evince-thumbnailer crashed with SIGSEGV in Form::findWidgetByRef()

Bug #288429 reported by Dean Owensby
36
Affects Status Importance Assigned to Milestone
Poppler
Fix Released
Critical
poppler (Ubuntu)
Fix Released
Medium
Ubuntu Desktop Bugs

Bug Description

Binary package hint: evince

downloading and playing western-quake 3d at same time as mail arrived. oops.

ProblemType: Crash
Architecture: i386
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/bin/evince-thumbnailer
NonfreeKernelModules: nvidia
Package: evince 2.24.1-0ubuntu1
ProcAttrCurrent: unconfined
ProcCmdline: evince-thumbnailer -s 128 file:///home/dean/postlabels/bowdengas.LabelGenerationServlet /tmp/.gnome_thumbnail.0ZWNJU
ProcCwd: /home/dean
ProcEnviron:
 PATH=/home/dean/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: evince
StacktraceTop:
 Form::findWidgetByRef () from /usr/lib/libpoppler.so.3
 AnnotWidget::initialize () from /usr/lib/libpoppler.so.3
 AnnotWidget::AnnotWidget () from /usr/lib/libpoppler.so.3
 Annots::createAnnot () from /usr/lib/libpoppler.so.3
 Annots::Annots () from /usr/lib/libpoppler.so.3
Title: evince-thumbnailer crashed with SIGSEGV in Form::findWidgetByRef()
Uname: Linux 2.6.27-7-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy fuse lpadmin plugdev video

Tags: apport-crash
Revision history for this message
Dean Owensby (dean-owensby) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Symbolic stack trace

StacktraceTop:AnnotWidget::initialize (this=0x96e45a8, xrefA=0x960a278, catalog=0x960a2e8,
AnnotWidget (this=0x96e45a8, xrefA=0x960a278, dict=0x96e3900, catalog=0x960a2e8,
Annots::createAnnot (this=0x96cded8, xref=0x960a278, dict=0x96e3900,
Annots (this=0x96cded8, xref=0x960a278, catalog=0x960a2e8, annotsObj=0xbf91693c)
Page::displaySlice (this=0x960afe8, out=0x960c500, hDPI=15.058823529411764,

Revision history for this message
Apport retracing service (apport) wrote : Symbolic threaded stack trace
Changed in evince:
importance: Undecided → Medium
Revision history for this message
Pedro Villavicencio (pedro) wrote :

poppler crash, re assigning.

Revision history for this message
Pedro Villavicencio (pedro) wrote :

could you attach the file which is causing the crash? the one located at file:///home/dean/postlabels/bowdengas.LabelGenerationServlet ? thanks.

Changed in poppler:
assignee: nobody → desktop-bugs
status: New → Incomplete
Revision history for this message
Dean Owensby (dean-owensby) wrote : Re: [Bug 288429] Re: evince-thumbnailer crashed with SIGSEGV in Form::findWidgetByRef()

On Fri, 07 Nov 2008 17:54:43 -0000
Pedro Villavicencio <email address hidden> wrote:

> could you attach the file which is causing the
> crash? the one located at
> file:///home/dean/postlabels/bowdengas.LabelGenerationServlet ?
> thanks.
>
> ** Changed in: poppler (Ubuntu)
> Assignee: (unassigned) => Ubuntu Desktop
> Bugs (desktop-bugs) Status: New => Incomplete
>
> ** Visibility changed to: Public
>
> --
> evince-thumbnailer crashed with SIGSEGV in
> Form::findWidgetByRef()
> https://bugs.launchpad.net/bugs/288429 You
> received this bug notification because you are
> a direct subscriber of the bug.

attached as requested
--
D F Owensby
Norfolk VA USofA

<email address hidden>
fax: 757 588-6364
cell: 757 348-0168

Revision history for this message
Dean Owensby (dean-owensby) wrote :
Download full text (26.5 KiB)

On Fri, 07 Nov 2008 17:54:43 -0000
Pedro Villavicencio <email address hidden> wrote:

> could you attach the file which is causing the
> crash? the one located at
> file:///home/dean/postlabels/bowdengas.LabelGenerationServlet ?
> thanks.
>
> ** Changed in: poppler (Ubuntu)
> Assignee: (unassigned) => Ubuntu Desktop
> Bugs (desktop-bugs) Status: New => Incomplete
>
> ** Visibility changed to: Public
>
> --
> evince-thumbnailer crashed with SIGSEGV in
> Form::findWidgetByRef()
> https://bugs.launchpad.net/bugs/288429 You
> received this bug notification because you are
> a direct subscriber of the bug.

attached as requested
--
D F Owensby
Norfolk VA USofA

<email address hidden>
fax: 757 588-6364
cell: 757 348-0168

** Attachment added:
"bowdengas.LabelGenerationServlet"
http://launchpadlibrarian.net/19468834/bowdengas.LabelGenerationServlet

--
evince-thumbnailer crashed with SIGSEGV in
Form::findWidgetByRef()
https://bugs.launchpad.net/bugs/288429 You
received this bug notification because you are a
direct subscriber of the bug.
%PDF-1.4
%____
3 0 obj <</Filter/FlateDecode/Length 14>>stream
x_+_
_*_endstream
endobj
4 0 obj <</Filter/FlateDecode/Length 1502>>stream
H_lV_o_6_n`___n_Y___oN____s__:
__$Zmɕ____GJNĮb'_#____;q__Y_2_T_d_z
__V_________4__ <__3ii+__$3ͤ_____
$_3_5V_S__i___ g
_;@933_R_,_b__)TyŌ_
xZ__
_և#_t_%_O+S8R2_L@___r__e\__61Iɤs_+__ͅ0_;n__
$9hr\_6__Ϙ_`Gxȸ5_kE____՞_E3_m_c%ڻ_@%
f___y_s___Q_____w_O__7,___#__ޑ__p__*__S__=
{__6___7________Ta_أ___
Djfݰ_____V____*K_W__N*_y__Քb____0_mܹ
__
_ϼ__D__ ___"s__`_ _阑<_=0"N___1

$__&__"_|\_շ,
_{_X%_Xʟ0YƸ_ _
[$2____*__I__ (__4t___
__eul_ ʡR___1)
_
HTX____<_r QK_R_B_gSP3_LJ_4_____g(t
r_y5_A_S_H@__@1_A _\____E__<(嘶&Eit_M____!
F__$___!s_Lr_h&%_(___T}
H_I__e8__~_2"_e~__<_MI0_1) ___d_K3___?__
__SSӶ__rK__.Y__'_zhqM_'
_H5쾪__=n_____
Bs_________ R_
_.__!]__
__M_n_<___5_خ :_Rf__`DpM____sd0x_
<iHB_|__"^_s_._eQ83

_\__M_6u__uї_8
__(______y
k
F_D_`GhM_M______@__#_6-up_CU__C__S_қ_
_____U__Ŏn__S_)_ q___ {5__lQ__r_!n_?
v_܆___W____b_a_4O)_~
}__
_-_J_@___IcOC͍_,_0i______0n_____4ʏE>____U_h_3_ ?
P_/__
__t___
_C`_(`O
f_'__bsO_A_x/__I___g4\u|
W_x_ _
___ګ__u__X2__Qі_7__
|_B__

$Stth_:____ךz__p_Œ^/sZ_\_ˑl_________\__:_
\_____:_ Z8___1_d___r_ؐq_P__Y_غ___—_#__
+__Ys__C_xXxz_(!_/_____b{__I41_G______

__S9__ Ķp_=zb[n________Z__
__<h___U_X]
>Q_Z_~__ˋK_p__;"_b___
JՕ,_T_.V
_F_ _v___yr_U
>[5m__WE_
_:___B_s__
c_磄n___p_pWX_

>_7gi_0C__
_X_______x___
_}z__8
>{_GY___g_=_'_endstream endobj 5 0 obj
><</Filter/FlateDecode/Length 282>>stream
>x_m_=n_0
F___'`___{/__{_E__/_lYI

>_7__8_8M___._+_
>{C_c____L_mR_v__c_ZP___`/______ꥒ__n_r__p
>endstream endobj 8 0 obj<</CapHeight 716/XHeight
>519/Type/FontDescriptor/Flags
>32/FontStretch/Normal/Descent -376/FontBBox[-628
>-376 2000 1010]/StemV
>136/FontName/Arial,Bold/FontFamily(Arial)/Ascent
>1010/FontWeight 700/ItalicAngle 0>> endobj 7 0
>obj<</Type/Font/FirstChar 0/FontDescriptor 8 0
>R/BaseFont/Arial-BoldMT/Subtype/TrueType/Encoding/WinAnsiEncoding/LastChar
>255/Widths[750 750 750 750 750 750 750 750 750
>750 750 750 750 750 750 750 750 750 750 750 750
>750 750 ...

Revision history for this message
In , Pedro Villavicencio (pedro) wrote :
Download full text (3.4 KiB)

this report has been filed here:

https://bugs.edge.launchpad.net/ubuntu/+source/poppler/+bug/288429

"evince crashes with the following pdf:

http://launchpadlibrarian.net/19468834/bowdengas.LabelGenerationServlet

"

.
Thread 1 (process 23427):
#0 Form::findWidgetByRef (this=0x0, aref={num = 41, gen = 0}) at Form.cc:1231
 i = 0
#1 0xb6fcff84 in AnnotWidget::initialize (this=0x96e45a8, xrefA=0x960a278, catalog=0x960a2e8,
    dict=0x96e3900) at Annot.cc:1735
 obj1 = {type = objNone, {booln = 0, intg = 0, real = 2.999345074789527e-263, string = 0x0,
    name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 158218496}, cmd = 0x0}}
#2 0xb6fd0294 in AnnotWidget (this=0x96e45a8, xrefA=0x960a278, dict=0x96e3900, catalog=0x960a2e8,
    obj=0xbf916894) at Annot.cc:1714
No locals.
#3 0xb6fd26b2 in Annots::createAnnot (this=0x96cded8, xref=0x960a278, dict=0x96e3900,
    catalog=0x960a2e8, obj=0xbf916894) at Annot.cc:3394
 typeName = (GooString *) 0x96692e0
 annot = <value optimized out>
 obj1 = {type = objName, {booln = 158219384, intg = 158219384, real = 278.47998946248072,
    string = 0x96e3c78, name = 0x96e3c78 "Widget", array = 0x96e3c78, dict = 0x96e3c78,
    stream = 0x96e3c78, ref = {num = 158219384, gen = 1081173934}, cmd = 0x96e3c78 "Widget"}}
#4 0xb6fd29ca in Annots (this=0x96cded8, xref=0x960a278, catalog=0x960a2e8, annotsObj=0xbf91693c)
    at Annot.cc:3333
No locals.
#5 0xb7038666 in Page::displaySlice (this=0x960afe8, out=0x960c500, hDPI=15.058823529411764,
    vDPI=15.058823529411764, rotate=0, useMediaBox=0, crop=1, sliceX=0, sliceY=0, sliceW=128,
    sliceH=165, printing=0, catalog=0x960a2e8, abortCheckCbk=0, abortCheckCbkData=0x0,
    annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:421
 gfx = (Gfx *) 0x9645e98
 obj = {type = objArray, {booln = 158146448, intg = 158146448,
    real = 1.5428969385246546e-263, string = 0x96d1f90, name = 0x96d1f90 "x¢`\tèzm\t\b",
    array = 0x96d1f90, dict = 0x96d1f90, stream = 0x96d1f90, ref = {num = 158146448,
      gen = 157227008}, cmd = 0x96d1f90 "x¢`\tèzm\t\b"}}
 annotList = (Annots *) 0x96cded8
 i = <value optimized out>
#6 0xb72e62f6 in _poppler_page_render_to_pixbuf (page=0x95e2118, src_x=0, src_y=0, src_width=128,
    src_height=165, scale=0.20915032679738563, rotation=0, printing=0, pixbuf=0x960ba48)
    at poppler-page.cc:751
 data = {cairo_data = 0x9630f00 'ÿ' <repeats 200 times>..., surface = 0x960d8c0,
  cairo = 0x9645b08}
#7 0xb731308d in pdf_document_thumbnails_get_thumbnail (document_thumbnails=0x95e2200,
    rc=0x9620c00, border=0) at ev-poppler.cc:1262
 pixbuf = (GdkPixbuf *) 0x960ba48
 border_pixbuf = <value optimized out>
#8 0xb7fe10f2 in ev_document_thumbnails_get_thumbnail (document=0x95e2200, rc=0x9620c00, border=0)
    at ev-document-thumbnails.c:58
 __PRETTY_FUNCTION__ = "ev_document_thumbnails_get_thumbnail"
#9 0x08048f21 in evince_thumbnail_pngenc_get (document=0x95e2200,
    thumbnail=0xbf918c28 "/tmp/.gnome_thumbnail.0ZWNJU", size=<value optimized out>)
    at evince-thumbnailer.c:75
 rc = (EvRenderContext *) 0x9620c00
 width = 612
 height = 792
 pixbuf = <value optimized out>
 page = (EvPage *) 0x95e53c0
#10 ...

Read more...

Revision history for this message
In , Albert Astals Cid (aacid) wrote :

You are running an old poppler version.

Revision history for this message
Pedro Villavicencio (pedro) wrote :

confirmed, will send it upstream, thanks.

Changed in poppler:
status: Incomplete → Triaged
Revision history for this message
Pedro Villavicencio (pedro) wrote :

I've sent this at https://bugs.freedesktop.org/show_bug.cgi?id=18603 ; thanks for reporting.

Changed in poppler:
status: Unknown → Confirmed
Changed in poppler:
status: Confirmed → Fix Released
Revision history for this message
Sebastien Bacher (seb128) wrote :

the bug has been fixed upstream and the new version is in jaunty now

Changed in poppler:
status: Triaged → Fix Released
Changed in poppler:
importance: Unknown → Critical
Changed in poppler:
importance: Critical → Unknown
Changed in poppler:
importance: Unknown → Critical
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.