GNOME Bugzilla – Bug 374750
crash in fontconfig when loading
Last modified: 2007-10-08 13:09:34 UTC
Version: 0.6.1 What were you doing when the application crashed? Open a pdf document Distribution: Ubuntu 6.10 (edgy) Gnome Release: 2.16.1 2006-10-02 (Ubuntu) BugBuddy Version: 2.16.0 Memory status: size: 23433216 vsize: 0 resident: 23433216 share: 0 rss: 7761920 rss_rlim: 0 CPU usage: start_time: 1163417507 rtime: 0 utime: 36 stime: 0 cutime:14 cstime: 0 timeout: 22 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/bin/evince' (no debugging symbols found) Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". (no debugging symbols found) [Thread debugging using libthread_db enabled] [New Thread -1229371728 (LWP 20032)] (no debugging symbols found) 0xffffe410 in __kernel_vsyscall ()
+ Trace 86109
Thread 1 (Thread -1229371728 (LWP 20032))
I had a similar crash while trying to open a pdf (not reproducable) This is the trace: Distribution: Ubuntu 6.10 (edgy) Gnome Release: 2.16.1 2006-10-02 (Ubuntu) BugBuddy Version: 2.16.0 Memory status: size: 60846080 vsize: 0 resident: 60846080 share: 0 rss: 25460736 rss_rlim: 0 CPU usage: start_time: 1163360564 rtime: 0 utime: 107 stime: 0 cutime:99 cstime: 0 timeout: 8 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/bin/evince' Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1230035280 (LWP 14966)] [New Thread -1231541344 (LWP 14971)] 0xffffe410 in __kernel_vsyscall ()
+ Trace 86147
Thread 2 (Thread -1231541344 (LWP 14971))
Do i have to install more dbgsym Packages? Which ones?
Thanks for the bug report. Unfortunately it lacks some information that may help us in finding the cause of the bug. Can you, if possible, attach the file causing the crash? Also this may be a Poppler Bug (the backend used by Evince to render PDF), could you please supply the poppler version and type? You can find it in the Help->About menu in Evince.
(needinfo state as per last comment.)
*** Bug 375088 has been marked as a duplicate of this bug. ***
*** Bug 375816 has been marked as a duplicate of this bug. ***
*** Bug 375900 has been marked as a duplicate of this bug. ***
Sorry, that I'm not able to provide the documents where evince crashed. It happened only once with this PDF, was not reproducable, but happened some time later with another doocument. Evince is using "poppler 0.5.4 (splash)" (Ubuntu 6.10)
Looks like a poppler or fontconfig crasher.
*** Bug 378671 has been marked as a duplicate of this bug. ***
*** Bug 380806 has been marked as a duplicate of this bug. ***
And another crash... happens quite often Distribution: Ubuntu 6.10 (edgy) Gnome Release: 2.16.1 2006-10-02 (Ubuntu) BugBuddy Version: 2.16.0 Memory status: size: 88481792 vsize: 0 resident: 88481792 share: 0 rss: 39456768 rss_rlim: 0 CPU usage: start_time: 1165326494 rtime: 0 utime: 88 stime: 0 cutime:76 cstime: 0 timeout: 12 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/bin/evince' (no debugging symbols found) Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1229592912 (LWP 8324)] [New Thread -1231098976 (LWP 8326)] 0xffffe410 in __kernel_vsyscall ()
+ Trace 91764
Thread 2 (Thread -1231098976 (LWP 8326))
and once again. What could be the problem? It's really annoying. This time i was just scrlling in the document, while pages where loading. Distribution: Ubuntu 6.10 (edgy) Gnome Release: 2.16.1 2006-10-02 (Ubuntu) BugBuddy Version: 2.16.0 Memory status: size: 1154211840 vsize: 0 resident: 1154211840 share: 0 rss: 24535040 rss_rlim: 0 CPU usage: start_time: 1165327014 rtime: 0 utime: 270 stime: 0 cutime:192 cstime: 0 timeout: 78 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/bin/evince' (no debugging symbols found) Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1229125968 (LWP 8808)] [New Thread -1230632032 (LWP 8810)] 0xffffe410 in __kernel_vsyscall ()
+ Trace 91766
Thread 2 (Thread -1230632032 (LWP 8810))
in reply to comment 12 Tomas: the problem is in your broken fontconfig. Ping your ubuntu maintainer for distributed broken package. Everything works fine here.
As discussed earlier on IRC, this may be caused by threading issues when using fontconfig's pattern matching from multiple threads (thumbnails and main display).
Sounds reasonable, well, we can protect thumbnails by mutex then.
*** Bug 365968 has been marked as a duplicate of this bug. ***
nickolay, will you look into this soon?
As I am on a dual core system and I am strongly affected (evince only starts in 30% of the cases whithout crashing) I think Wouter guessed correctly. I would be very willing to try out patches!
*** Bug 384430 has been marked as a duplicate of this bug. ***
Nickolay, ping!
*** Bug 378248 has been marked as a duplicate of this bug. ***
It should be fixed in cvs head now.
See bug #387151 for a crash after applying your patch.
hmm, I'm unable to reproduce it now so it's going to be even more difficult to fix it
I've just applied a new patch which also fixes another fontconfig crash when opening properties dialog. It doesn't crash for me anymore. Wouter, could you confirm it's actually fixed now?
I am still seeing evince crashing most of the time on startup :-((
Hm, bugreports@nn7.de, can you please describe your system: gtk version, gnome version, fontconfig version, xserver version, evince and poppler version. Can you please attach an example backtrace from the crash you get. The reason that I am asking is that I can't reproduce the crash at all. Something went wrong somewhere and really it looks like multithreaded crash. But it is not clear where it happens. Btw, try to run evince under valgrind, probably it will give some hints.
*** Bug 387460 has been marked as a duplicate of this bug. ***
*** Bug 387351 has been marked as a duplicate of this bug. ***
Created attachment 78669 [details] valgrind run
Created attachment 78670 [details] another valgrind run
gnome 2.16 $ Xorg -version X Window System Version 7.1.1 $ evince --version Gnome evince 0.7.0 library versions (debian sid...) ii libgtk2.0-0 2.10.6-4 ii fontconfig 2.4.2-1 ii libpoppler1 0.5.4-2 output and backtrace for the crash I get: output: Failed to read a valid object file image from memory. Cannot access memory at address 0xc Cannot access memory at address 0xc bt: Distribution: Debian 3.1 (sarge) Gnome Release: 2.15.91 2006-08-13 (Debian) BugBuddy Version: 2.16.0 Memory status: size: 38981632 vsize: 0 resident: 38981632 share: 0 rss: 15241216 rss_rlim: 0 CPU usage: start_time: 1166607545 rtime: 0 utime: 44 stime: 0 cutime:37 cstime: 0 timeout: 7 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/local/bin/evince' Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1230166336 (LWP 26468)] [New Thread -1232389200 (LWP 26469)] 0xb7fd8410 in ?? ()
+ Trace 95633
running valgrind 5 times I got these two different valgrind runs (attachment 78669 [details] and 78670) I was however unable to reproduce the cache while valgrind was running. it did not help to add --trace-children=yes as argument / same output. I guess I am seeing this as evince here is truely running threads in parallel...
*** Bug 387151 has been marked as a duplicate of this bug. ***
*** Bug 387150 has been marked as a duplicate of this bug. ***
Thanks a lot for your valgrind traces bugreports. Btw, there is one interesting moment I don't understand: ** (evince:22793): CRITICAL **: ev_page_cache_get_n_pages: assertion `EV_IS_PAGE_CACHE (page_cache)' failed Definitely something goes wrong :(
*** Bug 388272 has been marked as a duplicate of this bug. ***
*** Bug 388341 has been marked as a duplicate of this bug. ***
*** Bug 390390 has been marked as a duplicate of this bug. ***
*** Bug 390391 has been marked as a duplicate of this bug. ***
*** Bug 390570 has been marked as a duplicate of this bug. ***
*** Bug 390571 has been marked as a duplicate of this bug. ***
*** Bug 390833 has been marked as a duplicate of this bug. ***
*** Bug 392987 has been marked as a duplicate of this bug. ***
*** Bug 394065 has been marked as a duplicate of this bug. ***
*** Bug 394285 has been marked as a duplicate of this bug. ***
Hi. I provided some info here: http://bugzilla.gnome.org/show_bug.cgi?id=392987 for me it crashes with any pdf, about 1 out of 3 times. I put a backtrace there as well, and I can expand on it if you want more info. Just let me know.
Right now, the document is loaded with the font-config lock held and the main window is shown with the lock held too. Could you upgrade evince from svn trunk and try again, please? Thanks a lot for your help.
(In reply to comment #47) > Could you upgrade evince from svn trunk > and try again, please? who, me? or anyone? I'm having trouble compiling from http://svn.gnome.org/svn/evince/trunk, is there a tar.gz somewhere I could use? like: http://ftp.gnome.org/pub/GNOME/sources/evince/0.7/ thanks.
what trouble? is evince broken in trunk? There isn't a tarball yet, we'll probably release 0.7.1 soon, but it would be nice to know whether this bug has been fixed before the release. Can I help you compiling evince from svn trunk in some way? Thanks again :-)
Iain, a new evince release is available at http://ftp.gnome.org/pub/GNOME/sources/evince/0.7/
Carlos, I used evince 0.7.1 and it worked for quite some time (opened up around 20-50 documents) but then the very same problem... crash on startup. This time I've immediately collected a valgrind trace: ]==21697== Memcheck, a memory error detector. ==21697== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al. ==21697== Using LibVEX rev 1658, a library for dynamic binary translation. ==21697== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP. ==21697== Using valgrind-3.2.1-Debian, a dynamic binary instrumentation framework. ==21697== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al. ==21697== For more details, rerun with: -v ==21697== ==21763== Thread 2: ==21763== Conditional jump or move depends on uninitialised value(s) ==21763== at 0x44290CC: __pthread_manager (manager.c:128) ==21763== by 0x45EB349: clone (clone.S:119) ==21763== ==21763== Syscall param clone(child_tidptr) contains uninitialised byte(s) ==21763== at 0x45EB33C: clone (clone.S:100) ==21763== by 0x45EB349: clone (clone.S:119) ==21697== ==21697== Thread 1: ==21697== Invalid read of size 1 ==21697== at 0x401E2DD: strcmp (mc_replace_strmem.c:341) ==21697== by 0x4F8F3F3: g_str_equal (gstring.c:77) ==21697== by 0x4F665EE: g_hash_table_insert (ghash.c:240) ==21697== by 0x4975F47: insert_theme (gtkicontheme.c:2183) ==21697== by 0x4977776: ensure_valid_themes (gtkicontheme.c:1040) ==21697== by 0x497807D: gtk_icon_theme_has_icon (gtkicontheme.c:1419) ==21697== by 0x48D09B3: gtk_action_group_add_actions_full (gtkactiongroup.c:787) ==21697== by 0x48D0A4B: gtk_action_group_add_actions (gtkactiongroup.c:707) ==21697== by 0x8083399: ev_window_init (ev-window.c:4512) ==21697== by 0x4F2FE85: g_type_create_instance (gtype.c:1569) ==21697== by 0x4F16BC1: g_object_constructor (gobject.c:1041) ==21697== by 0x4F14E37: g_object_newv (gobject.c:937) ==21697== Address 0x5F72AB8 is 0 bytes inside a block of size 7 free'd ==21697== at 0x401CFA5: free (vg_replace_malloc.c:233) ==21697== by 0x4F79F20: g_free (gmem.c:187) ==21697== by 0x4F664FE: g_hash_table_replace (ghash.c:390) ==21697== by 0x4975F2C: insert_theme (gtkicontheme.c:2182) ==21697== by 0x4977776: ensure_valid_themes (gtkicontheme.c:1040) ==21697== by 0x497807D: gtk_icon_theme_has_icon (gtkicontheme.c:1419) ==21697== by 0x48D09B3: gtk_action_group_add_actions_full (gtkactiongroup.c:787) ==21697== by 0x48D0A4B: gtk_action_group_add_actions (gtkactiongroup.c:707) ==21697== by 0x8083399: ev_window_init (ev-window.c:4512) ==21697== by 0x4F2FE85: g_type_create_instance (gtype.c:1569) ==21697== by 0x4F16BC1: g_object_constructor (gobject.c:1041) ==21697== by 0x4F14E37: g_object_newv (gobject.c:937) ==21697== ==21697== Invalid read of size 1 ==21697== at 0x401E2F8: strcmp (mc_replace_strmem.c:341) ==21697== by 0x4F8F3F3: g_str_equal (gstring.c:77) ==21697== by 0x4F665EE: g_hash_table_insert (ghash.c:240) ==21697== by 0x4975F47: insert_theme (gtkicontheme.c:2183) ==21697== by 0x4977776: ensure_valid_themes (gtkicontheme.c:1040) ==21697== by 0x497807D: gtk_icon_theme_has_icon (gtkicontheme.c:1419) ==21697== by 0x48D09B3: gtk_action_group_add_actions_full (gtkactiongroup.c:787) ==21697== by 0x48D0A4B: gtk_action_group_add_actions (gtkactiongroup.c:707) ==21697== by 0x8083399: ev_window_init (ev-window.c:4512) ==21697== by 0x4F2FE85: g_type_create_instance (gtype.c:1569) ==21697== by 0x4F16BC1: g_object_constructor (gobject.c:1041) ==21697== by 0x4F14E37: g_object_newv (gobject.c:937) ==21697== Address 0x5F72AB9 is 1 bytes inside a block of size 7 free'd ==21697== at 0x401CFA5: free (vg_replace_malloc.c:233) ==21697== by 0x4F79F20: g_free (gmem.c:187) ==21697== by 0x4F664FE: g_hash_table_replace (ghash.c:390) ==21697== by 0x4975F2C: insert_theme (gtkicontheme.c:2182) ==21697== by 0x4977776: ensure_valid_themes (gtkicontheme.c:1040) ==21697== by 0x497807D: gtk_icon_theme_has_icon (gtkicontheme.c:1419) ==21697== by 0x48D09B3: gtk_action_group_add_actions_full (gtkactiongroup.c:787) ==21697== by 0x48D0A4B: gtk_action_group_add_actions (gtkactiongroup.c:707) ==21697== by 0x8083399: ev_window_init (ev-window.c:4512) ==21697== by 0x4F2FE85: g_type_create_instance (gtype.c:1569) ==21697== by 0x4F16BC1: g_object_constructor (gobject.c:1041) ==21697== by 0x4F14E37: g_object_newv (gobject.c:937) ==21697== ==21697== Syscall param writev(vector[...]) points to uninitialised byte(s) ==21697== at 0x45E4525: do_writev (writev.c:46) ==21697== by 0x45E45D8: writev (writev.c:65) ==21697== by 0x4E5468D: _X11TransSocketWritev (Xtranssock.c:2191) ==21697== by 0x4E542CE: _X11TransWritev (Xtrans.c:911) ==21697== by 0x4E599BD: _XSend (XlibInt.c:1427) ==21697== by 0x4E300E4: XChangeProperty (ChProp.c:85) ==21697== by 0x4C18B69: gdk_window_set_icon_list (gdkwindow-x11.c:4347) ==21697== by 0x4ACDF38: gtk_window_realize_icon (gtkwindow.c:2856) ==21697== by 0x4AD6250: gtk_window_realize (gtkwindow.c:4384) ==21697== by 0x4F1CE1A: g_cclosure_marshal_VOID__VOID (gmarshal.c:77) ==21697== by 0x4F0DF48: g_type_class_meta_marshal (gclosure.c:567) ==21697== by 0x4F0F98A: g_closure_invoke (gclosure.c:490) ==21697== Address 0x55B60AD is 381 bytes inside a block of size 16,384 alloc'd ==21697== at 0x401C6CA: calloc (vg_replace_malloc.c:279) ==21697== by 0x4E44C8D: XOpenDisplay (OpenDis.c:262) ==21697== by 0x4BF9B91: gdk_display_open (gdkdisplay-x11.c:145) ==21697== by 0x4BD741E: gdk_display_open_default_libgtk_only (gdk.c:278) ==21697== by 0x49A9534: post_parse_hook (gtkmain.c:552) ==21697== by 0x4F7FC4E: g_option_context_parse (goption.c:1627) ==21697== by 0x42A9858: gnome_program_parse_args (in /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x42AAB5C: (within /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x42AAE78: gnome_program_init (in /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x808B21E: main (main.c:281) ==21697== ==21697== Syscall param write(buf) points to uninitialised byte(s) ==21697== at 0x442E9DB: write (in /usr/lib/debug/libpthread-0.10.so) ==21697== by 0x4E5426E: _X11TransWrite (Xtrans.c:897) ==21697== by 0x4E59BA5: _XFlushInt (XlibInt.c:665) ==21697== by 0x4E59C7A: _XReply (XlibInt.c:1694) ==21697== by 0x4E3FCAA: XInternAtoms (IntAtom.c:287) ==21697== by 0x4C10ED7: _gdk_x11_precache_atoms (gdkproperty-x11.c:243) ==21697== by 0x4BFADFC: base_precache_atoms (gdkdnd-x11.c:2615) ==21697== by 0x4BFAE4D: gdk_window_register_dnd (gdkdnd-x11.c:3746) ==21697== by 0x4ADDAAD: gtk_drag_dest_realized (gtkdnd.c:1886) ==21697== by 0x4F1CE1A: g_cclosure_marshal_VOID__VOID (gmarshal.c:77) ==21697== by 0x4F0F98A: g_closure_invoke (gclosure.c:490) ==21697== by 0x4F1FF2C: signal_emit_unlocked_R (gsignal.c:2440) ==21697== Address 0x55B60B0 is 384 bytes inside a block of size 16,384 alloc'd ==21697== at 0x401C6CA: calloc (vg_replace_malloc.c:279) ==21697== by 0x4E44C8D: XOpenDisplay (OpenDis.c:262) ==21697== by 0x4BF9B91: gdk_display_open (gdkdisplay-x11.c:145) ==21697== by 0x4BD741E: gdk_display_open_default_libgtk_only (gdk.c:278) ==21697== by 0x49A9534: post_parse_hook (gtkmain.c:552) ==21697== by 0x4F7FC4E: g_option_context_parse (goption.c:1627) ==21697== by 0x42A9858: gnome_program_parse_args (in /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x42AAB5C: (within /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x42AAE78: gnome_program_init (in /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x808B21E: main (main.c:281) ** (evince:21764): WARNING **: Unimplemented named action: POPPLER_DEST_FITB, please post a bug report in Evince bugzilla (http://bugzilla.gnome.org) with a testcase. ==21697== ==21697== Syscall param write(buf) points to uninitialised byte(s) ==21697== at 0x442E9DB: write (in /usr/lib/debug/libpthread-0.10.so) ==21697== by 0x4E5426E: _X11TransWrite (Xtrans.c:897) ==21697== by 0x4E59BA5: _XFlushInt (XlibInt.c:665) ==21697== by 0x4E5AAFB: _XEventsQueued (XlibInt.c:733) ==21697== by 0x4E466F2: XPending (Pending.c:57) ==21697== by 0x4C03D1C: gdk_check_xpending (gdkevents-x11.c:148) ==21697== by 0x4C03E10: gdk_event_prepare (gdkevents-x11.c:2277) ==21697== by 0x4F7507C: g_main_context_prepare (gmain.c:2364) ==21697== by 0x4F75844: g_main_context_iterate (gmain.c:2657) ==21697== by 0x4F75F56: g_main_loop_run (gmain.c:2881) ==21697== by 0x49A8D30: gtk_main (gtkmain.c:1001) ==21697== by 0x808B73F: main (main.c:320) ==21697== Address 0x55B5F3E is 14 bytes inside a block of size 16,384 alloc'd ==21697== at 0x401C6CA: calloc (vg_replace_malloc.c:279) ==21697== by 0x4E44C8D: XOpenDisplay (OpenDis.c:262) ==21697== by 0x4BF9B91: gdk_display_open (gdkdisplay-x11.c:145) ==21697== by 0x4BD741E: gdk_display_open_default_libgtk_only (gdk.c:278) ==21697== by 0x49A9534: post_parse_hook (gtkmain.c:552) ==21697== by 0x4F7FC4E: g_option_context_parse (goption.c:1627) ==21697== by 0x42A9858: gnome_program_parse_args (in /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x42AAB5C: (within /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x42AAE78: gnome_program_init (in /usr/lib/libgnome-2.so.0.1600.0) ==21697== by 0x808B21E: main (main.c:281) ** (evince:21764): WARNING **: Unimplemented named action: POPPLER_DEST_FITB, please post a bug report in Evince bugzilla (http://bugzilla.gnome.org) with a testcase. ** (evince:21764): WARNING **: Unimplemented named action: POPPLER_DEST_FITB, please post a bug report in Evince bugzilla (http://bugzilla.gnome.org) with a testcase. ** (evince:21764): WARNING **: Unimplemented named action: POPPLER_DEST_FITB, please post a bug report in Evince bugzilla (http://bugzilla.gnome.org) with a testcase. ==21697== ==21697== ERROR SUMMARY: 66 errors from 7 contexts (suppressed: 196 from 10) ==21697== malloc/free: in use at exit: 2,712,918 bytes in 54,112 blocks. ==21697== malloc/free: 349,182 allocs, 295,070 frees, 55,055,104 bytes allocated. ==21697== For counts of detected errors, rerun with: -v ==21697== searching for pointers to 54,112 not-freed blocks. ==21697== checked 5,555,092 bytes. ==21697== ==21697== LEAK SUMMARY: ==21697== definitely lost: 224,098 bytes in 7,578 blocks. ==21697== possibly lost: 263,906 bytes in 277 blocks. ==21697== still reachable: 2,224,914 bytes in 46,257 blocks. ==21697== suppressed: 0 bytes in 0 blocks. ==21697== Use --leak-check=full to see details of leaked memory.
This time I even managed to crash it on *exit*: Distribution: Debian 3.1 (sarge) Gnome Release: 2.15.91 2006-08-13 (Debian) BugBuddy Version: 2.16.0 Memory status: size: 57978880 vsize: 0 resident: 57978880 share: 0 rss: 32026624 rss_rlim: 0 CPU usage: start_time: 1168462423 rtime: 0 utime: 1256 stime: 0 cutime:1192 cstime: 0 timeout: 64 it_real_value: 0 frequency: 0 Backtrace was generated from '/usr/local/bin/evince' Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1230580032 (LWP 27006)] [New Thread -1232802896 (LWP 27007)] 0xb7f74410 in ?? ()
+ Trace 101072
Thread 1 (Thread -1230580032 (LWP 27006))
*** Bug 395180 has been marked as a duplicate of this bug. ***
*** Bug 395394 has been marked as a duplicate of this bug. ***
*** Bug 395395 has been marked as a duplicate of this bug. ***
*** Bug 396100 has been marked as a duplicate of this bug. ***
*** Bug 395330 has been marked as a duplicate of this bug. ***
*** Bug 394720 has been marked as a duplicate of this bug. ***
*** Bug 393174 has been marked as a duplicate of this bug. ***
(In reply to comment #49) > what trouble? is evince broken in trunk? There isn't a tarball yet, we'll > probably release 0.7.1 soon, but it would be nice to know whether this bug has > been fixed before the release. I couldn't compile from svn, but the 0.7.1 tarball works, so I'm going with that. > Can I help you compiling evince from svn trunk > in some way? only if you want me to go back to the trunk and see if my compile errors are still there... > Thanks again :-) no worries. Here is the backtrace from evince-0.7.1 (with gnome-icon-themes-2.17.5). It crashes the same as 0.6.1 $ gdb evince GNU gdb 6.6 Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i686-pc-linux-gnu"... Using host libthread_db library "/lib/libthread_db.so.1". (gdb) run P431-FCMS.pdf Starting program: /usr/bin/evince P431-FCMS.pdf Failed to read a valid object file image from memory. [Thread debugging using libthread_db enabled] [New Thread -1228007232 (LWP 28315)] [New Thread -1229268080 (LWP 28322)] (evince:28315): GLib-GObject-WARNING **: attempt to retrieve private data for invalid type 'EvLinkDest' Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1228007232 (LWP 28315)] ev_link_dest_init (ev_link_dest=0x824c0a8) at ev-link-dest.c:274 274 ev-link-dest.c: No such file or directory. in ev-link-dest.c (gdb) thread apply all bt
+ Trace 102286
Thread 1 (Thread -1228007232 (LWP 28315))
Ok, the good news is that it's not a crash in font-config, so hopefully most of font-config crashes are fixed in 0.7.x Could you open a new bug with this backtrace so that it can be discussed there, please? it would be nice if you also provide the pdf file that is causing the crash. Thanks for your help.
Carlos, whom were you talking to ? Is this re: #51/52 or #60 ?
hmm, #60 :-)
Looking at comment #52 again, it also doesn't look like a fontconfig crash, so it should be discussed in a separate bug report.
*** Bug 396896 has been marked as a duplicate of this bug. ***
(In reply to comment #61) > Ok, the good news is that it's not a crash in font-config, so hopefully most of > font-config crashes are fixed in 0.7.x > > Could you open a new bug with this backtrace so that it can be discussed there, > please? OK done. But I seem to get a different looking backtrace every time I start evince - how do I know what the cause is? Should I just post them all? > it would be nice if you also provide the pdf file that is causing the > crash. I haven't yet because it's not specific to one pdf... > Thanks for your help. anytime.
*** Bug 399055 has been marked as a duplicate of this bug. ***
*** Bug 400217 has been marked as a duplicate of this bug. ***
*** Bug 399900 has been marked as a duplicate of this bug. ***
*** Bug 401599 has been marked as a duplicate of this bug. ***
*** Bug 401835 has been marked as a duplicate of this bug. ***
*** Bug 401953 has been marked as a duplicate of this bug. ***
*** Bug 402635 has been marked as a duplicate of this bug. ***
*** Bug 402637 has been marked as a duplicate of this bug. ***
*** Bug 403828 has been marked as a duplicate of this bug. ***
*** Bug 404666 has been marked as a duplicate of this bug. ***
*** Bug 405973 has been marked as a duplicate of this bug. ***
*** Bug 406227 has been marked as a duplicate of this bug. ***
*** Bug 407309 has been marked as a duplicate of this bug. ***
*** Bug 407449 has been marked as a duplicate of this bug. ***
*** Bug 407706 has been marked as a duplicate of this bug. ***
*** Bug 409663 has been marked as a duplicate of this bug. ***
*** Bug 409915 has been marked as a duplicate of this bug. ***
*** Bug 410725 has been marked as a duplicate of this bug. ***
*** Bug 410769 has been marked as a duplicate of this bug. ***
*** Bug 410814 has been marked as a duplicate of this bug. ***
Isn't it possible to backport the patch in Edgy? Evinces crashes 5 or 6 times a day on my computer, and it's really annoying...
Evince 0.8 will out very soon and will have this bug fixed, although it's possible to release 0.6.2 from stable branch right now. KaL, what do you think?
I'm sorry, the Ubuntu bug manager sent me here and I forgot this is not an Ubuntu specific place. Actually, even if a new version of Evince is released, it will perhaps not be included in the current Ubuntu distribution (Edgy). It's a pity since Evince is a nice application and I'm forced to use acroread because of these constant crashes...
*** Bug 412220 has been marked as a duplicate of this bug. ***
*** Bug 413806 has been marked as a duplicate of this bug. ***
*** Bug 416010 has been marked as a duplicate of this bug. ***
I think we have caught most of the crashes related to threads and fontconfig in evince 0.7.2. I'm going to close it. Feel free to reopen it if you can reproduce it with evince >= 0.7.2.
*** Bug 417095 has been marked as a duplicate of this bug. ***
*** Bug 417227 has been marked as a duplicate of this bug. ***
*** Bug 417678 has been marked as a duplicate of this bug. ***
*** Bug 417752 has been marked as a duplicate of this bug. ***
*** Bug 417964 has been marked as a duplicate of this bug. ***
*** Bug 418891 has been marked as a duplicate of this bug. ***
*** Bug 419027 has been marked as a duplicate of this bug. ***
*** Bug 419950 has been marked as a duplicate of this bug. ***
*** Bug 422892 has been marked as a duplicate of this bug. ***
*** Bug 423004 has been marked as a duplicate of this bug. ***
*** Bug 423005 has been marked as a duplicate of this bug. ***
*** Bug 423006 has been marked as a duplicate of this bug. ***
*** Bug 415384 has been marked as a duplicate of this bug. ***
*** Bug 423133 has been marked as a duplicate of this bug. ***
*** Bug 423134 has been marked as a duplicate of this bug. ***
*** Bug 423135 has been marked as a duplicate of this bug. ***
*** Bug 423136 has been marked as a duplicate of this bug. ***
*** Bug 423235 has been marked as a duplicate of this bug. ***
*** Bug 423690 has been marked as a duplicate of this bug. ***
*** Bug 424027 has been marked as a duplicate of this bug. ***
*** Bug 424340 has been marked as a duplicate of this bug. ***
*** Bug 424477 has been marked as a duplicate of this bug. ***
*** Bug 425697 has been marked as a duplicate of this bug. ***
*** Bug 425698 has been marked as a duplicate of this bug. ***
*** Bug 425699 has been marked as a duplicate of this bug. ***
*** Bug 425701 has been marked as a duplicate of this bug. ***
*** Bug 425703 has been marked as a duplicate of this bug. ***
*** Bug 426619 has been marked as a duplicate of this bug. ***
*** Bug 427692 has been marked as a duplicate of this bug. ***
*** Bug 428561 has been marked as a duplicate of this bug. ***
*** Bug 430951 has been marked as a duplicate of this bug. ***
*** Bug 430952 has been marked as a duplicate of this bug. ***
*** Bug 430953 has been marked as a duplicate of this bug. ***
*** Bug 432383 has been marked as a duplicate of this bug. ***
*** Bug 432398 has been marked as a duplicate of this bug. ***
*** Bug 437631 has been marked as a duplicate of this bug. ***
*** Bug 440045 has been marked as a duplicate of this bug. ***
*** Bug 441023 has been marked as a duplicate of this bug. ***
*** Bug 441354 has been marked as a duplicate of this bug. ***
*** Bug 450825 has been marked as a duplicate of this bug. ***
*** Bug 453858 has been marked as a duplicate of this bug. ***
*** Bug 456001 has been marked as a duplicate of this bug. ***
*** Bug 457419 has been marked as a duplicate of this bug. ***
*** Bug 457809 has been marked as a duplicate of this bug. ***
*** Bug 459788 has been marked as a duplicate of this bug. ***
*** Bug 462735 has been marked as a duplicate of this bug. ***
*** Bug 472601 has been marked as a duplicate of this bug. ***
*** Bug 481246 has been marked as a duplicate of this bug. ***
*** Bug 478700 has been marked as a duplicate of this bug. ***
*** Bug 475776 has been marked as a duplicate of this bug. ***