Inkscape crashes when import text from buffer via Ctrl+V

[Maksim Kasherny]

there is working log of Inkscape from gdb

(gdb) run
Starting program: /usr/bin/inkscape
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
[New Thread 0xb5556b40 (LWP 7342)]
[New Thread 0xb4bffb40 (LWP 7343)]
[New Thread 0xaca34b40 (LWP 7344)]
[Thread 0xaca34b40 (LWP 7344) exited]
[New Thread 0xaca34b40 (LWP 7406)]
[Thread 0xaca34b40 (LWP 7406) exited]
[New Thread 0xaca34b40 (LWP 7464)]
[Thread 0xaca34b40 (LWP 7464) exited]
[New Thread 0xaca34b40 (LWP 8817)]
[Thread 0xaca34b40 (LWP 8817) exited]
[New Thread 0xaca34b40 (LWP 10587)]
[Thread 0xaca34b40 (LWP 10587) exited]
[New Thread 0xaca34b40 (LWP 10642)]
[Thread 0xaca34b40 (LWP 10642) exited]
[New Thread 0xaca34b40 (LWP 15531)]
terminate called after throwing an instance of 'std::out_of_range'
  what(): basic_string::replace

Program received signal SIGABRT, Aborted.
0xb7fdd424 in __kernel_vsyscall ()

(gdb) bt
#0 0xb7fdd424 in __kernel_vsyscall ()
#1 0xb631b1df in raise () from /lib/i386-linux-gnu/libc.so.6
#2 0xb631e825 in abort () from /lib/i386-linux-gnu/libc.so.6
#3 0xb65a913d in __gnu_cxx::__verbose_terminate_handler() ()
   from /usr/lib/i386-linux-gnu/libstdc++.so.6
#4 0xb65a6ed3 in ?? () from /usr/lib/i386-linux-gnu/libstdc++.so.6
#5 0xb65a6f0f in std::terminate() () from /usr/lib/i386-linux-gnu/libstdc++.so.6
#6 0xb65a705e in __cxa_throw () from /usr/lib/i386-linux-gnu/libstdc++.so.6
#7 0xb654b1b3 in std::__throw_out_of_range(char const*) ()
   from /usr/lib/i386-linux-gnu/libstdc++.so.6
#8 0xb658edc3 in std::string::replace(unsigned int, unsigned int, char const*, unsigned int) ()
   from /usr/lib/i386-linux-gnu/libstdc++.so.6
#9 0xb74bd8b2 in Glib::ustring::replace(Glib::ustring_Iterator<__gnu_cxx::__normal_iterator<char*, std::string> >, Glib::ustring_Iterator<__gnu_cxx::__normal_iterator<char*, std::string> >, char const*)
    () from /usr/lib/i386-linux-gnu/libglibmm-2.4.so.1
#10 0x081a49bb in ?? ()
#11 0x081a536a in ?? ()
#12 0x081a61ff in ?? ()
#13 0x081a196e in ?? ()
#14 0xb68030a3 in g_cclosure_marshal_VOID__STRINGv ()
   from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#15 0xb6800727 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#16 0xb6819a29 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#17 0xb681a8af in g_signal_emit_by_name () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#18 0xb785a6dd in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#19 0xb68030a3 in g_cclosure_marshal_VOID__STRINGv ()
---Type <return> to continue, or q <return> to quit---
   from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#20 0xb6800727 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#21 0xb6819a29 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#22 0xb681a453 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#23 0xac0175e5 in ?? () from /usr/lib/i386-linux-gnu/gtk-2.0/2.10.0/immodules/im-ibus.so
#24 0xb68030a3 in g_cclosure_marshal_VOID__STRINGv ()
   from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#25 0xb6800727 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#26 0xb6819a29 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#27 0xb681a8af in g_signal_emit_by_name () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#28 0xb7858358 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#29 0xb785899a in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#30 0xb7857866 in gtk_im_context_filter_keypress () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#31 0xac0194b7 in ?? () from /usr/lib/i386-linux-gnu/gtk-2.0/2.10.0/immodules/im-ibus.so
#32 0xb7857866 in gtk_im_context_filter_keypress () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#33 0xb785ad09 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#34 0xb7857866 in gtk_im_context_filter_keypress () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#35 0x0819e720 in ?? ()
#36 0x080b053a in ?? ()
#37 0x082a418a in ?? ()
#38 0xb6800484 in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#39 0xb68120d9 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#40 0xb6819ff5 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#41 0xb681a453 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#42 0x08634049 in ?? ()
#43 0x08634712 in ?? ()
---Type <return> to continue, or q <return> to quit---
#44 0x082a3eb3 in ?? ()
#45 0xb67ff2fd in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#46 0xb6800484 in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#47 0xb681270d in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#48 0xb6819ff5 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#49 0xb681a453 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#50 0x08201644 in ?? ()
#51 0xb78758a2 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#52 0xb67ff2fd in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#53 0xb68003d2 in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#54 0xb681270d in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#55 0xb6819ff5 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#56 0xb681a453 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#57 0xb79af413 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#58 0xb79c6950 in gtk_window_propagate_key_event () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#59 0xb79c96b4 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#60 0xb7eb4725 in Gtk::Widget_Class::key_press_event_callback(_GtkWidget*, _GdkEventKey*) ()
   from /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1
#61 0xb78758a2 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#62 0xb67ff2fd in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#63 0xb6800484 in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#64 0xb681270d in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#65 0xb6819ff5 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#66 0xb681a453 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#67 0xb79af413 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#68 0xb7873b38 in gtk_propagate_event () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#69 0xb7873e00 in gtk_main_do_event () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#70 0xb76e5758 in ?? () from /usr/lib/i386-linux-gnu/libgdk-x11-2.0.so.0
#71 0xb6627d86 in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#72 0xb6628125 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#73 0xb662856b in g_main_loop_run () from /lib/i386-linux-gnu/libglib-2.0.so.0
#74 0xb7872b8f in gtk_main () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#75 0xb7e2d194 in Gtk::Main::run_impl() () from /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1
#76 0xb7e2dbcf in Gtk::Main::run() () from /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1
#77 0x080a5885 in ?? ()
#78 0x0808d047 in ?? ()
#79 0xb63064d3 in __libc_start_main () from /lib/i386-linux-gnu/libc.so.6
#80 0x080a2fe1 in ?? ()

[Maksim Kasherny (jmaks)]

This bug in version
$ dpkg -l | grep inkscape*
ii inkscape-trunk 1:0.48+devel+12500+41~ubuntu12.04.1 vector-based drawing program (trunk build)
ii inkscape-trunk-data 1:0.48+devel+12500+41~ubuntu12.04.1 Data files for Inkscape

[su_v (suv-lp)]

Based on
> Inkscape crashes when import text from buffer via Ctrl+V
and
> ii inkscape-trunk 1:0.48+devel+12500+41~ubuntu12.04.1

Failed to reproduce crash with Inkscape trunk (PPA, r12489, r12501) on Ubuntu 12.04 (VM, 64bit).

Could you please provide more information (detailed steps to reproduce, configuration of your system)?

[Maksim Kasherny (jmaks)]

1. Open new inkscape doc
2. Open in evince some pdf document with text and formatted tables in russian language
3. Mark in pdf doc all text and tables with mouse cursor
4. Copy in clippboard via Ctrl+C (or with mouse
5. Select text tool in inkscape
6. Click on page area with mouse to start text edition
7. Paste all stuff from clippboard to inknscape doc via Ctlr+V
8. Inkscape freezes and crashes

System
Ubuntu 12.04 (precise) 32bit
Kernel Linux 3.2.0-52-generic-pae
DE GNOME 3.4.2

RAM 1,9 GiB
CPU Intel® Core™2 Duo CPU T5550 @ 1.83GHz × 2

Free disk place 28,4GiB

$cat /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 6
model : 15
model name : Intel(R) Core(TM)2 Duo CPU T5550 @ 1.83GHz
stepping : 13
microcode : 0xa1
cpu MHz : 1000.000
cache size : 2048 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 2
apicid : 0
initial apicid : 0
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl est tm2 ssse3 cx16 xtpr pdcm lahf_lm dtherm
bogomips : 3657.77
clflush size : 64
cache_alignment : 64
address sizes : 36 bits physical, 48 bits virtual
power management:

processor : 1
vendor_id : GenuineIntel
cpu family : 6
model : 15
model name : Intel(R) Core(TM)2 Duo CPU T5550 @ 1.83GHz
stepping : 13
microcode : 0xa1
cpu MHz : 1000.000
cache size : 2048 KB
physical id : 0
siblings : 2
core id : 1
cpu cores : 2
apicid : 1
initial apicid : 1
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl est tm2 ssse3 cx16 xtpr pdcm lahf_lm dtherm
bogomips : 3657.85
clflush size : 64
cache_alignment : 64
address sizes : 36 bits physical, 48 bits virtual
power management:

$cat /proc/version
Linux version 3.2.0-52-generic-pae (buildd@batsu) (gcc version 4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu5) ) #78-Ubuntu SMP Fri Jul 26 16:43:19 UTC 2013

$ ldd /usr/bin/inkscape
 linux-gate.so.1 => (0xb77ab000)
 libgtkspell.so.0 => /usr/lib/libgtkspell.so.0 (0xb777d000)
 libgtkmm-2.4.so.1 => /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1 (0xb742c000)
 libatkmm-1.6.so.1 => /usr/lib/i386-linux-gnu/libatkmm-1.6.so.1 (0xb73e7000)
 libgdkmm-2.4.so.1 => /usr/lib/i386-linux-gnu/libgdkmm-2.4.so.1 (0xb739d000)
 libpangomm-1.4.so.1 => /usr/lib/i386-linux-gnu/libpangomm-1.4.so.1 (0xb7373000)
 libgtk-x11-2.0.so.0 => /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0 (0xb6f0b000)
 libgdk-x11-2.0.so.0 => /usr/lib/i386-linux-gnu/libgdk-x11-2.0.so.0 (0xb6e5c000)
 libpangocairo-1.0.so.0 => /usr/lib/i386-linux-gnu/libpangocairo-1.0.so.0 (0xb6e4e000)
 libgdk_pixbuf-2.0.so.0 => /usr/lib/i386-linux-gnu/libgdk_pixbuf-2.0.so.0 (0xb6e2d000)
 libgc.so.1 => /usr/lib/libgc.so.1 (0xb6dea000)
 libcairomm-1.0.so.1 => /usr/lib/i386-linux-gnu/libcairomm-1.0.so.1 (0xb6...

[su_v (suv-lp)]

Probably due to the same regression as triaged in more recent report by jagolf:
- Bug #1224486 “Crash when typing after pressing Enter in text-box”
  <https://bugs.launchpad.net/inkscape/+bug/1224486>

[Maksim Kasherny (jmaks)]

Try to reproduce with next steps.

1. Open Inkscape
2. Copy in clippboard some text, tables, so one data
3. Pick in inkscape document 'text tool' (f8 or t)
4. Create text-box area via dragging mouse with holding mouse button
5. Paste in it clippoard
6. PROFIT... Inkscape crashes

Today updates to:
$ dpkg -l inkscape*
ii inkscape-trunk 1:0.48+devel+12506+41~ubuntu12.04.1 vector-based drawing program (trunk build)
ii inkscape-trunk-data 1:0.48+devel+12506+41~ubuntu12.04.1 Data files for Inkscape

[Maksim Kasherny (jmaks)]

There is gdb log
Reading symbols from /usr/bin/inkscape...(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/bin/inkscape
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
[New Thread 0xb5556b40 (LWP 17989)]
[New Thread 0xb4bffb40 (LWP 17990)]
[New Thread 0xaca34b40 (LWP 17994)]
[Thread 0xaca34b40 (LWP 17994) exited]

(inkscape:17986): glibmm-ERROR **:
unhandled exception (type std::exception) in signal handler:
what: basic_string::replace

Program received signal SIGTRAP, Trace/breakpoint trap.
0xb662f69d in g_logv () from /lib/i386-linux-gnu/libglib-2.0.so.0
(gdb) bt
#0 0xb662f69d in g_logv () from /lib/i386-linux-gnu/libglib-2.0.so.0
#1 0xb662f823 in g_log () from /lib/i386-linux-gnu/libglib-2.0.so.0
#2 0xb74b2e06 in Glib::exception_handlers_invoke() () from /usr/lib/i386-linux-gnu/libglibmm-2.4.so.1
#3 0xb7eb667b in ?? () from /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1
#4 0xb78758a2 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#5 0xb6800484 in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#6 0xb681236a in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#7 0xb6819ff5 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#8 0xb681a453 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#9 0xb79af413 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#10 0xb7873b38 in gtk_propagate_event () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#11 0xb7873e00 in gtk_main_do_event () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#12 0xb76e5758 in ?? () from /usr/lib/i386-linux-gnu/libgdk-x11-2.0.so.0
#13 0xb6627d86 in g_main_context_dispatch () from /lib/i386-linux-gnu/libglib-2.0.so.0
#14 0xb6628125 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
#15 0xb662856b in g_main_loop_run () from /lib/i386-linux-gnu/libglib-2.0.so.0
#16 0xb7872b8f in gtk_main () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#17 0xb7e2d194 in Gtk::Main::run_impl() () from /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1
#18 0xb7e2dbcf in Gtk::Main::run() () from /usr/lib/i386-linux-gnu/libgtkmm-2.4.so.1
#19 0x080a5885 in ?? ()
#20 0x0808d047 in ?? ()
#21 0xb63064d3 in __libc_start_main () from /lib/i386-linux-gnu/libc.so.6
#22 0x080a2fe1 in ?? ()

[su_v (suv-lp)]

Reproduced with r12506 on OS X 10.7.5 if the pasted text contains line breaks.

-> related to bug #1224486.

[jazzynico (jazzynico)]

Reproduced on Windows XP, Inkscape trunk revision 12526.
Fixed with the patch from bug #1224486, comment 7 (not committed yet).

[su_v (suv-lp)]

Fixed in revision 12529 - linking as duplicate to bug #1224486.