evince crashed with SIGSEGV in JBIG2SymbolDict::~JBIG2SymbolDict()
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Poppler |
Fix Released
|
Critical
|
|||
poppler (Ubuntu) |
Fix Released
|
Medium
|
Ubuntu Desktop Bugs |
Bug Description
Binary package hint: evince
This bug appears reproducible when opening the attached document (maybe you need to switch pages a few times).
Description: Ubuntu 8.10
Release: 8.10
evince:
Installiert: 2.24.1-0ubuntu1
Kandidat: 2.24.1-0ubuntu1
Versions-Tabelle:
*** 2.24.1-0ubuntu1 0
500 http://
100 /var/lib/
ProblemType: Crash
Architecture: amd64
Disassembly: 0x2f1:
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/bin/evince
Package: evince 2.24.1-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: evince file://
ProcEnviron:
PATH=/
LANG=de_DE.UTF-8
SHELL=/bin/bash
Signal: 11
SourcePackage: evince
StacktraceTop:
?? ()
JBIG2SymbolDic
JBIG2Stream::close () from /usr/lib/
JBIG2Stream:
Object::free () from /usr/lib/
Title: evince crashed with SIGSEGV in JBIG2SymbolDict
Uname: Linux 2.6.27-11-generic x86_64
UserGroups: adm admin audio cdrom dialout dip floppy fuse lpadmin plugdev sambashare vboxusers video
Changed in poppler: | |
status: | Unknown → Confirmed |
Changed in poppler: | |
status: | Confirmed → Fix Released |
Changed in poppler: | |
importance: | Unknown → Critical |
Changed in poppler: | |
importance: | Critical → Unknown |
Changed in poppler: | |
importance: | Unknown → Critical |
this report has been filed here:
https:/ /bugs.edge. launchpad. net/poppler/ +bug/320181
"This bug appears reproducible when opening the attached document (maybe you need to switch pages a few times)."
pdf:
http:// launchpadlibrar ian.net/ 21544672/ 01004PT1. pdf
" cond_timedwait@ @GLIBC_ 2.3.2 () from /lib/tls/ i686/cmov/ libpthread. so.0 timed_wait_ posix_impl (cond=0x93f9fd0, entered_mutex=0x80, abs_time=0x1) at /build/ buildd/ glib2.0- 2.19.5/ gthread/ gthread- posix.c: 242 FUNCTION_ _ = "g_cond_ timed_wait_ posix_impl" queue_pop_ intern_ unlocked (queue=0x91f0d58, try=<value optimized out>, end_time= 0xb5cd82e4) at /build/ buildd/ glib2.0- 2.19.5/ glib/gasyncqueu e.c:365 FUNCTION_ _ = "g_async_ queue_pop_ intern_ unlocked" queue_timed_ pop (queue=0x91f0d58, end_time= 0xb5cd82e4) at /build/ buildd/ glib2.0- 2.19.5/ glib/gasyncqueu e.c:491 FUNCTION_ _ = "IA__g_ async_queue_ timed_pop" pool_thread_ proxy (data=0x9261a88) at /build/ buildd/ glib2.0- 2.19.5/ glib/gthreadpoo l.c:121 create_ proxy (data=0x9214168) at /build/ buildd/ glib2.0- 2.19.5/ glib/gthread. c:635 FUNCTION_ _ = "g_thread_ create_ proxy" i686/cmov/ libpthread. so.0 i686/cmov/ libc.so. 6
Thread 3 (Thread 0xb5cd8b90 (LWP 5814)):
#0 0xb80b3430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb74f1412 in pthread_
No symbol table info available.
#2 0xb78e613d in g_cond_
result = <value optimized out>
end_time = {tv_sec = 1232717905, tv_nsec = 312387000}
timed_out = <value optimized out>
__PRETTY_
#3 0xb75132c9 in g_async_
retval = <value optimized out>
__PRETTY_
#4 0xb75133c7 in IA__g_async_
retval = <value optimized out>
__PRETTY_
#5 0xb7566103 in g_thread_
task = <value optimized out>
pool = (GRealThreadPool *) 0x0
#6 0xb7564aff in g_thread_
__PRETTY_
#7 0xb74ed4ff in start_thread () from /lib/tls/
No symbol table info available.
#8 0xb74693fe in clone () from /lib/tls/
No symbol table info available.
Thread 2 (Thread 0xb6746b90 (LWP 5813)): 2728e-49, string = 0xb5e09cb0, name = 0xb5e09cb0 "ÈÇ)·", array = 0xb5e09cb0, 2148e-43, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, 189e-323, string = 0x9, name = 0x9 <Add...
#0 0xb5e00441 in ?? ()
No symbol table info available.
#1 0xb71c0fd9 in JBIG2Stream::close (this=0xb5e09cb0) at JBIG2Stream.cc:1219
_i = 0
#2 0xb71c109a in ~JBIG2Stream (this=0xb5e09cb0) at JBIG2Stream.cc:1158
No locals.
#3 0xb71d3897 in Object::free (this=0xb6745e0c) at Object.cc:143
No locals.
#4 0xb719c5ee in Gfx::opXObject (this=0xb5e07f68, args=0xb6745ec0, numArgs=1) at Gfx.cc:3553
name = 0xb5e08958 "Im0"
obj1 = {type = objStream, {booln = -1243571024, intg = -1243571024, real = -3.576913215157
dict = 0xb5e09cb0, stream = 0xb5e09cb0, ref = {num = -1243571024, gen = -1243563392}, cmd = 0xb5e09cb0 "ÈÇ)·"}}
obj2 = {type = objNone, {booln = -1243572360, intg = -1243572360, real = 1.000000677545783, string = 0xb5e09778, name = 0xb5e09778 "\210ºàµe", array = 0xb5e09778,
dict = 0xb5e09778, stream = 0xb5e09778, ref = {num = -1243572360, gen = 1072693248}, cmd = 0xb5e09778 "\210ºàµe"}}
obj3 = {type = objNone, {booln = 0, intg = 0, real = -3.322189230569
gen = -1222794614}, cmd = 0x0}}
refObj = {type = objNone, {booln = 9, intg = 9, real = 4.4465908125712