Bug 349043 – Nautilus crash

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 349043 - Nautilus crash


Summary:	Nautilus crash


Status:	RESOLVED FIXED

Product:	evince
Classification:	Core
Component:	general
Version:	0.5.x
Hardware:	Other Linux

Importance:	Normal major
Target Milestone:	---
Assigned To:	Evince Maintainers
QA Contact:	Evince Maintainers

URL:
Whiteboard:

Duplicates:	356082 (view as bug list)
Depends on:
Blocks:

Reported:	2006-07-28 06:52 UTC by Eugenia Loli-Queru
Modified:	2006-09-19 04:41 UTC

See Also:
GNOME target:	---
GNOME version:	2.15/2.16

Description Eugenia Loli-Queru 2006-07-28 06:52:45 UTC

Nautilus crash when I right click on PROPERTIES on .kdc files. KDC files are Kodak's RAW picture file format. Please download below a KDC file below to test it yourself, the crash is reproducible:
http://www.gnomefiles.org/shots/kdc.tar.bz2

Backtrace was generated from '/opt/gnome/bin/nautilus'
(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1226638912 (LWP 3261)]
[New Thread -1228153952 (LWP 3264)]
0xffffe410 in __kernel_vsyscall ()

+ Trace 69729

Thread 1 (Thread -1226638912 (LWP 3261))

#0 __kernel_vsyscall
#1 __waitpid_nocancel
from /lib/libpthread.so.0
#2 libgnomeui_segv_handle
from /opt/gnome/lib/libgnomeui-2.so.0
#3 <signal handler called>
#4 TIFFClose
from /usr/lib/libtiff.so.3
#5 tiff_document_finalize
from /opt/gnome/lib/nautilus/extensions-1.0/libevince-properties-page.so
#6 g_object_unref
from /usr/lib/libgobject-2.0.so.0
#7 ev_properties_get_pages
from /opt/gnome/lib/nautilus/extensions-1.0/libevince-properties-page.so
#8 nautilus_property_page_provider_get_pages
from /opt/gnome/lib/libnautilus-extension.so.1
#9 fm_directory_view_bump_zoom_level
#10 fm_directory_view_bump_zoom_level
#11 nautilus_clipboard_monitor_emit_changed
#12 nautilus_directory_async_state_changed
#13 nautilus_directory_async_state_changed
#14 nautilus_undo_transaction_unregister_object
#15 nautilus_file_get_volume
#16 fm_directory_view_bump_zoom_level
#17 fm_directory_view_bump_zoom_level
#18 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#19 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#20 signal_emit_unlocked_R
from /usr/lib/libgobject-2.0.so.0
#21 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#22 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#23 _gtk_action_emit_activate
from /usr/lib/libgtk-x11-2.0.so.0
#24 gtk_action_activate
from /usr/lib/libgtk-x11-2.0.so.0
#25 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#26 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#27 signal_emit_unlocked_R
from /usr/lib/libgobject-2.0.so.0
#28 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#29 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#30 gtk_widget_activate
from /usr/lib/libgtk-x11-2.0.so.0
#31 gtk_menu_shell_activate_item
from /usr/lib/libgtk-x11-2.0.so.0
#32 gtk_menu_shell_button_release
from /usr/lib/libgtk-x11-2.0.so.0
#33 gtk_menu_button_release
from /usr/lib/libgtk-x11-2.0.so.0
#34 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#35 g_type_class_meta_marshal
from /usr/lib/libgobject-2.0.so.0
#36 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#37 signal_emit_unlocked_R
from /usr/lib/libgobject-2.0.so.0
#38 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#39 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#40 gtk_widget_event_internal
from /usr/lib/libgtk-x11-2.0.so.0
#41 gtk_propagate_event
from /usr/lib/libgtk-x11-2.0.so.0
#42 gtk_main_do_event
from /usr/lib/libgtk-x11-2.0.so.0
#43 gdk_event_dispatch
from /usr/lib/libgdk-x11-2.0.so.0
#44 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#45 g_main_context_iterate
from /usr/lib/libglib-2.0.so.0
#46 g_main_loop_run
from /usr/lib/libglib-2.0.so.0
#47 gtk_main
from /usr/lib/libgtk-x11-2.0.so.0
#48 POA_Nautilus_MetafileMonitor__init
#49 __libc_start_main
from /lib/libc.so.6
#50 ??
#0 __kernel_vsyscall

Comment 1 Jan de Groot 2006-08-15 22:17:05 UTC

This bug isn't in nautilus, it's in evince, as the trace shows. Removing evince "solves" the crash and nautilus views properties fine.

Opening the file with evince crashes evince on exit, so this must be an evince bug.

Comment 2 Jan de Groot 2006-08-15 22:45:32 UTC

To provide some more information, I compiled evince with -g, resulting in this terminal output:
** (evince:10058): CRITICAL **: tiff_document_get_n_pages: assertion `tiff_document->tiff != NULL' failed

** (evince:10058): CRITICAL **: tiff_document_get_n_pages: assertion `tiff_document->tiff != NULL' failed
Cannot access memory at address 0xe0305
Cannot access memory at address 0xe0305

together with this piece of GDB trace:

+ Trace 70520

#4 TIFFClose
from /usr/lib/libtiff.so.3
#5 tiff_document_finalize
at tiff-document.c line 277


which is this piece of code:
        TiffDocument *tiff_document = TIFF_DOCUMENT (object);

        TIFFClose (tiff_document->tiff);
        g_free (tiff_document->uri);

The provided object isn't a tiff document but a Kodak RAW file. It is casted to a TiffDocument pointer and then given to TIFFClose. If libtiff wouldn't crash with that, the g_free after it would crash evince anyways.

Comment 3 Nickolay V. Shmyrev 2006-08-16 00:04:56 UTC

Can you attach the file please? It looks like mime-type detection goes wrong somehow. Of course, evince is also responsible, I am looking on the way to fix it.

Comment 4 Nickolay V. Shmyrev 2006-08-16 00:12:23 UTC

I think to fix that problem we should just set error in tiff_document_load and check not only for error but for return value also in ev_properties_get_page and in ev_document_factory_get_document. Someone should write a patch.

Comment 5 Nickolay V. Shmyrev 2006-08-16 00:13:31 UTC

Oh, sorry, I see the file is here. Thanks

Comment 6 Eugenia Loli-Queru 2006-08-16 00:14:12 UTC

Nickolay, there is info about MIME detection here: https://bugs.freedesktop.org/show_bug.cgi?id=4117
The RAW image formats GLOBs haven't made it into shared-mime-info as of yet and so these images are detected as TIFF (their container format is TIFF, but their internal data format is not).

Comment 7 Nickolay V. Shmyrev 2006-08-17 07:15:23 UTC

Should be fixed in HEAD, thanks to all

Comment 8 Nickolay V. Shmyrev 2006-09-19 04:41:56 UTC

*** Bug 356082 has been marked as a duplicate of this bug. ***