GNOME Bugzilla – Bug 678500
Segmentation fault with "undefined -21"
Last modified: 2012-07-01 12:46:12 UTC
Please read first complete what my problem is! I had a clean, stabil fedora 14 system in the past. When I read in the news support for fedora14 was quitted by the managemend, I made the update to fedora15. I spend much time on the machine fedoraXX and I haven't virtualised everything. I observed fedora15 was coming with problems over the Internet during the update process but it was running with misbehavoir on some applications. Actually, I observed a misbehavoir of evince: [technican@fedoraXX ~]$ evince /media/6138-3061/innoQ/System\ Development\ Life\ Cycle.ps undefined -21 undefined -21 (evince:7388): Gtk-CRITICAL **: gtk_widget_get_mapped: assertion `GTK_IS_WIDGET (widget)' failed (evince:7388): GLib-GObject-WARNING **: invalid (NULL) pointer instance (evince:7388): GLib-GObject-CRITICAL **: g_signal_connect_data: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (evince:7388): Gtk-CRITICAL **: gtk_widget_get_mapped: assertion `GTK_IS_WIDGET (widget)' failed (evince:7388): GLib-GObject-WARNING **: invalid (NULL) pointer instance (evince:7388): GLib-GObject-CRITICAL **: g_signal_connect_data: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (evince:7388): Gtk-CRITICAL **: gtk_widget_get_mapped: assertion `GTK_IS_WIDGET (widget)' failed (evince:7388): GLib-GObject-WARNING **: invalid (NULL) pointer instance (evince:7388): GLib-GObject-CRITICAL **: g_signal_connect_data: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (evince:7388): Gtk-CRITICAL **: gtk_widget_get_mapped: assertion `GTK_IS_WIDGET (widget)' failed (evince:7388): GLib-GObject-WARNING **: invalid (NULL) pointer instance (evince:7388): GLib-GObject-CRITICAL **: g_signal_connect_data: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (evince:7388): Gtk-CRITICAL **: gtk_widget_get_mapped: assertion `GTK_IS_WIDGET (widget)' failed (evince:7388): GLib-GObject-WARNING **: invalid (NULL) pointer instance (evince:7388): GLib-GObject-CRITICAL **: g_signal_connect_data: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed (evince:7388): Gtk-CRITICAL **: gtk_widget_get_mapped: assertion `GTK_IS_WIDGET (widget)' failed (evince:7388): GLib-GObject-WARNING **: invalid (NULL) pointer instance (evince:7388): GLib-GObject-CRITICAL **: g_signal_connect_data: assertion `G_TYPE_CHECK_INSTANCE (instance)' failed Speicherzugriffsfehler And this is only the head of the worm. I posted also on Fedoraforum.org. The last answer was: Here is the message that has just been posted: *************** Yes - bugzilla is a good resource for identifying bugs. I've never seen any similar behavior and I use evince extensively. I suggest you document the revision of the kernel, evince and relates libraries and create a new bugzilla report. F15 is nearly EOL (EOL date is June 26, 6 days away) so no one will look at a new F15 bug. You'll need to reproduce this and document on F16 or F17. *************** There may also be other replies, but you will not receive any more notifications until you visit the forum again. All the best, FedoraForum.org I made the update to fedora16 an the misbehavoir continues, when I clicked on a .ps extension files. Kind regards, FolkertM
The last gdb session output: [technican@fedoraXX ~]$ gdb --args evince /media/6138-3061/innoQ/Software\ Testing\ Geek\ -Web\ Application\ -\ Functional\ Testing\ Checklist.ps GNU gdb (GDB) Fedora (7.3.50.20110722-13.fc16) Copyright (C) 2011 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/evince...Reading symbols from /usr/lib/debug/usr/bin/evince.debug...done. done. (gdb) run Starting program: /usr/bin/evince /media/6138-3061/innoQ/Software\ Testing\ Geek\ -Web\ Application\ -\ Functional\ Testing\ Checklist.ps [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/libthread_db.so.1". [New Thread 0xb673ab40 (LWP 4404)] [New Thread 0xb5dffb40 (LWP 4405)] [New Thread 0xb55feb40 (LWP 4406)] [New Thread 0xaeba6b40 (LWP 4412)] [New Thread 0xae1ffb40 (LWP 4413)] undefined -21 undefined -21 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0xae1ffb40 (LWP 4413)] 0xb71f740f in main_arena () from /lib/libc.so.6 (gdb) quit A debugging session is active. Inferior 1 [process 4401] will be killed. Quit anyway? (y or n) y
output from uname -a Linux fedoraXX.fomeo.com 3.4.2-1.fc16.i686 #1 SMP Thu Jun 14 21:13:38 UTC 2012 i686 i686 i386 GNU/Linux
Does this also happen with other PS files? Any chance to provide that PS file for testing (in case it does not contain private information) by attaching it here?
Created attachment 216910 [details] PostScript file
I can't get a crash with the file provided. Can you please get us a stac trace. Without a stack trace from the crash it's very hard to determine what caused it. Can you get us a stack trace? Please see http://live.gnome.org/GettingTraces for more information on how to do so. Thanks in advance!
(In reply to comment #5) > I can't get a crash with the file provided. Can you please get us a stac trace. > > Without a stack trace from the crash it's very hard to determine what caused > it. > Can you get us a stack trace? Please see http://live.gnome.org/GettingTraces > for more information on how to do so. Thanks in advance! Packages for debuginfo installed. Read 1. Comment. [Techniker@L3F591407 ~]$ gdb --args evince /media/6138-3061/innoQ/Software\ Testing\ Geek\ -Web\ Application\ -\ Functional\ Testing\ Checklist.ps GNU gdb (GDB) Fedora (7.3.50.20110722-13.fc16) Copyright (C) 2011 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i686-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/bin/evince...Reading symbols from /usr/lib/debug/usr/bin/evince.debug...done. done. (gdb) run Starting program: /usr/bin/evince /media/6138-3061/innoQ/Software\ Testing\ Geek\ -Web\ Application\ -\ Functional\ Testing\ Checklist.ps [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/libthread_db.so.1". [New Thread 0xb673ab40 (LWP 3675)] [New Thread 0xb5dffb40 (LWP 3676)] [New Thread 0xb55feb40 (LWP 3677)] [New Thread 0xaeba6b40 (LWP 3683)] [New Thread 0xae1ffb40 (LWP 3684)] undefined -21 undefined -21 Program received signal SIGSEGV, Segmentation fault.
+ Trace 230403
Thread 2921331520 (LWP 3684)
[technican@fedoraXX ~]$ sudo debuginfo-install evince-3.2.1-2.fc16.i686 Geladene Plugins: auto-update-debuginfo, langpacks, presto, refresh-packagekit enabling fedora-debuginfo enabling rpmfusion-free-updates-debuginfo enabling rpmfusion-free-debuginfo enabling updates-debuginfo Paket evince-debuginfo-3.2.1-2.fc16.i686 ist bereits in der neusten Version installiert. Paket libICE-debuginfo-1.0.7-1.fc16.i686 ist bereits in der neusten Version installiert. Paket libSM-debuginfo-1.2.0-2.fc15.i686 ist bereits in der neusten Version installiert. Paket libX11-debuginfo-1.4.3-1.fc16.i686 ist bereits in der neusten Version installiert. Paket atk-debuginfo-2.2.0-2.fc16.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket cairo-debuginfo-1.10.2-4.fc16.i686 ist bereits in der neusten Version installiert. Paket cairo-debuginfo-1.10.2-4.fc16.i686 ist bereits in der neusten Version installiert. Paket evince-debuginfo-3.2.1-2.fc16.i686 ist bereits in der neusten Version installiert. Paket evince-debuginfo-3.2.1-2.fc16.i686 ist bereits in der neusten Version installiert. Paket fontconfig-debuginfo-2.8.0-4.fc16.i686 ist bereits in der neusten Version installiert. Paket freetype-debuginfo-2.4.6-5.fc16.i686 ist bereits in der neusten Version installiert. Paket gtk3-debuginfo-3.2.4-1.fc16.i686 ist bereits in der neusten Version installiert. Paket gtk3-debuginfo-3.2.4-1.fc16.i686 ist bereits in der neusten Version installiert. Paket gdk-pixbuf2-debuginfo-2.24.1-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glib2-debuginfo-2.30.3-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glib2-debuginfo-2.30.3-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glib2-debuginfo-2.30.3-1.fc16.i686 ist bereits in der neusten Version installiert. Paket libgnome-keyring-debuginfo-3.2.0-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glib2-debuginfo-2.30.3-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glib2-debuginfo-2.30.3-1.fc16.i686 ist bereits in der neusten Version installiert. Paket gtk3-debuginfo-3.2.4-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket pango-debuginfo-1.29.4-1.fc16.i686 ist bereits in der neusten Version installiert. Paket pango-debuginfo-1.29.4-1.fc16.i686 ist bereits in der neusten Version installiert. Paket pango-debuginfo-1.29.4-1.fc16.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket glibc-debuginfo-2.14.90-24.fc16.7.i686 ist bereits in der neusten Version installiert. Paket libxml2-debuginfo-2.7.8-6.fc16.i686 ist bereits in der neusten Version installiert. Paket libxml2-debuginfo-2.7.8-6.fc16.i686 ist bereits in der neusten Version installiert. Paket zlib-debuginfo-1.2.5-6.fc16.i686 ist bereits in der neusten Version installiert. No debuginfo packages available to install
(gdb) thread apply all bt full
+ Trace 230404
Thread 1 (Thread 0xb6db2880 (LWP 3672))
I didn't understand that, evince opened the document when using valgind! [technican@fedoraXX ~]$ valgrind evince /media/6138-3061/innoQ/Software\ Testing\ Geek\ -Web\ Application\ -\ Functional\ Testing\ Checklist.ps ==4527== Memcheck, a memory error detector ==4527== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al. ==4527== Using Valgrind-3.6.1 and LibVEX; rerun with -h for copyright info ==4527== Command: evince /media/6138-3061/innoQ/Software\ Testing\ Geek\ -Web\ Application\ -\ Functional\ Testing\ Checklist.ps ==4527== ==4527== Invalid read of size 4 ==4527== at 0x4960573: FcConfigFileExists (fccfg.c:1671) ==4527== by 0x4962C4C: FcConfigFilename (fccfg.c:1828) ==4527== by 0x49775CC: FcConfigParseAndLoad (fcxml.c:2459) ==4527== by 0x496C236: FcInitLoadConfig (fcinit.c:67) ==4527== by 0x496C369: FcInitLoadConfigAndFonts (fcinit.c:101) ==4527== by 0x496C5FC: FcInit (fcinit.c:124) ==4527== by 0x4960DD4: FcConfigGetCurrent (fccfg.c:415) ==4527== by 0x49629BF: FcConfigSubstituteWithPat (fccfg.c:1361) ==4527== by 0x4962A07: FcConfigSubstitute (fccfg.c:1584) ==4527== by 0x4788B4A: pango_cairo_fc_font_map_fontset_key_substitute (pangocairo-fcfontmap.c:87) ==4527== by 0x4759978: pango_fc_default_substitute (pangofc-fontmap.c:1581) ==4527== by 0x475B176: pango_fc_font_map_load_fontset (pangofc-fontmap.c:1635) ==4527== Address 0xf3a9984 is 20 bytes inside a block of size 22 alloc'd ==4527== at 0x402AD89: malloc (vg_replace_malloc.c:236) ==4527== by 0x49604D8: FcConfigFileExists (fccfg.c:1652) ==4527== by 0x4962C4C: FcConfigFilename (fccfg.c:1828) ==4527== by 0x49775CC: FcConfigParseAndLoad (fcxml.c:2459) ==4527== by 0x496C236: FcInitLoadConfig (fcinit.c:67) ==4527== by 0x496C369: FcInitLoadConfigAndFonts (fcinit.c:101) ==4527== by 0x496C5FC: FcInit (fcinit.c:124) ==4527== by 0x4960DD4: FcConfigGetCurrent (fccfg.c:415) ==4527== by 0x49629BF: FcConfigSubstituteWithPat (fccfg.c:1361) ==4527== by 0x4962A07: FcConfigSubstitute (fccfg.c:1584) ==4527== by 0x4788B4A: pango_cairo_fc_font_map_fontset_key_substitute (pangocairo-fcfontmap.c:87) ==4527== by 0x4759978: pango_fc_default_substitute (pangofc-fontmap.c:1581) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x4960587: FcConfigFileExists (fccfg.c:1671) ==4527== by 0x900642D: ??? ==4527== Address 0xf3af138 is 16 bytes inside a block of size 18 alloc'd ==4527== at 0x402AD89: malloc (vg_replace_malloc.c:236) ==4527== by 0x49604D8: FcConfigFileExists (fccfg.c:1652) ==4527== by 0x900642D: ??? ==4527== ==4527== Invalid read of size 4 ==4527== at 0x4960587: FcConfigFileExists (fccfg.c:1671) ==4527== by 0x49775CC: FcConfigParseAndLoad (fcxml.c:2459) ==4527== by 0x4977AA0: FcConfigParseAndLoad (fcxml.c:2427) ==4527== by 0x4977E51: FcEndElement (fcxml.c:1624) ==4527== Address 0xf3e8218 is 40 bytes inside a block of size 43 alloc'd ==4527== at 0x402AD89: malloc (vg_replace_malloc.c:236) ==4527== by 0x49604D8: FcConfigFileExists (fccfg.c:1652) ==4527== by 0x49775CC: FcConfigParseAndLoad (fcxml.c:2459) ==4527== by 0x4977AA0: FcConfigParseAndLoad (fcxml.c:2427) ==4527== by 0x4977E51: FcEndElement (fcxml.c:1624) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x4960573: FcConfigFileExists (fccfg.c:1671) ==4527== by 0x49775CC: FcConfigParseAndLoad (fcxml.c:2459) ==4527== by 0x4977AA0: FcConfigParseAndLoad (fcxml.c:2427) ==4527== by 0x4977E51: FcEndElement (fcxml.c:1624) ==4527== Address 0xf3f8be4 is 36 bytes inside a block of size 39 alloc'd ==4527== at 0x402AD89: malloc (vg_replace_malloc.c:236) ==4527== by 0x49604D8: FcConfigFileExists (fccfg.c:1652) ==4527== by 0x49775CC: FcConfigParseAndLoad (fcxml.c:2459) ==4527== by 0x4977AA0: FcConfigParseAndLoad (fcxml.c:2427) ==4527== by 0x4977E51: FcEndElement (fcxml.c:1624) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x4960587: FcConfigFileExists (fccfg.c:1671) ==4527== by 0x2E73746D: ??? ==4527== Address 0xf4220ac is 28 bytes inside a block of size 31 alloc'd ==4527== at 0x402AD89: malloc (vg_replace_malloc.c:236) ==4527== by 0x49604D8: FcConfigFileExists (fccfg.c:1652) ==4527== by 0x2E73746D: ??? ==4527== ==4527== Invalid read of size 4 ==4527== at 0x4960573: FcConfigFileExists (fccfg.c:1671) ==4527== by 0x6F632E6B: ??? ==4527== Address 0xf429854 is 20 bytes inside a block of size 22 alloc'd ==4527== at 0x402AD89: malloc (vg_replace_malloc.c:236) ==4527== by 0x49604D8: FcConfigFileExists (fccfg.c:1652) ==4527== by 0x6F632E6B: ??? ==4527== ==4527== Thread 5: ==4527== Invalid read of size 4 ==4527== at 0x7D73774: spectre_device_render (spectre-device.c:254) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== by 0x68E3E9F: ??? ==4527== Address 0x100ee634 is 0 bytes after a block of size 52 alloc'd ==4527== at 0x4029467: calloc (vg_replace_malloc.c:467) ==4527== by 0x7D73633: spectre_device_render (spectre-device.c:215) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== by 0x68E3E9F: ??? ==4527== ==4527== Invalid write of size 4 ==4527== at 0x7D7377F: spectre_device_render (spectre-device.c:254) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== by 0x68E3E9F: ??? ==4527== Address 0x100ee634 is 0 bytes after a block of size 52 alloc'd ==4527== at 0x4029467: calloc (vg_replace_malloc.c:467) ==4527== by 0x7D73633: spectre_device_render (spectre-device.c:215) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== by 0x68E3E9F: ??? ==4527== ==4527== Conditional jump or move depends on uninitialised value(s) ==4527== at 0x10A4FAAF: gc_trace (igc.c:1070) ==4527== by 0x10A51F00: gc_strings_set_marks (string3.h:85) ==4527== by 0x10A502F7: gs_gc_reclaim (igc.c:328) ==4527== by 0x10AED711: context_reclaim (zcontext.c:278) ==4527== by 0x10A1B892: ireclaim (ireclaim.c:153) ==4527== by 0x10A16E1A: interp_reclaim (interp.c:421) ==4527== by 0x10ED8A97: ptr_string_procs (in /usr/lib/libgs.so.9.04) ==4527== by 0x10EEE19F: st_gs_dual_memory (in /usr/lib/libgs.so.9.04) ==4527== ==4527== Conditional jump or move depends on uninitialised value(s) ==4527== at 0x10A503A2: gs_gc_reclaim (igc.c:745) ==4527== by 0x10AED711: context_reclaim (zcontext.c:278) ==4527== by 0x10A1B892: ireclaim (ireclaim.c:153) ==4527== by 0x10A16E1A: interp_reclaim (interp.c:421) ==4527== by 0x10ED8A97: ptr_string_procs (in /usr/lib/libgs.so.9.04) ==4527== by 0x10EEE19F: st_gs_dual_memory (in /usr/lib/libgs.so.9.04) ==4527== ==4527== Conditional jump or move depends on uninitialised value(s) ==4527== at 0x10A503A7: gs_gc_reclaim (igc.c:746) ==4527== by 0x10AED711: context_reclaim (zcontext.c:278) ==4527== by 0x10A1B892: ireclaim (ireclaim.c:153) ==4527== by 0x10A16E1A: interp_reclaim (interp.c:421) ==4527== by 0x10ED8A97: ptr_string_procs (in /usr/lib/libgs.so.9.04) ==4527== by 0x10EEE19F: st_gs_dual_memory (in /usr/lib/libgs.so.9.04) ==4527== ==4527== Conditional jump or move depends on uninitialised value(s) ==4527== at 0x10A4FAAF: gc_trace (igc.c:1070) ==4527== ==4527== Conditional jump or move depends on uninitialised value(s) ==4527== at 0x10A4FAAF: gc_trace (igc.c:1070) ==4527== by 0xB: ??? ==4527== undefined -21 undefined -21 ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF08B: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10ABF08C: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee350 is 32 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF093: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E267: gs_heap_alloc_bytes (gsmalloc.c:172) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E279: gs_heap_alloc_bytes (gsmalloc.c:174) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3a0 is 112 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E28A: gs_heap_alloc_bytes (gsmalloc.c:180) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E29D: gs_heap_alloc_bytes (gsmalloc.c:194) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2A6: gs_heap_alloc_bytes (gsmalloc.c:195) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x634a0bc is 4 bytes inside a block of size 318 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0E00B: gs_heap_free_all (gsmalloc.c:457) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2A9: gs_heap_alloc_bytes (gsmalloc.c:195) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2C8: gs_heap_alloc_bytes (gsmalloc.c:203) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2CB: gs_heap_alloc_bytes (gsmalloc.c:201) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2D5: gs_heap_alloc_bytes (gsmalloc.c:204) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3a8 is 120 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2D8: gs_heap_alloc_bytes (gsmalloc.c:203) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2DD: gs_heap_alloc_bytes (gsmalloc.c:208) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10AC4E58: cmsAllocGamma (cmsgamma.c:124) ==4527== by 0x10AC50DB: cmsBuildParametricGamma (cmsgamma.c:294) ==4527== by 0x10AE6E6D: cmsCreate_sRGBProfile (cmsvirt.c:711) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10ABF08C: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee350 is 32 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E267: gs_heap_alloc_bytes (gsmalloc.c:172) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E279: gs_heap_alloc_bytes (gsmalloc.c:174) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3a0 is 112 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E28A: gs_heap_alloc_bytes (gsmalloc.c:180) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E29D: gs_heap_alloc_bytes (gsmalloc.c:194) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2A9: gs_heap_alloc_bytes (gsmalloc.c:195) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2C8: gs_heap_alloc_bytes (gsmalloc.c:203) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2CB: gs_heap_alloc_bytes (gsmalloc.c:201) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2D5: gs_heap_alloc_bytes (gsmalloc.c:204) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3a8 is 120 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2D8: gs_heap_alloc_bytes (gsmalloc.c:203) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2DD: gs_heap_alloc_bytes (gsmalloc.c:208) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x3FE47AE0: ??? ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF137: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10ABF138: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== by 0x4080687: ev_document_render (ev-document.c:587) ==4527== Address 0x100ee33c is 12 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF13F: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E0FA: gs_heap_free_object (gsmalloc.c:323) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E114: gs_heap_free_object (gsmalloc.c:325) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E143: gs_heap_free_object (gsmalloc.c:351) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x634a0bc is 4 bytes inside a block of size 318 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0E00B: gs_heap_free_all (gsmalloc.c:457) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E146: gs_heap_free_object (gsmalloc.c:352) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E14F: gs_heap_free_object (gsmalloc.c:352) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E152: gs_heap_free_object (gsmalloc.c:353) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10AC4EDF: cmsFreeGamma (cmsgamma.c:137) ==4527== by 0x10AE6EAE: cmsCreate_sRGBProfile (cmsvirt.c:730) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== by 0x113E6437: ??? (ev-poppler.cc:393) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF137: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10ABF138: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee33c is 12 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF13F: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E0FA: gs_heap_free_object (gsmalloc.c:323) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E114: gs_heap_free_object (gsmalloc.c:325) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E146: gs_heap_free_object (gsmalloc.c:352) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E14F: gs_heap_free_object (gsmalloc.c:352) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E152: gs_heap_free_object (gsmalloc.c:353) ==4527== by 0x10ABF152: _cmsFree (gsicc_lcms.c:503) ==4527== by 0x10ACAE83: _cmsInitTag (cmsio0.c:319) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF08B: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10ABF08C: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== by 0x113E62F7: ??? (ev-poppler.cc:359) ==4527== Address 0x100ee350 is 32 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D12C45: gs_lib_ctx_get_non_gc_memory_t (gslibctx.c:42) ==4527== by 0x10ABF093: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee394 is 100 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E267: gs_heap_alloc_bytes (gsmalloc.c:172) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E279: gs_heap_alloc_bytes (gsmalloc.c:174) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a0 is 112 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E28A: gs_heap_alloc_bytes (gsmalloc.c:180) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E29D: gs_heap_alloc_bytes (gsmalloc.c:194) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2A9: gs_heap_alloc_bytes (gsmalloc.c:195) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2C8: gs_heap_alloc_bytes (gsmalloc.c:203) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2CB: gs_heap_alloc_bytes (gsmalloc.c:201) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee39c is 108 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2D5: gs_heap_alloc_bytes (gsmalloc.c:204) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a8 is 120 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid write of size 4 ==4527== at 0x10D0E2D8: gs_heap_alloc_bytes (gsmalloc.c:203) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3a4 is 116 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== Invalid read of size 4 ==4527== at 0x10D0E2DD: gs_heap_alloc_bytes (gsmalloc.c:208) ==4527== by 0x10ABF0AA: _cmsMalloc (gsicc_lcms.c:492) ==4527== by 0x10ACAE8F: _cmsInitTag (cmsio0.c:335) ==4527== by 0x10ACB601: _cmsAddTextTag (cmsio0.c:667) ==4527== by 0x10AD2F17: cmsAddTag (cmsio1.c:3551) ==4527== by 0x10AE6ECC: cmsCreate_sRGBProfile (cmsvirt.c:734) ==4527== by 0x1216052C: GfxColorSpace::setupColorProfiles() (GfxState.cc:366) ==4527== by 0x1216E733: GfxState::GfxState(double, double, PDFRectangle*, int, bool) (GfxState.cc:5482) ==4527== by 0x12154110: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, Catalog*, double, double, PDFRectangle*, PDFRectangle*, int, bool (*)(void*), void*) (Gfx.cc:556) ==4527== by 0x1218D5E0: Page::createGfx(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:451) ==4527== by 0x1218D859: Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, Catalog*, bool (*)(void*), void*, bool (*)(Annot*, void*), void*) (Page.cc:480) ==4527== by 0x12088ABC: _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags) (poppler-page.cc:360) ==4527== Address 0x100ee3ac is 124 bytes inside a block of size 128 free'd ==4527== at 0x4029EED: free (vg_replace_malloc.c:366) ==4527== by 0x10D0DFE4: gs_heap_free_all (gsmalloc.c:461) ==4527== by 0x10D0E6EB: gs_malloc_release (gsmalloc.c:561) ==4527== by 0x10A110BC: gsapi_delete_instance (iapi.c:119) ==4527== by 0x7D72C86: spectre_gs_cleanup (spectre-gs.c:303) ==4527== by 0x7D72CBE: spectre_gs_free (spectre-gs.c:314) ==4527== by 0x7D73894: spectre_device_render (spectre-device.c:289) ==4527== by 0x7D73E0D: spectre_page_render (spectre-page.c:164) ==4527== by 0x7D71D83: spectre_document_render_full (spectre-document.c:351) ==4527== by 0x7D71E55: spectre_document_render (spectre-document.c:367) ==4527== by 0x7D71F9D: spectre_document_load (spectre-document.c:87) ==4527== by 0x7D50C23: ps_document_load (ev-spectre.c:90) ==4527== ==4527== ==4527== HEAP SUMMARY: ==4527== in use at exit: 5,618,407 bytes in 33,694 blocks ==4527== total heap usage: 755,764 allocs, 722,070 frees, 104,789,864 bytes allocated ==4527== ==4527== LEAK SUMMARY: ==4527== definitely lost: 15,291 bytes in 39 blocks ==4527== indirectly lost: 22,116 bytes in 1,060 blocks ==4527== possibly lost: 4,128,232 bytes in 19,181 blocks ==4527== still reachable: 1,452,768 bytes in 13,414 blocks ==4527== suppressed: 0 bytes in 0 blocks ==4527== Rerun with --leak-check=full to see details of leaked memory ==4527== ==4527== For counts of detected and suppressed errors, rerun with: -v ==4527== Use --track-origins=yes to see where uninitialised values come from ==4527== ERROR SUMMARY: 407 errors from 69 contexts (suppressed: 0 from 0)
Might be some memory optimization issue that has nothing to do with Evince itself.
(In reply to comment #10) > Might be some memory optimization issue that has nothing to do with Evince > itself. Hi André, can you formulate your guess something more specific? What for a memory error, or what for a tuning error. What Info do you need? What should I do? Check of the hardware memory. How should I optimize this?
mmm. what is weird from the stack trace is that it seems evince is trying to use poppler to open a PS file...Can you confirm that this happens only with ps files? happens only with some files and some other not?
and also the example you provided is a pdf file, not a ps one.
(In reply to comment #12) > mmm. what is weird from the stack trace is that it seems evince is trying to > use poppler to open a PS file...Can you confirm that this happens only with ps > files? happens only with some files and some other not? It seems, I was the person who had manipulates the file. I can't remember. The file was an older download out of the internet. Google couldn't find the file again. And I wasn't the author, too. I changed, as suggested, the file extension to .pdf. Evince opened it. I opened then another file with .ps extension, where I sure was, that this was a PostScript file, with Evince. What checks Evince, when a PostScript file is opened. The file extension or signature in the head of the file? I would expect something different. An error message, like "isn't a PostScript file". Apart from this, now I can generate the stack trace and I can use valgrind. It was a long worm. Maybe weird . Did you read it in the stack trace, it wasn't a .ps file?