xpdf.real crashed with SIGSEGV in XtWindowOfObject()

[Matthias Andree]

This happens when returning from full-screen view under KDE/Plasma.

1. open a document
2. right-click it and choose full-screen
3. press Esc twice in quick succession

 -> xpdf crashes. I tried thrice, it crashed twice.

There appears to be a race about the Esc presses, if I press Esc only once and then wait a few seconds before pressing it for the second time, xpdf survives.

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: xpdf 3.03-16+experimental2
ProcVersionSignature: Ubuntu 3.13.0-35.62-generic 3.13.11.6
Uname: Linux 3.13.0-35-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.4
Architecture: amd64
CurrentDesktop: KDE
Date: Mon Sep 22 22:31:42 2014
ExecutablePath: /usr/bin/xpdf.real
ExecutableTimestamp: 1390840781
ProcCmdline: xpdf.real Society\ of\ Sound/London\ Symphony\ Orchestra/LSO\ -\ Davis\ -\ Dvorak\ Symphony\ No\ 9\ -\ FLAC16/folder.pdf
ProcCwd: /home/mandree/Musik
SegvAnalysis:
 Segfault happened at: 0x7f27676130b4 <XtWindowOfObject+4>: testb $0x4,0x28(%rax)
 PC (0x7f27676130b4) ok
 source "$0x4" ok
 destination "0x28(%rax)" (0x4071c28ac984d153) not located in a known VMA region (needed writable region)!
SegvReason: writing unknown VMA
Signal: 11
SourcePackage: xpdf
StacktraceTop:
 XtWindowOfObject (object=0x7f276a2b6df0) at ../../src/Intrinsic.c:700
 ?? () from /usr/lib/x86_64-linux-gnu/libXm.so.4
 XtDispatchEvent (event=event@entry=0x7fff9618bca0) at ../../src/Event.c:1423
 XtAppProcessEvent (app=app@entry=0x7f276a22cb40, mask=mask@entry=15) at ../../src/NextEvent.c:1397
 XtAppMainLoop (app=0x7f276a22cb40) at ../../src/Event.c:1554
Title: xpdf.real crashed with SIGSEGV in XtWindowOfObject()
UpgradeStatus: Upgraded to trusty on 2014-08-29 (24 days ago)
UserGroups: adm admin audio cdrom dialout dip disk fax floppy fuse libvirtd lpadmin netdev plugdev pulse sambashare saned tape vboxusers video

[Matthias Andree (matthias-andree)]

Might actually be an upstream bug, because 3.04 freshly compiled also crashes:

(gdb) r
Starting program: /var/tmp/xpdf-3.04/xpdf/xpdf /home/mandree/Musik/Society\ of\ Sound/London\ Symphony\ Orchestra/LSO\ -\ Davis\ -\ Dvorak\ Symphony\ No\ 9\ -\ FLAC16/folder.pdf
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff74440b4 in XtWindowOfObject (object=0x6424e0) at ../../src/Intrinsic.c:700
700 ../../src/Intrinsic.c: Datei oder Verzeichnis nicht gefunden.
(gdb) bt full
#0 0x00007ffff74440b4 in XtWindowOfObject (object=0x6424e0) at ../../src/Intrinsic.c:700
No locals.
#1 0x00007ffff780cdd8 in ?? () from /usr/lib/x86_64-linux-gnu/libXm.so.4
No symbol table info available.
#2 0x00007ffff743d499 in XtDispatchEvent (event=event@entry=0x7fffffffd890) at ../../src/Event.c:1423
        was_dispatched = <optimized out>
        safe = <optimized out>
        dispatch_level = 1
        starting_count = 0
        pd = <optimized out>
        time = <optimized out>
        dispatch = <optimized out>
        app = 0x5ba150
#3 0x00007ffff74489be in XtAppProcessEvent (app=app@entry=0x5ba150, mask=mask@entry=15) at ../../src/NextEvent.c:1397
        i = <optimized out>
        d = 0
        event = {type = 2, xany = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418}, xkey = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, root = 707, subwindow = 0, time = 688928679, x = 896, y = 603,
            x_root = 896, y_root = 603, state = 16, keycode = 9, same_screen = 1}, xbutton = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, root = 707, subwindow = 0, time = 688928679, x = 896, y = 603, x_root = 896, y_root = 603,
            state = 16, button = 9, same_screen = 1}, xmotion = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, root = 707, subwindow = 0, time = 688928679, x = 896, y = 603, x_root = 896, y_root = 603, state = 16, is_hint = 9 '\t',
            same_screen = 1}, xcrossing = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, root = 707, subwindow = 0, time = 688928679, x = 896, y = 603, x_root = 896, y_root = 603, mode = 16, detail = 9, same_screen = 1, focus = 0,
            state = 0}, xfocus = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, mode = 707, detail = 0}, xexpose = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, x = 707, y = 0, width = 0, height = 0,
            count = 688928679}, xgraphicsexpose = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, drawable = 41943418, x = 707, y = 0, width = 0, height = 0, count = 688928679, major_code = 0, minor_code = 896}, xnoexpose = {type = 2, serial = 2368,
            send_event = 0, display = 0x5bb420, drawable = 41943418, major_code = 707, minor_code = 0}, xvisibility = {type = 2, serial = 2368, send_event = 0, display = 0x5bb420, window = 41943418, state = 707}, xcreatewindow = {type = 2, serial = 2368,
            send...

[Apport retracing service (apport)]

StacktraceTop:
 XtWindowOfObject (object=0x7f276a2b6df0) at ../../src/Intrinsic.c:700
 _XmEventDispatcher (event=0x7fff9618bca0) at Xm.c:622
 XtDispatchEvent (event=event@entry=0x7fff9618bca0) at ../../src/Event.c:1423
 XtAppProcessEvent (app=app@entry=0x7f276a22cb40, mask=mask@entry=15) at ../../src/NextEvent.c:1397
 XtAppMainLoop (app=0x7f276a22cb40) at ../../src/Event.c:1554

[Graham Inggs (ginggs)]

I don't see any private information here, marking as public.