Ubuntu
evince package

evince crashed with signal 5 in g_malloc()

Bug #622344 reported by oli z
410
This bug affects 54 people
Affects Status Importance Assigned to Milestone
Evince
Fix Released
Critical
evince (Fedora)
Fix Released
Medium
evince (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: evince

Description: Ubuntu maverick (development branch)
Release: 10.10

evince:
  Installiert: 2.31.90-0ubuntu1
  Kandidat: 2.31.90-0ubuntu1
  Versionstabelle:
 *** 2.31.90-0ubuntu1 0
        500 http://de.archive.ubuntu.com/ubuntu/ maverick/main amd64 Packages
        100 /var/lib/dpkg/status

i opened the attached pdf and went to site 32, "Write callbacks"
i tried to copy/paste the first code block "png_structp png_ptr = ..." - nothing happend
i tried it again and evince crashed
it always crashes when i try to do that
i expected a normal copy/paste highlightning

reproduce: go to the first code block, press the left mouse button and hold it, and move it to the end of the codeblock
this works sometimes, but often it crashes
if it doesnt crash, just click in the box a few times, i'm sure it will

ProblemType: Crash
DistroRelease: Ubuntu 10.10
Package: evince 2.31.90-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.35-17.23-generic 2.6.35.2
Uname: Linux 2.6.35-17-generic x86_64
Architecture: amd64
Date: Sun Aug 22 18:40:56 2010
ExecutablePath: /usr/bin/evince
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Alpha amd64 (20100630)
ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-2.6.35-17-generic root=UUID=8f6d8a19-d3bb-409f-a0dd-35960b498d54 ro
ProcEnviron:
 PATH=(custom, user)
 LANG=de_DE.utf8
 SHELL=/bin/bash
Signal: 5
SourcePackage: evince
StacktraceTop:
 g_malloc () from /lib/libglib-2.0.so.0
 ?? () from /usr/lib/libgdk-x11-2.0.so.0
 gdk_region_intersect ()
 ?? () from /usr/lib/libgdk-x11-2.0.so.0
 ?? () from /usr/lib/libevview.so.3
Title: evince crashed with signal 5 in g_malloc()
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare
XsessionErrors:
 (polkit-gnome-authentication-agent-1:1642): GLib-CRITICAL **: g_once_init_leave: assertion `initialization_value != 0' failed
 (bluetooth-applet:1639): Gtk-CRITICAL **: IA__gtk_widget_set_sensitive: assertion `GTK_IS_WIDGET (widget)' failed
 (alltray:2183): Gdk-WARNING **: Can't confine to grabbed window, not native

Related branches

lp:ubuntu/maverick/evince
Revision history for this message
In , Tomáš (tom-redhat-bugs-1) wrote :

Description of problem:
Trying to select any text in any PDF, evince crashes.

Version-Release number of selected component (if applicable):
evince-2.31.6.1-1.fc14.x86_64
poppler-0.14.1-1.fc14.x86_64
gtk2-2.21.6-1.fc14.x86_64

How reproducible:
always

Steps to Reproduce:
1. Open any PDF
2. Select any text
3. Burn!

Actual results:
GLib-ERROR **: gmem.c:140: failed to allocate 85487029080000 bytes

Additional info:

Program received signal SIGTRAP, Trace/breakpoint trap.
g_logv (log_domain=0x3257c9fa46 "GLib", log_level=<value optimized out>, format=0x3257ca75f0 "%s: failed to allocate %lu bytes", args1=
    0x7fffffffd770) at gmessages.c:554
554 g_private_set (g_log_depth, GUINT_TO_POINTER (depth));
(gdb) t a a bt

<useless threads ripped out>

Thread 1 (Thread 0x7ffff7fc2940 (LWP 29293)):
#0 g_logv (log_domain=0x3257c9fa46 "GLib", log_level=<value optimized out>, format=0x3257ca75f0 "%s: failed to allocate %lu bytes", args1=
    0x7fffffffd770) at gmessages.c:554
#1 0x0000003257c475c3 in g_log (log_domain=<value optimized out>, log_level=<value optimized out>, format=<value optimized out>)
    at gmessages.c:568
#2 0x0000003257c4551c in g_malloc (n_bytes=93046171521888) at gmem.c:139
#3 0x000000325ac343c5 in miRegionOp (newReg=0x911f20, reg1=0x911f20, reg2=0x9eef80, overlapFn=0x325ac33f10 <miIntersectO>, nonOverlap1Fn=
    0, nonOverlap2Fn=0) at gdkregion-generic.c:873
#4 0x000000325ac34c6f in IA__gdk_region_intersect (source1=0x911f20, source2=<value optimized out>) at gdkregion-generic.c:609
#5 0x000000325ac3ed50 in gdk_window_invalidate_maybe_recurse_full (window=0x914120 [GdkWindow], region=0x9eef80, clear_bg=CLEAR_BG_NONE,
    child_func=0x325ac3c5f0 <true_predicate>, user_data=0x0) at gdkwindow.c:5786
#6 0x000000325bc28c51 in merge_selection_region (view=0x8a0040 [EvView], new_list=<value optimized out>) at ev-view.c:5912
#7 0x000000325bc2cfc5 in compute_selections (view=0x8a0040 [EvView], style=EV_SELECTION_STYLE_GLYPH, start=<value optimized out>,
    stop=<value optimized out>) at ev-view.c:5934
#8 0x000000325bc2d0dd in selection_update_idle_cb (view=0x8a0040 [EvView]) at ev-view.c:3707
#9 0x0000003257c3e793 in g_main_dispatch (context=0x6954b0) at gmain.c:2119
#10 g_main_context_dispatch (context=0x6954b0) at gmain.c:2672
#11 0x0000003257c3ef70 in g_main_context_iterate (context=0x6954b0, block=1, dispatch=1, self=<value optimized out>) at gmain.c:2750
#12 0x0000003257c3f5e2 in g_main_loop_run (loop=0x6ee9d0) at gmain.c:2958
#13 0x000000325b14ac27 in IA__gtk_main () at gtkmain.c:1237
#14 0x000000000043bd94 in main (argc=1, argv=0x7fffffffde58) at main.c:322
(gdb)

Revision history for this message
In , Matthias (matthias-redhat-bugs) wrote :

Can you attach the offending pdf ?

Revision history for this message
In , Tomáš (tom-redhat-bugs-1) wrote :

It happens to me with any pdf file, e.g. http://www.irs.gov/pub/irs-pdf/fw4.pdf (first hit in Google).

Revision history for this message
In , Matthias (matthias-redhat-bugs) wrote :

Ah, here too now :-)

Revision history for this message
In , Benjamin (benjamin-redhat-bugs) wrote :

It's a bug in evince upstream. Carlos replaced GdkRegion with cairo_region_t unconditionally. So when compiling against GTK 2, bad things happen.

I've notified him on IRC.

Revision history for this message
oli z (oliver-z) wrote :
visibility: private → public
Revision history for this message
oli z (oliver-z) wrote :

please find attached the evil document

Revision history for this message
Pedro Villavicencio (pedro) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a valgrind log following the instructions at https://wiki.ubuntu.com/Valgrind and attach the file to the bug report. This will greatly help us in tracking down your problem.

Changed in evince (Ubuntu):
importance: Undecided → Medium
status: New → Incomplete
Revision history for this message
oli z (oliver-z) wrote :

attached the valgrind log

Revision history for this message
Oded Arbel (oded-geek) wrote :

I have the same problem in Maverick.

I think the problem is trying to select text from the PDF multiple times - if I select only once, it doesn't crash but also doesn't show the selection.
If I switch to another window and come back then I can see that the text is selected (this is not a timing issue - I can wait many minutes for the selection to appear and it doesn't, or I can do the selection, switch momentarily to another window and come back and I then see the selection). I can then try to select another text and it doesn't crash.
If I try to select some text, and the selection doesn't show, and then I try to select another text or even the same text again - then it crashes.

See attached valgrind log

Revision history for this message
Oded Arbel (oded-geek) wrote :

see attached PDF document with which I can reproduce the crash

Revision history for this message
madbiologist (me-again) wrote :

I can't make evince crash with either of the PDF documents attached to this bug report, but I am having a lot of difficulty selecting text with the mouse. I am having the same difficulty with some PDF files which I have on a USB flash drive. The first time I click and drag a section of text it is usually not selected. On the second or third attempt at clicking and dragging the same section of text it is usually selected, but the selection does not always correspond exactly to what I was attempting to select - sometimes it is only a rough match, starting or finishing too early. I'm using Maverick alpha 3.

Uname: Linux 2.6.35-14-generic i686
Package: evince 2.31.90-0ubuntu1

Revision history for this message
Pedro Villavicencio (pedro) wrote :

I can't reproduce this here, but hat might be a poppler issue, let's reassign it there for now.

affects: evince (Ubuntu) → poppler (Ubuntu)
Changed in poppler (Ubuntu):
status: Incomplete → New
Revision history for this message
madbiologist (me-again) wrote :

I've just tested both of the PDF documents attached to this bug, as well as my own PDF files, with the default versions of evince (2.30.3-1ubuntu2) and poppler (0.14.1-0ubuntu1) included on the Ubuntu 10.10 alpha 3 Live CD, and this bug does not occur. I can select text normally with those packages. So there seems to be a regression somewhere in the newer packages.

Re: the package this bug is assigned to - I thought poppler only did the rendering, and evince handled text selection, copy and paste? Also isn't the original report showing a crash in evince/libevview ?

But my hat is fine, thanks :)

Revision history for this message
madbiologist (me-again) wrote :

Bug #626555 contains a gdb backtrace and valgrind log for what sounds like the same issue.

Revision history for this message
Daniel Serpell (daniel-serpell) wrote :

To madbiologist, this bug only occurs on last evince version, 2.31.90-0ubuntu1, you can not reproduce it on alpha-3.

Daniel Serpell (daniel-serpell)
tags: added: regression-potential
Revision history for this message
meisterplanlos (meisterplanlos) wrote :

This bug seems to affect me, too. Selected text in evince isn't highlighted and evince crashes unpredictably after text selection. Sometimes the text is selected (no highlight, but pasting works). Sometimes evince crashes (no highlight, text not in paste buffer).

Revision history for this message
Daniel Serpell (daniel-serpell) wrote :

From comment 4 in the fedora bug (see https://bugzilla.redhat.com/show_bug.cgi?id=625431#c4 ), it seems that this is bug is in evince, not poppler.

Daniel Serpell (daniel-serpell)
Changed in poppler (Ubuntu):
status: New → Confirmed
Revision history for this message
Charlie Kravetz (cjkgeek) wrote :

Since the bug is in evince, not poppler, I am changing the package to refect the correct package.

affects: poppler (Ubuntu) → evince (Ubuntu)
Bug Watch Updater (bug-watch-updater)
Changed in evince:
status: Unknown → New
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 2.31.90-0ubuntu2

---------------
evince (2.31.90-0ubuntu2) maverick; urgency=low

  * debian/control.in:
    - updated the binary transition version (lp: #622150)
    - don't build-depends on gir-repository-dev that's not required
  * 90_git_crash_selection.patch:
    - git change to fix the viewer crashing when using the selection
      (lp: #622344)
 -- Sebastien Bacher <email address hidden> Mon, 06 Sep 2010 22:58:57 +0200

Changed in evince (Ubuntu):
status: Confirmed → Fix Released
Bug Watch Updater (bug-watch-updater)
Changed in evince:
status: New → Fix Released
Revision history for this message
In , Matthias (matthias-redhat-bugs) wrote :

Fixed upstream: http://git.gnome.org/browse/evince/commit/?h=gnome-2-32&id=e36d5aeda1ceba4d656964ed46985379df64b4f2

Will be in the next evince release.

Revision history for this message
In , Marek (marek-redhat-bugs) wrote :

Hi Matthias,

thank you for the info.

Marek

Revision history for this message
In , Fedora (fedora-redhat-bugs) wrote :

evince-2.31.92-2.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/evince-2.31.92-2.fc14

Revision history for this message
In , Fedora (fedora-redhat-bugs) wrote :

evince-2.31.92-2.fc14 has been pushed to the Fedora 14 testing repository. If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with
 su -c 'yum --enablerepo=updates-testing update evince'. You can provide feedback for this update here: https://admin.fedoraproject.org/updates/evince-2.31.92-2.fc14

Revision history for this message
In , Fedora (fedora-redhat-bugs) wrote :

evince-2.31.92-2.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.

Bug Watch Updater (bug-watch-updater)
Changed in evince:
importance: Unknown → Critical
Bug Watch Updater (bug-watch-updater)
Changed in evince (Fedora):
importance: Unknown → Medium
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.