After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 524735 - evince crashes on some documents
evince crashes on some documents
Status: RESOLVED FIXED
Product: evince
Classification: Core
Component: general
2.22.x
Other All
: High critical
: ---
Assigned To: Evince Maintainers
Evince Maintainers
: 525539 525759 541971 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2008-03-28 00:42 UTC by Dominik Sandjaja
Modified: 2008-07-13 20:35 UTC
See Also:
GNOME target: ---
GNOME version: 2.21/2.22


Attachments
PDF that triggers the crash (12.33 KB, application/pdf)
2008-03-31 07:44 UTC, oa
Details

Description Dominik Sandjaja 2008-03-28 00:42:36 UTC
Version: 2.22.0

What were you doing when the application crashed?
opening file "ScrapbookTutorial-1.2.pdf", also seen same error on other files which I can't disclose, though. Does not happen on all files.


Distribution: Fedora release 8.92 (Rawhide)
Gnome Release: 2.22.0 2008-03-26 (Red Hat, Inc)
BugBuddy Version: 2.22.0

System: Linux 2.6.25-0.155.rc6.git8.fc9.i686 #1 SMP Tue Mar 25 21:58:53 EDT 2008 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10499901
Selinux: No
Accessibility: Disabled
GTK+ Theme: Clearlooks
Icon Theme: gnome

Memory status: size: 70139904 vsize: 70139904 resident: 22953984 share: 13213696 rss: 22953984 rss_rlim: 4294967295
CPU usage: start_time: 1206664779 rtime: 130 utime: 82 stime: 48 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/evince'

[Thread debugging using libthread_db enabled]
[New Thread 0xb7efd950 (LWP 29505)]
[New Thread 0xb7babb90 (LWP 29506)]
0x00110416 in __kernel_vsyscall ()

Thread 2 (Thread 0xb7babb90 (LWP 29506))

  • #0 __kernel_vsyscall
  • #1 waitpid
    from /lib/libpthread.so.0
  • #2 g_spawn_sync
    from /lib/libglib-2.0.so.0
  • #3 g_spawn_command_line_sync
    from /lib/libglib-2.0.so.0
  • #4 ??
    from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
  • #5 ??
    from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
  • #6 google_breakpad::ExceptionHandler::InternalWriteMinidump
    from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
  • #7 google_breakpad::ExceptionHandler::HandleException
    from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
  • #8 <signal handler called>
  • #9 __kernel_vsyscall
  • #10 raise
    from /lib/libc.so.6
  • #11 abort
    from /lib/libc.so.6
  • #12 g_assertion_message
    from /lib/libglib-2.0.so.0
  • #13 g_assertion_message_expr
    from /lib/libglib-2.0.so.0
  • #14 ev_link_dest_from_dest
    at ev-poppler.cc line 868
  • #15 ev_link_from_action
    at ev-poppler.cc line 973
  • #16 build_tree
    at ev-poppler.cc line 1053
  • #17 pdf_document_links_get_links_model
    at ev-poppler.cc line 1103
  • #18 ev_document_links_get_links_model
    at ev-document-links.c line 65
  • #19 ev_job_links_run
    at ev-jobs.c line 270
  • #20 handle_job
    at ev-job-queue.c line 131
  • #21 ev_render_thread
    at ev-job-queue.c line 264
  • #22 ??
    from /lib/libglib-2.0.so.0
  • #23 start_thread
    from /lib/libpthread.so.0
  • #24 clone
    from /lib/libc.so.6


----------- .xsession-errors ---------------------
Fenstermanager-Warnung:meta_window_activate called by a pager with a 0 timestamp; the pager needs to be fixed.
Fenstermanager-Warnung:Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x4800003 (Evince Dok)
Fenstermanager-Warnung:meta_window_activate called by a pager with a 0 timestamp; the pager needs to be fixed.
**
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
Fenstermanager-Warnung:Buggy client sent a _NET_ACTIVE_WINDOW message with a timestamp of 0 for 0x4a00003 (Evince Dok)
Fenstermanager-Warnung:meta_window_activate called by a pager with a 0 timestamp; the pager needs to be fixed.
**
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
evince: xcb_lock.c:77: _XGetXCBBuffer: Zusicherung »((int) ((xcb_req) - (dpy->request)) >= 0)« nicht erfüllt.
**
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
Cannot access memory at address 0xd
Could not find the frame base for "ev_document_links_get_links_model".
Cannot access memory at address 0xd
--------------------------------------------------
Comment 1 Dominik Sandjaja 2008-03-28 01:01:03 UTC
OK, here is some more information with more -debuginfo-packages installed. Further more, BugBuddy does not always kick in, only about every 7th or 8th time I open the document, the other times evince just closes immediately. 

The document can be found here: http://amb.vis.ne.jp/mozilla/scrapbook/files/ScrapbookTutorial-1.2.pdf (692 kB).

Installed version of evince is: 
(/home/ds)$ rpm -qa | grep evince
evince-dvi-2.22.0-3.fc9.i386
evince-debuginfo-2.22.0-3.fc9.i386
evince-2.22.0-3.fc9.i386
evince-djvu-2.22.0-3.fc9.i386

------------

Memory status: size: 91451392 vsize: 91451392 resident: 44417024 share: 13324288 rss: 44417024 rss_rlim: 4294967295
CPU usage: start_time: 1206665576 rtime: 149 utime: 96 stime: 53 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/evince'

[Thread debugging using libthread_db enabled]
[New Thread 0xb801b950 (LWP 30343)]
[New Thread 0xb7cc9b90 (LWP 30344)]
0x00110416 in __kernel_vsyscall ()


----------- .xsession-errors ---------------------
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
evince: xcb_lock.c:77: _XGetXCBBuffer: Zusicherung »((int) ((xcb_req) - (dpy->request)) >= 0)« nicht erfüllt.
**
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
evince: xcb_lock.c:77: _XGetXCBBuffer: Zusicherung »((int) ((xcb_req) - (dpy->request)) >= 0)« nicht erfüllt.
**
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
evince: xcb_lock.c:77: _XGetXCBBuffer: Zusicherung »((int) ((xcb_req) - (dpy->request)) >= 0)« nicht erfüllt.
**
** ERROR:(ev-poppler.cc:868):EvLinkDest* ev_link_dest_from_dest(PdfDocument*, PopplerDest*): assertion failed: (dest != NULL)
Could not find the frame base for "g_main_context_iterate".
Cannot access memory at address 0xd
Could not find the frame base for "IA__g_spawn_sync".
Could not find the frame base for "g_main_context_iterate".
Could not find the frame base for "IA__gtk_main".
--------------------------------------------------
Comment 2 oa 2008-03-31 07:44:32 UTC
Created attachment 108317 [details]
PDF that triggers the crash

Same RPMs, same problem. My stack trace doesn't reveal anything new compared to the above, but I can provide a smaller test case.

Fedora Rawhide: evince-2.22.0-3.fc9, poppler-0.7.3-1.fc9, glibc-2.7.90-13
Comment 3 oa 2008-03-31 07:54:56 UTC
Downstream at https://bugzilla.redhat.com/show_bug.cgi?id=438970, crash in poppler 0.7.3 or 0.8.0, not in 0.7.2
Comment 4 Carlos Garcia Campos 2008-03-31 10:53:05 UTC
It doesn't crash for me with poppler from git master and evince svn trunk. Did you run autogen, make and make install after upgrading poppler?
Comment 5 oa 2008-03-31 12:18:42 UTC
binary packages from Fedora Rawhide...
Comment 6 Gianluca Borello 2008-04-02 10:16:51 UTC
*** Bug 525539 has been marked as a duplicate of this bug. ***
Comment 7 Dominik Sandjaja 2008-04-02 10:55:19 UTC
Can be changed to "resolved" as it does not crash anymore with the latest from subversion (built against rawhide's poppler-libs, though!) nor with the latest rawhide-update (evince.i386 0:2.22.0-4.fc9).

It seems to have been a bug in evince itself.
Comment 8 Carlos Garcia Campos 2008-04-02 13:43:03 UTC
*** Bug 525759 has been marked as a duplicate of this bug. ***
Comment 9 Susana 2008-07-13 20:35:02 UTC
*** Bug 541971 has been marked as a duplicate of this bug. ***