Bug 770416 – Evince crashes on a PDF file (in libcairo)

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 770416 - Evince crashes on a PDF file (in libcairo)


Summary:	Evince crashes on a PDF file (in libcairo)


Status:	RESOLVED FIXED

Product:	evince
Classification:	Core
Component:	PDF
Version:	3.16.x
Hardware:	Other Linux

Importance:	Normal normal
Target Milestone:	---
Assigned To:	Evince Maintainers
QA Contact:	Evince Maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2016-08-25 19:51 UTC by Tomasz Kuchta
Modified:	2016-09-04 00:43 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
file part1 (1.18 MB, application/zip) 2016-08-25 20:28 UTC, Tomasz Kuchta	Details
file part2 (2.00 MB, application/octet-stream) 2016-08-25 20:28 UTC, Tomasz Kuchta	Details
file part3 (2.00 MB, application/octet-stream) 2016-08-25 20:29 UTC, Tomasz Kuchta	Details
file part 4 (2.00 MB, application/octet-stream) 2016-08-25 20:29 UTC, Tomasz Kuchta	Details
file part 5 (2.00 MB, application/octet-stream) 2016-08-25 20:29 UTC, Tomasz Kuchta	Details

Description Tomasz Kuchta 2016-08-25 19:51:55 UTC

Evince crashes on a document.
I have tested that on Ubuntu 15.10, with Evince 3.16.


The file is "368311.pdf", from Govdocs1 data set (http://digitalcorpora.org/corpora/govdocs)

The file can be found in the following archive: http://digitalcorpora.org/corp/files/govdocs1/zipfiles/368311.zip

I would be grateful for confirming.

backtrace

+ Trace 236588

#0 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#1 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#2 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#3 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#4 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#5 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#6 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#7 ??
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#8 cairo_stroke
from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#9 CairoOutputDev::stroke(GfxState*)
from /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8
#10 Gfx::opCloseStroke(Object*, int)
from /usr/lib/x86_64-linux-gnu/libpoppler.so.52
#11 Gfx::go(bool)
from /usr/lib/x86_64-linux-gnu/libpoppler.so.52
#12 Gfx::display(Object*, bool)
from /usr/lib/x86_64-linux-gnu/libpoppler.so.52
#13 Page::displaySlice(OutputDev*, double, double, int, bool, bool, int, int, int, int, bool, bool (*)(void*), void*, bool (*)(Annot*, void*), void*, bool)
from /usr/lib/x86_64-linux-gnu/libpoppler.so.52
#14 ??
from /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8
#15 ??
from /usr/lib/evince/4/backends/libpdfdocument.so
#16 ??
from /usr/lib/evince/4/backends/libpdfdocument.so
#17 ??
from /usr/lib/libevview3.so.3
#18 ??
from /usr/lib/libevview3.so.3
#19 ??
from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#20 start_thread
at pthread_create.c line 333
#21 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 109

Comment 1 José Aliste 2016-08-25 19:57:11 UTC

I am sorry but it seems the pdf is no longer available. The second link does not work. Please upload the pdf or provide a working link to the test case.

Comment 2 Tomasz Kuchta 2016-08-25 20:01:51 UTC

Sorry, it should have been http://digitalcorpora.org/corp/files/govdocs1/zipfiles/368.zip

Comment 3 Tomasz Kuchta 2016-08-25 20:28:24 UTC

Created attachment 334175 [details]
file part1

Comment 4 Tomasz Kuchta 2016-08-25 20:28:48 UTC

Created attachment 334176 [details]
file part2

Comment 5 Tomasz Kuchta 2016-08-25 20:29:08 UTC

Created attachment 334177 [details]
file part3

Comment 6 Tomasz Kuchta 2016-08-25 20:29:33 UTC

Created attachment 334178 [details]
file part 4

Comment 7 Tomasz Kuchta 2016-08-25 20:29:50 UTC

Created attachment 334179 [details]
file part 5

Comment 8 Tomasz Kuchta 2016-08-25 20:30:32 UTC

Uploaded file 968311 (previously mixed the name). I split it to meet the limit. Thanks!

Comment 9 Jason Crain 2016-09-04 00:43:12 UTC

I was able to reproduce this with an older version of cairo.  This crash was fixed in bug https://bugs.freedesktop.org/74779, cairo versions 1.14.4 and later, and 1.15.2 and later.