Bug 610041 – crash in create_thumbnail_frame, tiff_document_thumbnails_get_thumbnail

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 610041 - crash in create_thumbnail_frame, tiff_document_thumbnails_get_thumbnail


Summary:	crash in create_thumbnail_frame, tiff_document_thumbnails_get_thumbnail


Status:	RESOLVED FIXED

Product:	evince
Classification:	Core
Component:	BugBuddyBugs
Version:	2.32.x
Hardware:	Other All

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Evince Maintainers
QA Contact:	Evince Maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2010-02-15 21:32 UTC by Josselin Mouette
Modified:	2010-12-06 18:43 UTC

See Also:
GNOME target:	---
GNOME version:	2.31/2.32

Attachments
File that triggers the crash (779 bytes, image/tiff) 2010-02-15 21:33 UTC, Josselin Mouette	Details

Description Josselin Mouette 2010-02-15 21:32:02 UTC

Version: 2.28.2

What were you doing when the application crashed?
Open a corrupt TIFF file.


Distribution: Debian squeeze/sid
Gnome Release: 2.28.2 2009-12-18 (Debian)
BugBuddy Version: 2.28.0

System: Linux 2.6.32-trunk-amd64 #1 SMP Sun Jan 10 22:40:40 UTC 2010 x86_64
X Vendor: The X.Org Foundation
X Vendor Release: 10704000
Selinux: No
Accessibility: Disabled
GTK+ Theme: Gorilla
Icon Theme: Gorilla
GTK+ Modules: gnomebreakpad, canberra-gtk-module

Memory status: size: 324407296 vsize: 324407296 resident: 19632128 share: 13193216 rss: 19632128 rss_rlim: 18446744073709551615
CPU usage: start_time: 1266269429 rtime: 46 utime: 40 stime: 6 cutime:0 cstime: 0 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/evince'

[Thread debugging using libthread_db enabled]
[New Thread 0x7f9451dde910 (LWP 12755)]
[New Thread 0x7f9453917910 (LWP 12754)]
0x00007f945bdd2743 in *__GI___poll (fds=<value optimized out>, 
    nfds=<value optimized out>, timeout=760)
    at ../sysdeps/unix/sysv/linux/poll.c:87
	in ../sysdeps/unix/sysv/linux/poll.c

+ Trace 220586

Thread 3 (Thread 0x7f9453917910 (LWP 12754))

#0 __libc_waitpid
at ../sysdeps/unix/sysv/linux/waitpid.c line 41
#1 IA__g_spawn_sync
at /tmp/buildd/glib2.0-2.22.4/glib/gspawn.c line 386
#2 IA__g_spawn_command_line_sync
at /tmp/buildd/glib2.0-2.22.4/glib/gspawn.c line 700
#3 ??
from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
#4 <signal handler called>
#5 *__GI_raise
at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
#6 *__GI_abort
at abort.c line 88
#7 IA__g_assertion_message
#8 IA__g_assertion_message_expr
at /tmp/buildd/glib2.0-2.22.4/glib/gtestutils.c line 1313
#9 ev_document_misc_get_thumbnail_frame
at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./libdocument/ev-document-misc.c line 56
#10 tiff_document_thumbnails_get_thumbnail
at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./backend/tiff/tiff-document.c line 458
#11 ev_job_thumbnail_run
at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./libview/ev-jobs.c line 678
#12 ev_job_thread
at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./libview/ev-job-scheduler.c line 183
#13 ev_job_thread_proxy
at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./libview/ev-job-scheduler.c line 213
#14 g_thread_create_proxy
at /tmp/buildd/glib2.0-2.22.4/glib/gthread.c line 635
#15 start_thread
at pthread_create.c line 300
#16 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 112
#17 ??

Current language:  auto
The current source language is "auto; currently asm".
Current language:  auto
The current source language is "auto; currently c".
A debugging session is active.

	Inferior 1 [process 12753] will be detached.

Quit anyway? (y or n) [answered Y; input not from terminal]


---- Critical and fatal warnings logged during execution ----

** GdkPixbuf **: gdk_pixbuf_scale_simple: assertion `dest_height > 0' failed 
** GdkPixbuf **: gdk_pixbuf_copy: assertion `GDK_IS_PIXBUF (pixbuf)' failed 
** GLib-GObject **: g_object_unref: assertion `G_IS_OBJECT (object)' failed 


----------- .xsession-errors (47 sec old) ---------------------
** Message: console message: https://launchpad.net/+icing/rev8940/build/launchpad.js @19: loading lp.picker
** Message: console message: https://launchpad.net/+icing/rev8940/build/launchpad.js @19: loading lazr.activator
** Message: console message: https://launchpad.net/+icing/rev8940/build/launchpad.js @19: loading lp.picker
** Message: console message: https://launchpad.net/+icing/rev8940/build/launchpad.js @19: Loaded subscriber IDs.
(epiphany:31589): GLib-GObject-WARNING **: IA__g_object_get_valist: object class `EphyWindow' has no property named `is-print-preview'
(epiphany:31589): GLib-GObject-WARNING **: IA__g_object_get_valist: object class `EphyWindow' has no property named `is-print-preview'
(epiphany:31589): GLib-GObject-WARNING **: IA__g_object_get_valist: object class `EphyWindow' has no property named `is-print-preview'
--------------------------------------------------

Comment 1 Josselin Mouette 2010-02-15 21:33:14 UTC

Created attachment 153869 [details]
File that triggers the crash

Original report: http://bugs.debian.org/568148

Comment 2 Akhil Laddha 2010-02-16 03:38:40 UTC

looks related to bug 594408

Comment 3 Fabio Durán Verdugo 2010-11-25 23:29:29 UTC

the bug still exists in 2.32.
here the trace.

Core was generated by `evince /home/fabio/Downloads/B028B917.TIF'.
Program terminated with signal 6, Aborted.

+ Trace 224846

Thread 4 (Thread 6268)

#0 _cairo_stroker_line_to
at cairo-path-stroke.c line 975
#1 _cairo_path_fixed_interpret
at cairo-path-fixed.c line 827
#2 _cairo_path_fixed_stroke_to_polygon
at cairo-path-stroke.c line 1364
#3 _cairo_surface_fallback_stroke
at cairo-surface-fallback.c line 1088
#4 _cairo_surface_stroke
at cairo-surface.c line 2215
#5 _cairo_gstate_stroke
at cairo-gstate.c line 1166
#6 *INT_cairo_stroke_preserve
at cairo.c line 2405
#7 *INT_cairo_stroke
at cairo.c line 2378
#8 clearlooks_draw_inset
at src/clearlooks_draw.c line 82
#9 clearlooks_gummy_draw_entry
at src/clearlooks_draw_gummy.c line 271
#10 clearlooks_style_draw_shadow
at src/clearlooks_style.c line 227
#11 IA__gtk_paint_shadow
at gtkstyle.c line 6008
#12 gtk_entry_draw_frame
at gtkentry.c line 3319
#13 gtk_entry_expose
at gtkentry.c line 3472
#14 _gtk_marshal_BOOLEAN__BOXED
at gtkmarshalers.c line 86
#15 g_type_class_meta_marshal
at gclosure.c line 877
#16 g_closure_invoke
at gclosure.c line 766
#17 signal_emit_unlocked_R
at gsignal.c line 3290
#18 g_signal_emit_valist
at gsignal.c line 2993
#19 g_signal_emit
at gsignal.c line 3040
#20 gtk_widget_event_internal
at gtkwidget.c line 4992
#21 IA__gtk_main_do_event
at gtkmain.c line 1590
#22 _gdk_window_process_updates_recurse
at gdkwindow.c line 5424
#23 _gdk_window_process_updates_recurse
at gdkwindow.c line 5397
#24 _gdk_windowing_window_process_updates_recurse
at gdkwindow-x11.c line 5567
#25 gdk_window_process_updates_internal
at gdkwindow.c line 5583
#26 IA__gdk_window_process_updates
at gdkwindow.c line 5757
#27 gtk_window_move_resize
at gtkwindow.c line 6246
#28 gtk_window_check_resize
at gtkwindow.c line 5408
#29 g_cclosure_marshal_VOID__VOID
at gmarshal.c line 79
#30 g_type_class_meta_marshal
at gclosure.c line 877
#31 g_closure_invoke
at gclosure.c line 766
#32 signal_emit_unlocked_R
at gsignal.c line 3290
#33 g_signal_emit_valist
at gsignal.c line 2983
#34 g_signal_emit
at gsignal.c line 3040
#35 IA__gtk_container_check_resize
at gtkcontainer.c line 1431
#36 gtk_container_idle_sizer
at gtkcontainer.c line 1356
#37 gdk_threads_dispatch
at gdk.c line 512
#38 g_idle_dispatch
at gmain.c line 4254
#39 g_main_dispatch
at gmain.c line 2149
#40 g_main_context_dispatch
at gmain.c line 2702
#41 g_main_context_iterate
at gmain.c line 2780
#42 g_main_loop_run
at gmain.c line 2988
#43 IA__gtk_main
at gtkmain.c line 1237
#44 main
at main.c line 322

Comment 4 José Aliste 2010-12-06 18:43:18 UTC

This is indeed related to bug #594408 and is already fixed in master.