evince-thumbnailer crashed with SIGSEGV in Object::fetch()

Bug #123116 reported by Stéphane Loeuillet
2
Affects Status Importance Assigned to Milestone
Poppler
Fix Released
Medium
poppler (Ubuntu)
Fix Released
Medium
Ubuntu Desktop Bugs

Bug Description

Binary package hint: evince

I moved several pdf files to a directory ; some were already there (copies) so they were overridden

The thumbnailer went into action and crashed

ProblemType: Crash
Architecture: amd64
Date: Fri Jun 29 21:09:35 2007
DistroRelease: Ubuntu 7.10
ExecutablePath: /usr/bin/evince-thumbnailer
NonfreeKernelModules: nvidia
Package: evince 0.9.1-0ubuntu1
PackageArchitecture: amd64
ProcCmdline: evince-thumbnailer -s 128 file:///home/leroutier/Desktop/Talks/fullcircle-issue01-english.pdf /tmp/.gnome_thumbnail.CH50UT
ProcCwd: /home/leroutier
ProcEnviron:
 LANGUAGE=fr_FR.UTF-8
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=fr_FR.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: evince
StacktraceTop:
 Object::fetch () from /usr/lib/libpoppler.so.1
 Form::Form () from /usr/lib/libpoppler.so.1
 Catalog::Catalog () from /usr/lib/libpoppler.so.1
 PDFDoc::setup () from /usr/lib/libpoppler.so.1
 PDFDoc::PDFDoc () from /usr/lib/libpoppler.so.1
Title: evince-thumbnailer crashed with SIGSEGV in Object::fetch()
Uname: Linux portable-sloeuillet 2.6.22-7-generic #1 SMP Mon Jun 25 17:07:55 GMT 2007 x86_64 GNU/Linux
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin plugdev pulse-rt scanner video

Tags: apport-crash
Revision history for this message
Stéphane Loeuillet (leroutier) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Symbolic stack trace

StacktraceTop:Form (this=0x6bb660, xrefA=0x6bbad0, acroForm=0x6bbc20) at Form.cc:1042
Catalog (this=0x6bbb70, xrefA=<value optimized out>) at Catalog.cc:59
PDFDoc::setup (this=0x6bb6e0, ownerPassword=0x0, userPassword=0x0) at PDFDoc.cc:205
PDFDoc (this=0x6bb6e0, fileNameA=<value optimized out>, ownerPassword=0x0, userPassword=0x0, guiDataA=<value optimized out>)
poppler_document_new_from_file (uri=<value optimized out>, password=0x0, error=0x7fff6b20ea48) at poppler-document.cc:143

Revision history for this message
Apport retracing service (apport) wrote : Symbolic threaded stack trace
Revision history for this message
Apport retracing service (apport) wrote : Stack trace with source code
Revision history for this message
In , Sebastien Bacher (seb128) wrote :

The bug has been opened on https://bugs.launchpad.net/ubuntu/+source/evince/+bug/123116

"Binary package hint: evince

I moved several pdf files to a directory ; some were already there (copies) so they were overridden

The thumbnailer went into action and crashed
...
libpoppler1 0.5.9-0ubuntu1
...
.
Thread 1 (process 12089):
#0 Object::fetch (this=0x7c8b482824448b4c, xref=0x30244c8b4cc38949, obj=0x7fff6b20e870) at Object.cc:106
No locals.
#1 0x00002b3b47e635bb in Form (this=0x6bb660, xrefA=0x6bbad0, acroForm=0x6bbc20) at Form.cc:1042
No locals.
#2 0x00002b3b47e5a31c in Catalog (this=0x6bbb70, xrefA=<value optimized out>) at Catalog.cc:59
No locals.
#3 0x00002b3b47eb321a in PDFDoc::setup (this=0x6bb6e0, ownerPassword=0x0, userPassword=0x0) at PDFDoc.cc:205
No locals.
#4 0x00002b3b47eb340f in PDFDoc (this=0x6bb6e0, fileNameA=<value optimized out>, ownerPassword=0x0, userPassword=0x0, guiDataA=<value optimized out>)
    at PDFDoc.cc:102
No locals.
#5 0x00002b3b41c3d4e8 in poppler_document_new_from_file (uri=<value optimized out>, password=0x0, error=0x7fff6b20ea48) at poppler-document.cc:143
 newDoc = (PDFDoc *) 0x6bb6e0
 filename_g = (GooString *) 0x6bb630
 password_g = (GooString *) 0x0
 filename = <value optimized out>
#6 0x00000000004162d9 in pdf_document_load (document=<value optimized out>,
    uri=0x668290 "file:///home/leroutier/Desktop/Talks/fullcircle-issue01-english.pdf", error=0x7fff6b20eae8)
    at /build/buildd/evince-0.9.1/./backend/pdf/ev-poppler.cc:265
 poppler_error = (GError *) 0x0
#7 0x0000000000412db0 in ev_document_factory_get_document (uri=0x30244c8b4cc38949 <Address 0x30244c8b4cc38949 out of bounds>, error=0x7fff6b20eae8)
    at /build/buildd/evince-0.9.1/./libdocument/ev-document-factory.c:347
 document = (EvDocument *) 0x698c00
 result = <value optimized out>
 compression = EV_COMPRESSION_NONE
 uri_unc = (gchar *) 0x0
#8 0x0000000000411be2 in main (argc=5, argv=0x7fff6b20ebf8) at /build/buildd/evince-0.9.1/./thumbnailer/evince-thumbnailer.c:48
 error = (GError *) 0x0
 document = <value optimized out>
 input = 0x7fff6b20fc14 "file:///home/leroutier/Desktop/Talks/fullcircle-issue01-english.pdf"
 output = 0x7fff6b20fc58 "/tmp/.gnome_thumbnail.CH50UT"
 size = 128
 uri = 0x7c8b482824448b4c <Address 0x7c8b482824448b4c out of bounds>
..."

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thanks for your bug report. This bug has been reported to the developers of the software. You can track it and make comments here: https://bugs.freedesktop.org/show_bug.cgi?id=11437

Changed in evince:
assignee: nobody → desktop-bugs
importance: Undecided → Medium
status: New → Confirmed
Revision history for this message
In , Albert Astals Cid (aacid) wrote :

Probably a Scribus created file, Scribus has the bug that it creates non conformant pdf files and poppler has the bug that we suppose that the pdf file will be correct. Both bugs will be fixed in respective new releases of Scribus and poppler.

Changed in poppler:
status: Unknown → Confirmed
Revision history for this message
Sebastien Bacher (seb128) wrote :

upstream comment:

"Probably a Scribus created file, Scribus has the bug that it creates non
conformant pdf files and poppler has the bug that we suppose that the pdf file
will be correct. Both bugs will be fixed in respective new releases of Scribus
and poppler."

Changed in poppler:
status: Confirmed → Fix Committed
Changed in poppler:
status: Confirmed → Fix Released
Revision history for this message
Stéphane Loeuillet (leroutier) wrote :

Thanks for the fix

Do you know who at Ubuntu should be warned that all 2 FullCircle release make evince crash and should be republished as corrected PDFs ?
fullcircle-issue01-english.pdf and fullcircle-issue02-english.pdf that just went out both crash it.

Revision history for this message
Martin Pitt (pitti) wrote :

poppler (0.5.91-0ubuntu1) gutsy; urgency=low

  * New upstream bugfix release.
    - Fixes crash in glib action handlers. (LP: #126449)
    - Fixes out-of-place graphics and tables. (LP: #124777)
    - Fix crash on amd64 with slightly broken Scribus files. (LP: #123116)
    - pdftops does not produce broken PostScript any more. (LP: #124777)
  * Update debian/patches/006_pthreads_ldflags.patch to new upstream version.
  * Drop debian/patches/100_streampredictor_overflow.patch, applied upstream.
  * debian/rules: Bump shlibs, there are some new APIs.

 -- Martin Pitt <email address hidden> Wed, 15 Aug 2007 12:21:21 +0200

Changed in poppler:
status: Fix Committed → Fix Released
Changed in poppler:
importance: Unknown → Medium
Changed in poppler:
importance: Medium → Unknown
Changed in poppler:
importance: Unknown → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.