After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 731211 - evince crash " evince: cairo-spans-compositor.c:96: get_clip_surface: Assertion `clip->path'"
evince crash " evince: cairo-spans-compositor.c:96: get_clip_surface: Asserti...
Status: RESOLVED NOTGNOME
Product: evince
Classification: Core
Component: general
3.10.x
Other Linux
: Normal normal
: ---
Assigned To: Evince Maintainers
Evince Maintainers
Depends on:
Blocks:
 
 
Reported: 2014-06-04 14:10 UTC by Branko Grubic (bitlord)
Modified: 2014-06-04 16:59 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
trace (61.89 KB, text/plain)
2014-06-04 14:10 UTC, Branko Grubic (bitlord) 		Details

Description Branko Grubic (bitlord) 2014-06-04 14:10:00 UTC 
Created attachment 277875 [details]
trace

I was able to crash evince by viewing some datasheet downloaded from the internet (from unknown source) on two systems with same evince + other_software/libs versions. I tested same pdf in okular works fine, no crash.
Comment 1 Germán Poo-Caamaño 2014-06-04 15:56:24 UTC 
Pasting the backtrace as text:

GNU gdb (GDB) Fedora 7.7.1-13.fc20
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/bin/evince...Reading symbols from /usr/lib/debug/usr/bin/evince.debug...done.
done.
[New LWP 2469]
[New LWP 2458]
[New LWP 2459]
[New LWP 2452]
[New LWP 2470]
[New LWP 2450]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Missing separate debuginfo for /lib64/libgraphite2.so.3
Try: yum --enablerepo='*debug*' install /usr/lib/debug/.build-id/90/82e46860379c3dff9004eb8c9834e50afbb528.debug
Core was generated by `evince /home/<user>/MAX220-MAX249-67423.pdf'.
Program terminated with signal SIGABRT, Aborted.

+ Trace 233662

  • #0 __GI_raise
    at ../nptl/sysdeps/unix/sysv/linux/raise.c line 56
  • #0 __GI_raise
    at ../nptl/sysdeps/unix/sysv/linux/raise.c line 56
  • #1 __GI_abort
    at abort.c line 89
  • #2 __assert_fail_base
    at assert.c line 92
  • #3 __GI___assert_fail
    at assert.c line 101
  • #4 get_clip_surface
    at cairo-spans-compositor.c line 96
  • #5 composite_aligned_boxes
    at cairo-spans-compositor.c line 640
  • #6 clip_and_composite_boxes
    at cairo-spans-compositor.c line 882
  • #7 clip_and_composite_boxes
    at cairo-spans-compositor.c line 901
  • #8 _cairo_spans_compositor_stroke
    at cairo-spans-compositor.c line 1038
  • #9 _cairo_compositor_stroke
    at cairo-compositor.c line 157
  • #10 _cairo_compositor_stroke
  • #11 _cairo_image_surface_stroke
    at cairo-image-surface.c line 964
  • #12 _cairo_surface_stroke
    at cairo-surface.c line 2260
  • #13 _cairo_gstate_stroke
    at cairo-gstate.c line 1194
  • #14 _cairo_gstate_stroke
    at cairo-gstate.c line 1204
  • #15 _cairo_default_context_stroke
    at cairo-default-context.c line 1010
  • #16 INT_cairo_stroke
    at cairo.c line 2148
  • #17 CairoOutputDev::stroke(GfxState*)
    from /lib64/libpoppler-glib.so.8
  • #18 Gfx::opStroke(Object*, int)
    from /lib64/libpoppler.so.43
  • #19 Gfx::go(bool)
    from /lib64/libpoppler.so.43
  • #20 Gfx::display(Object*, bool)
    from /lib64/libpoppler.so.43
  • #21 Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, bool (*)(void*), void*, bool (*)(Annot*, void*), void*, bool)
    from /lib64/libpoppler.so.43
  • #22 _poppler_page_render(_PopplerPage*, _cairo*, bool, PopplerPrintFlags)
    from /lib64/libpoppler-glib.so.8
  • #23 pdf_page_render
    at ev-poppler.cc line 408
  • #24 pdf_document_render
    at ev-poppler.cc line 441
  • #25 ev_job_render_run
    at ev-jobs.c line 636
  • #26 ev_job_thread
    at ev-job-scheduler.c line 184
  • #27 ev_job_thread_proxy
    at ev-job-scheduler.c line 217
  • #28 g_thread_proxy
    at gthread.c line 798
  • #29 start_thread
    at pthread_create.c line 309
  • #30 clone
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 111 






Comment 2


Germán Poo-Caamaño





          2014-06-04 15:57:04 UTC
        



Do you have a link to any of those documents?






Comment 3


Branko Grubic (bitlord)





          2014-06-04 16:13:56 UTC
        



Not sure where I got one I have locally, I don't want to upload it here because I'm not sure about license and distribution... but by looking at its file name I was able to find it on the web and it also triggers this crash.
You can see the file name from gdb trace 
"Core was generated by `evince /home/<user>/MAX220-MAX249-67423.pdf'" 

Here is the link to get it (This is one of the search results for that file name)
http:// dyb<dot>com/micom/MAX220-MAX249-67423.pdf






Comment 4


Branko Grubic (bitlord)





          2014-06-04 16:17:13 UTC
        



Also I forgot to add "how to crash it", it doesn't crash when you load it, but when you move to page 5~6+.






Comment 5


Germán Poo-Caamaño





          2014-06-04 16:39:57 UTC
        



(In reply to comment #4)
> Also I forgot to add "how to crash it", it doesn't crash when you load it, but
> when you move to page 5~6+.

Yeah, I just noticed it ;-)

Thanks!.  I can make it crash in evince when try to render the page 5.
However, with poppler-glib-demo I can only make it crash when rendering
the page 9.

Regardless, this bug is in poppler, not evince itself.






Comment 6


Germán Poo-Caamaño





          2014-06-04 16:59:37 UTC
        



Thanks for taking the time to report this bug.

I have filed a bug in poppler's bugzilla, where this bug belongs to.
Please, feel free to follow to bug status there.

https://bugs.freedesktop.org/show_bug.cgi?id=79644