3ef1e0f1/attachment.html>