GNOME Bugzilla – Bug 785786
Crash when trying to remove an annotation in a PDF file
Last modified: 2018-05-22 17:17:53 UTC
evince-3.24.0-3.fc26.x86_64 poppler-0.52.0-4.fc26.x86_64 0x00007fdf29fec88e in ev_view_remove_window_child_for_annot (annot=0x7fdf04004d20, page=40, view=0x55930c543d10) at ev-view.c:3020 3020 if (child->page != page) (gdb) thread apply all bt full
+ Trace 237751
Thread 1 (Thread 0x7fdf2a57d680 (LWP 23042))
(gdb) info register rax 0x1 1 rbx 0x55930c543d10 94090055400720 rcx 0x55930c0eaaa8 94090050841256 rdx 0x55930cdeecc0 94090064489664 rsi 0x55930cdeecc0 94090064489664 rdi 0x0 0 rbp 0x7fdf04004d20 0x7fdf04004d20 rsp 0x7ffec93d5980 0x7ffec93d5980 r8 0x55930c396c08 94090053643272 r9 0x55930cdeecf8 94090064489720 r10 0x55930c396c10 94090053643280 r11 0x55930c778f78 94090057715576 r12 0x55930c23c2e0 94090052223712 r13 0x55930c2eecf0 94090052955376 r14 0x28 40 r15 0x7fdf27418300 140596413039360 rip 0x7fdf29fec88e 0x7fdf29fec88e <ev_view_remove_annotation+190> eflags 0x297 [ CF PF AF SF IF ] cs 0x33 51 ss 0x2b 43 ds 0x0 0 es 0x0 0 fs 0x0 0 gs 0x0 0 (gdb)
Hrm. Is this reproducible? If so, can you share the PDF and instructions? It seems that accessing the "page" from the child fails. Can you "print child" when it crashes?
I have seen this same behavior, but have not been reliably able to reproduce it.
I have the same problem in 3.24.1. If I open a document, add a color marking and directly remove it Evince will not crash. However if I 1: Open a document 2: Scroll around randomly a few seconds 3: Add a color marking 4: Remove the marking Evince will crash. Is there any more info I can add?
Do you have a PDF to share with us? Can you reproduce it always or just some times?
*** Bug 785194 has been marked as a duplicate of this bug. ***
Created attachment 360609 [details] Gif showing how to reproduce the bug
It happens on all pdf's. It happens when deleting a new marking when a marking has been created before on another page as shown in the gif. When done like this it is always reproducible.
I cannot reproduce it. However, I have the fix applied in Bug 785975. I will try to reproduce it before the commit later.
(In reply to André Klapper from comment #0) > evince-3.24.0-3.fc26.x86_64 > poppler-0.52.0-4.fc26.x86_64 > > 0x00007fdf29fec88e in ev_view_remove_window_child_for_annot > (annot=0x7fdf04004d20, page=40, view=0x55930c543d10) at ev-view.c:3020 > 3020 if (child->page != page) > (gdb) thread apply all bt full André, Can you confirm if this was a crash or if evince stop responding and you cancel it to obtain the backtrace. The line the backtrace points to seems related with the infinite loop bug I introduced... and fixed later.
-- GitLab Migration Automatic Message -- This bug has been migrated to GNOME's GitLab instance and has been closed from further activity. You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.gnome.org/GNOME/evince/issues/812.