evince crashed with SIGSEGV in ev_window_title_sanitize_title()

Bug #1369894 reported by Walter Garcia-Fontes
34
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Evince
Fix Released
High
evince (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Evince just crashed while it was open and idle.

ProblemType: Crash
DistroRelease: Ubuntu 14.10
Package: evince 3.13.91-0ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-14.20-generic 3.16.2
Uname: Linux 3.16.0-14-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.14.7-0ubuntu2
Architecture: amd64
CurrentDesktop: Unity
Date: Tue Sep 16 09:24:16 2014
ExecutablePath: /usr/bin/evince
InstallationDate: Installed on 2010-10-25 (1421 days ago)
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-3.16.0-14-generic root=UUID=dadc68cb-c217-4aef-a751-ba0b61137c4a ro quiet splash
SegvAnalysis:
 Segfault happened at: 0x43984b: mov (%rax),%rdi
 PC (0x0043984b) ok
 source "(%rax)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rdi" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: evince
StacktraceTop:
 ?? ()
 ?? ()
 g_closure_invoke (closure=0x1f56320, return_value=0x0, n_param_values=2, param_values=0x7fff82bc6540, invocation_hint=0x7fff82bc64e0) at /build/buildd/glib2.0-2.41.4/./gobject/gclosure.c:768
 signal_emit_unlocked_R (node=node@entry=0x1b12f30, detail=detail@entry=1242, instance=instance@entry=0x1c93aa0, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7fff82bc6540) at /build/buildd/glib2.0-2.41.4/./gobject/gsignal.c:3553
 g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fff82bc66d0) at /build/buildd/glib2.0-2.41.4/./gobject/gsignal.c:3309
Title: evince crashed with SIGSEGV in g_closure_invoke()
UpgradeStatus: Upgraded to utopic on 2014-09-15 (0 days ago)
UserGroups: adm admin audio cdrom dialout kismet lp lpadmin plugdev sambashare video www-data

Revision history for this message
Walter Garcia-Fontes (walter-garcia) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 ev_window_title_sanitize_title (window_title=0x1d210a0, window_title=0x1d210a0, title=<synthetic pointer>) at /build/buildd/evince-3.13.91/./shell/ev-window-title.c:80
 ev_window_title_update (window_title=0x1d210a0) at /build/buildd/evince-3.13.91/./shell/ev-window-title.c:124
 ev_window_title_set_type (window_title=<optimized out>, type=<optimized out>) at /build/buildd/evince-3.13.91/./shell/ev-window-title.c:193
 ev_window_set_document (document=<optimized out>, ev_window=0x1cc9a90) at /build/buildd/evince-3.13.91/./shell/ev-window.c:1618
 ev_window_document_changed_cb (model=<optimized out>, pspec=<optimized out>, ev_window=0x1cc9a90) at /build/buildd/evince-3.13.91/./shell/ev-window.c:4785

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in evince (Ubuntu):
importance: Undecided → Medium
summary: - evince crashed with SIGSEGV in g_closure_invoke()
+ evince crashed with SIGSEGV in ev_window_title_sanitize_title()
tags: removed: need-amd64-retrace
Revision history for this message
Walter Garcia-Fontes (walter-garcia) wrote :

Marking as invalid, will try to reproduce with debugging symbols installed.

information type: Private → Public
Changed in evince (Ubuntu):
status: New → Invalid
Changed in evince (Ubuntu):
status: Invalid → New
Revision history for this message
Walter Garcia-Fontes (walter-garcia) wrote :

I can reproduce it:

1) Create a PDF file with tex/latex for instance
2) Open the PDF file with evince
3) Change the tex/latex file and create a new PDF without closing EVINCE

What should happen?
Evince should reload the file and show the updated version.

What happens?
Evince crashes.

Changed in evince:
importance: Unknown → Medium
status: Unknown → New
no longer affects: evince
Changed in evince:
importance: Unknown → Wishlist
status: Unknown → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in evince (Ubuntu):
status: New → Confirmed
no longer affects: evince
Changed in evince:
importance: Unknown → High
status: Unknown → Confirmed
Changed in evince:
status: Confirmed → Fix Released
Revision history for this message
Sebastien Bacher (seb128) wrote :
Changed in evince (Ubuntu):
status: Confirmed → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 3.14.0-0ubuntu2

---------------
evince (3.14.0-0ubuntu2) utopic; urgency=medium

  * debian/patches/0001-window-title-Keep-a-weak-ref-on-the-document.patch:
    Cherry-pick from upstream git to fix a crash when reloading documents (LP:
    #1369894)
 -- Iain Lane <email address hidden> Tue, 30 Sep 2014 11:23:24 +0100

Changed in evince (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.