gnome-font-viewer crashed with SIGSEGV in strlen()

[YuHui]

When I try to open a .ttf file called mtextra.ttf, it happened.
It will happen as long as I open a .ttf file with special symbols, such as symbol.ttf, wingding.ttf......

ProblemType: Crash
DistroRelease: Ubuntu 14.10
Package: gnome-font-viewer 3.12.0-1
ProcVersionSignature: Ubuntu 3.15.0-6.11-generic 3.15.0
Uname: Linux 3.15.0-6-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.14.3-0ubuntu2
Architecture: amd64
CurrentDesktop: Unity
Date: Thu Jul 3 22:48:31 2014
ExecutablePath: /usr/bin/gnome-font-viewer
InstallationDate: Installed on 2014-07-03 (0 days ago)
InstallationMedia: Ubuntu-Kylin 14.10 "Utopic Unicorn" - Alpha amd64 (20140624)
ProcCmdline: gnome-font-viewer /home/username/.cache/.fr-gzBOFH/mtextra.ttf
ProcEnviron:
 LANGUAGE=zh_CN:zh
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=zh_CN.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7f3b1cbd6ada <strlen+42>: movdqu (%rax),%xmm12
 PC (0x7f3b1cbd6ada) ok
 source "(%rax)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%xmm12" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: gnome-font-viewer
StacktraceTop:
 strlen () at ../sysdeps/x86_64/strlen.S:106
 ?? ()
 ?? ()
 ?? ()
 ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
Title: gnome-font-viewer crashed with SIGSEGV in strlen()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Apport retracing service (apport)]

StacktraceTop:
 strlen () at ../sysdeps/x86_64/strlen.S:106
 text_to_glyphs (cr=<optimized out>, text=0x0, glyphs=0x7fffcd0d0b08, num_glyphs=0x7fffcd0d0b04) at sushi-font-widget.c:107
 draw_string (self=self@entry=0xb12190, cr=cr@entry=0xaeaba0, text=0x0, pos_y=pos_y@entry=0x7fffcd0d0bcc, padding=...) at sushi-font-widget.c:198
 sushi_font_widget_draw (drawing_area=<optimized out>, cr=0xaeaba0) at sushi-font-widget.c:639
 _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x8c6a30, return_value=return_value@entry=0x7fffcd0d0de0, instance=instance@entry=0xb12190, args=args@entry=0x7fffcd0d0ee8, marshal_data=marshal_data@entry=0x409340 <sushi_font_widget_draw>, n_params=n_params@entry=1, param_types=param_types@entry=0x8c6a80) at /build/buildd/gtk+3.0-3.12.2/./gtk/gtkmarshalers.c:130

[Joachim (joachim-redhat-bugs)]

Description of problem:
Run gnome-font-viewer clR9x15.pcf.

Version-Release number of selected component:
gnome-font-viewer-3.14.0-1.fc22

Additional info:
reporter: libreport-2.3.0
backtrace_rating: 4
cmdline: gnome-font-viewer clR9x15.pcf.gz
crash_function: strlen
executable: /usr/bin/gnome-font-viewer
kernel: 3.19.0-0.rc6.git2.2.fc22.x86_64
runlevel: N 5
type: CCpp
uid: 1001

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 strlen at ../sysdeps/x86_64/strlen.S:106
 #1 text_to_glyphs at sushi-font-widget.c:107
 #2 draw_string at sushi-font-widget.c:198
 #3 sushi_font_widget_draw at sushi-font-widget.c:639
 #4 _gtk_marshal_BOOLEAN__BOXEDv at gtkmarshalers.c:130
 #5 gtk_widget_draw_marshallerv at gtkwidget.c:1097
 #6 _g_closure_invoke_va at gclosure.c:831
 #9 _gtk_widget_draw_internal at gtkwidget.c:6964
 #11 _gtk_widget_draw_windows at gtkwidget.c:7065
 #12 _gtk_widget_draw at gtkwidget.c:7136

Potential duplicate: bug 1163629

[Joachim (joachim-redhat-bugs)]

Created attachment 986044
File: backtrace

[Joachim (joachim-redhat-bugs)]

Created attachment 986045
File: cgroup

[Joachim (joachim-redhat-bugs)]

Created attachment 986046
File: core_backtrace

[Joachim (joachim-redhat-bugs)]

Created attachment 986047
File: dso_list

[Joachim (joachim-redhat-bugs)]

Created attachment 986048
File: environ

[Joachim (joachim-redhat-bugs)]

Created attachment 986049
File: exploitable

[Joachim (joachim-redhat-bugs)]

Created attachment 986050
File: limits

[Joachim (joachim-redhat-bugs)]

Created attachment 986051
File: maps

[Joachim (joachim-redhat-bugs)]

Created attachment 986052
File: open_fds

[Joachim (joachim-redhat-bugs)]

Created attachment 986053
File: proc_pid_status

[Joachim (joachim-redhat-bugs)]

Created attachment 986054
File: var_log_messages

[Jaroslav (jaroslav-redhat-bugs)]

This bug appears to have been reported against 'rawhide' during the Fedora 22 development cycle.
Changing version to '22'.

More information and reason for this action is here:
https://fedoraproject.org/wiki/Fedora_Program_Management/HouseKeeping/Fedora22

[Joachim (joachim-redhat-bugs)]

Another user experienced a similar problem:

I ran gnome-font-viewer clR9x15.pcf.

reporter: libreport-2.5.0
backtrace_rating: 4
cmdline: gnome-font-viewer clR9x15.pcf
crash_function: strlen
executable: /usr/bin/gnome-font-viewer
global_pid: 3026
kernel: 4.0.0-0.rc4.git0.1.fc22.x86_64
package: gnome-font-viewer-3.15.90-1.fc22
reason: gnome-font-viewer killed by SIGSEGV
runlevel: unknown
type: CCpp
uid: 1001

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Joachim (joachim-redhat-bugs)]

Another user experienced a similar problem:

I opened the file symbol.ttf from webcore-fonts with gnome-font-viewer.

reporter: libreport-2.5.1
backtrace_rating: 4
cmdline: gnome-font-viewer symbol.ttf
crash_function: strlen
executable: /usr/bin/gnome-font-viewer
global_pid: 9348
kernel: 4.0.1-300.fc22.x86_64
package: gnome-font-viewer-3.16.0-1.fc22
reason: gnome-font-viewer killed by SIGSEGV
runlevel: N 5
type: CCpp
uid: 1001

[Joachim (joachim-redhat-bugs)]

Issue still applies to current Fedora 22 including packages
- gnome-font-viewer-3.16.2-1.fc22
- pango-1.36.8-5.fc22

[Joachim (joachim-redhat-bugs)]

Issue still applies to the current Fedora 23 development tree including packages
- gnome-font-viewer-3.16.2-1.fc23
- pango-1.37.0-1.fc23

[Felix (felix-redhat-bugs)]

I can always reproduce this bug with a publicly available font:
- Download "Schriften [SenBJS] (zip | 85,03 KB)" from http://www.gew-berlin.de/291.php
- Try to open BLN_LOGO.TTF

[Laurent Bonnaud (laurent-bonnaud)]

This bug is still there in wily and this package version:

Package: gnome-font-viewer
Version: 3.16.2-1

[Ertan Günay (ergunay)]

It happens while trying to install "Wingding" fonts

[Laurent Bonnaud (laurent-bonnaud)]

This bug is still there in xenial in this package version:

Package: gnome-font-viewer
Version: 3.16.2-1build1

[Fedora (fedora-redhat-bugs)]

Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

[Laurent Bonnaud (laurent-bonnaud)]

This bug is finally fixed in yakkety with gnome-font-viewer 3.22.