https://bugzilla.novell.com/show_bug.cgi?id=851837
https://bugzilla.novell.com/show_bug.cgi?id=851837#c0
Summary: Evince segmentation fault: cairo-polygon-intersect.c:
File or directory not found
Classification: openSUSE
Product: openSUSE 13.1
Version: Final
Platform: x86-64
OS/Version: openSUSE 13.1
Status: NEW
Severity: Normal
Priority: P5 - None
Component: GNOME
AssignedTo: bnc-team-gnome@forge.provo.novell.com
ReportedBy: robin.roevens@uza.be
QAContact: qa-bugs@suse.de
Found By: ---
Blocker: ---
Created an attachment (id=568715)
--> (http://bugzilla.novell.com/attachment.cgi?id=568715)
Specific PDF causing the segmentation fault
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101
Firefox/25.0
Evince crashes with a segmentation fault when browsing a particular PDF. This
crash happens when the thumbnail for one particular page is generated.
When the side pane is closed, evince doesn't crash when browsing to this
specific page.
Reproducible: Always
Steps to Reproduce:
1.Start evince EY-GISS-Under-cyber-attack.PDF
2.Ensure the side pane is enabled displaying the page thumbnails
3.Scroll down until page 23 is visible in the thumbnail side pane
Actual Results:
Segmentation fault
Expected Results:
Evince not crashing and page 23 is also thumbnailed and displayed correctly
Backtrace in gbd:
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffe2a0c700 (LWP 5809)]
active_edges (polygon=0x7fffe2a0ad80, top=12503, left=0x7fffc4521060) at
cairo-polygon-intersect.c:1235
1235 cairo-polygon-intersect.c: File or directory not found.
(gdb) bt
#0 active_edges (polygon=0x7fffe2a0ad80, top=12503, left=0x7fffc4521060) at
cairo-polygon-intersect.c:1235
#1 intersection_sweep (polygon=0x7fffe2a0ad80, num_events=<optimized out>,
start_events=<optimized out>) at cairo-polygon-intersect.c:1271
#2 _cairo_polygon_intersect (a=a@entry=0x7fffe2a0ad80,
winding_a=winding_a@entry=0, b=b@entry=0x7fffe2a0a950, winding_b=<optimized
out>)
at cairo-polygon-intersect.c:1466
#3 0x00007ffff6454b6a in clip_and_composite_polygon
(compositor=compositor@entry=0x7ffff67087c0 ,
extents=extents@entry=0x7fffe2a0b1a0,
polygon=polygon@entry=0x7fffe2a0ad80, fill_rule=CAIRO_FILL_RULE_WINDING,
antialias=antialias@entry=CAIRO_ANTIALIAS_DEFAULT)
at cairo-spans-compositor.c:937
#4 0x00007ffff6455999 in _cairo_spans_compositor_fill
(_compositor=0x7ffff67087c0 , extents=0x7fffe2a0b1a0,
path=<optimized out>,
fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001,
antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-spans-compositor.c:1165
#5 0x00007ffff6414967 in _cairo_compositor_fill (compositor=0x7ffff67087c0
, surface=0x7fffc4482590, op=<optimized out>,
source=<optimized out>, path=0xc523a8, fill_rule=CAIRO_FILL_RULE_WINDING,
tolerance=0.10000000000000001, antialias=CAIRO_ANTIALIAS_DEFAULT,
clip=clip@entry=0xd95790) at cairo-compositor.c:203
#6 0x00007ffff642487f in _cairo_image_surface_fill
(abstract_surface=<optimized out>, op=<optimized out>, source=<optimized out>,
path=<optimized out>,
fill_rule=<optimized out>, tolerance=<optimized out>, antialias=<optimized
out>, clip=0xd95790) at cairo-image-surface.c:982
#7 0x00007ffff64588a4 in _cairo_surface_fill (surface=0x7fffc4482590,
op=CAIRO_OPERATOR_OVER, source=0x7fffe2a0b560, path=0xc523a8, fill_rule=
CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001,
antialias=CAIRO_ANTIALIAS_DEFAULT, clip=0xd95790) at cairo-surface.c:2255
#8 0x00007ffff641c44c in _cairo_gstate_fill (gstate=0x7fffc443c5d0,
path=path@entry=0xc523a8) at cairo-gstate.c:1308
#9 0x00007ffff6415f19 in _cairo_default_context_fill (abstract_cr=0xc52040) at
cairo-default-context.c:1058
#10 0x00007ffff640f795 in cairo_fill (cr=0xc52040) at cairo.c:2201
#11 0x00007fffe1dc11ac in CairoOutputDev::fill(GfxState*) () from
/usr/lib64/libpoppler-glib.so.8
#12 0x00007fffe16c47e0 in Gfx::opFill(Object*, int) () from
/usr/lib64/libpoppler.so.43
#13 0x00007fffe16c1299 in Gfx::go(bool) () from /usr/lib64/libpoppler.so.43
#14 0x00007fffe16c16dd in Gfx::display(Object*, bool) () from
/usr/lib64/libpoppler.so.43
#15 0x00007fffe1703608 in Page::displaySlice(OutputDev*, double, double, int,
bool, bool, int, int, int, int, bool, bool (*)(void*), void*, bool (*)(Annot*,
void*), void*, bool) () from /usr/lib64/libpoppler.so.43
#16 0x00007fffe1db4a77 in ?? () from /usr/lib64/libpoppler-glib.so.8
#17 0x00007fffe2003e6c in ?? () from
/usr/lib64/evince/4/backends/libpdfdocument.so
#18 0x00007fffe20043fa in ?? () from
/usr/lib64/evince/4/backends/libpdfdocument.so
#19 0x00007ffff754f0db in ?? () from /usr/lib64/libevview3.so.3
#20 0x00007ffff755078a in ?? () from /usr/lib64/libevview3.so.3
#21 0x00007ffff572cff5 in ?? () from /usr/lib64/libglib-2.0.so.0
#22 0x00007ffff51a40db in start_thread () from /lib64/libpthread.so.0
#23 0x00007ffff4ed490d in clone () from /lib64/libc.so.6
Also tested in openSUSE 12.3: same problem
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
