Crash when creating group of Rectangle and Pattern

[Lars Funke]

Inkscape 0.91 on Arch Linux:
When openining the attached (valid) SVG, pressing Ctrl-A and then Ctrl-G leads to a crash.

Stacktrace:

Reading symbols from inkscape...(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/bin/inkscape
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".
[New Thread 0x7fffe8793700 (LWP 19939)]
[New Thread 0x7fffe7f92700 (LWP 19940)]
[New Thread 0x7fffe7791700 (LWP 19941)]
[New Thread 0x7fffe558b700 (LWP 19942)]
[New Thread 0x7fffe4d8a700 (LWP 19943)]
[New Thread 0x7fffdfca9700 (LWP 19944)]
inkscape: /usr/include/boost/optional/optional.hpp:1034: boost::optional<T>::pointer_const_type boost::optional<T>::operator->() const [with T = Geom::Rect; boost::optional<T>::pointer_const_type = const Geom::Rect*]: Assertion `this->is_initialized()' failed.

Thread 1 "inkscape" received signal SIGABRT, Aborted.
0x00007ffff0bc504f in raise () from /usr/lib/libc.so.6
(gdb) bt
#0 0x00007ffff0bc504f in raise () at /usr/lib/libc.so.6
#1 0x00007ffff0bc647a in abort () at /usr/lib/libc.so.6
#2 0x00007ffff0bbdea7 in __assert_fail_base () at /usr/lib/libc.so.6
#3 0x00007ffff0bbdf52 in () at /usr/lib/libc.so.6
#4 0x00000000005b024c in ()
#5 0x000000000064913b in ()
#6 0x000000000061d1f4 in ()
#7 0x0000000000619f87 in ()
#8 0x0000000000615c15 in ()
#9 0x0000000000619f87 in ()
#10 0x0000000000615c15 in ()
#11 0x0000000000619f87 in ()
#12 0x0000000000615c15 in ()
#13 0x0000000000619f87 in ()
#14 0x00000000006141d1 in ()
#15 0x00000000005ff85b in ()
#16 0x0000000000651019 in ()
#17 0x0000000000651019 in ()
#18 0x0000000000652f46 in ()
#19 0x0000000000653075 in ()
#20 0x0000000000653400 in ()
#21 0x00000000006535e8 in ()
#22 0x00000000006537f0 in ()
#23 0x00000000004b1092 in ()
#24 0x0000000000524eba in ()
#25 0x00000000007168e2 in ()
#26 0x00000000005442eb in ()
#27 0x00007ffff789f63b in () at /usr/lib/libgtkmm-2.4.so.1
#28 0x00007ffff69c97ac in () at /usr/lib/libgtk-x11-2.0.so.0
#29 0x00007ffff2040f75 in g_closure_invoke () at /usr/lib/libgobject-2.0.so.0
#30 0x00007ffff2053053 in () at /usr/lib/libgobject-2.0.so.0
#31 0x00007ffff205b66f in g_signal_emit_valist () at /usr/lib/libgobject-2.0.so.0
#32 0x00007ffff205bfaf in g_signal_emit () at /usr/lib/libgobject-2.0.so.0
#33 0x00007ffff6ae18cc in () at /usr/lib/libgtk-x11-2.0.so.0
#34 0x00007ffff6af52ff in gtk_window_propagate_key_event () at /usr/lib/libgtk-x11-2.0.so.0
#35 0x00007ffff6af7dcb in () at /usr/lib/libgtk-x11-2.0.so.0
#36 0x00007ffff69c97ac in () at /usr/lib/libgtk-x11-2.0.so.0
#37 0x00007ffff2040f75 in g_closure_invoke () at /usr/lib/libgobject-2.0.so.0
#38 0x00007ffff205337d in () at /usr/lib/libgobject-2.0.so.0
#39 0x00007ffff205b66f in g_signal_emit_valist () at /usr/lib/libgobject-2.0.so.0
#40 0x00007ffff205bfaf in g_signal_emit () at /usr/lib/libgobject-2.0.so.0
#41 0x00007ffff6ae18cc in () at /usr/lib/libgtk-x11-2.0.so.0
#42 0x00007ffff69c804f in gtk_propagate_event () at /usr/lib/libgtk-x11-2.0.so.0
#43 0x00007ffff69c832b in gtk_main_do_event () at /usr/lib/libgtk-x11-2.0.so.0
#44 0x00007ffff663f46c in () at /usr/lib/libgdk-x11-2.0.so.0
#45 0x00007ffff1d68587 in g_main_context_dispatch () at /usr/lib/libglib-2.0.so.0
#46 0x00007ffff1d687f0 in () at /usr/lib/libglib-2.0.so.0
#47 0x00007ffff1d68b12 in g_main_loop_run () at /usr/lib/libglib-2.0.so.0
#48 0x00007ffff69c73a7 in gtk_main () at /usr/lib/libgtk-x11-2.0.so.0
#49 0x000000000047376a in ()
#50 0x00007ffff0bb2291 in __libc_start_main () at /usr/lib/libc.so.6
---Type <return> to continue, or q <return> to quit---
#51 0x000000000046fcf9 in ()

[Hachmann (marenhachmann)]

Crashes when trying to show preview in file open dialog in 0.91 on Linux Mint 18 (and upon grouping). No crash (but vanishing pattern upon grouping, and no pattern origin handle anywhere to see, rotation handle exists) in 0.92pre2.

[Alvin Penner (apenner)]

no crash observed on Windows XP, Inkscape 0.92pre1 (Oct 25 2016).

  However, there is some confusion as to which is the correct image. Attached are the three images that Inkscape shows. When I first load the file, I get the top image. When I use ctrl-A and ctrl-G I get the middle image, just light blue. If I then jiggle the position a bit by using the left arrow I get the bottom image, with a linear gradient visible.

[Alvin Penner (apenner)]

    None of these images agrees with what I get from IE8 using the Adobe SVG Viewer 3.0. This is attached below. It has a pattern as well as a linear gradient. I assume this is the correct image?

[Lars Funke (fujnky)]

I tried to achieve the first of the three Inkscape variants you attached. This is what the SVG looks like for me in Firefox, but not in Inkscape (pre-grouping). Can't attach an image right now, but it's different from the IE8 rendering as well. I don't exactly know what's the "right" representation, though.

[jazzynico (jazzynico)]

Crash reproduced on Windows XP with Inkscape 0.91.

Different crash (reproduced on Windows XP and Xubuntu 16.04) with lp:inkscape/0.92.x rev. 15155 when ungrouping (grouping doesn't crash, but shows unexpected results, as explained in the previous comments).

Crash not reproduced at all with Inkscape 0.48.5.

[su_v (suv-lp)]

Also reproduced with 0.91, 0.92pre2 on OS X 10.7.5 as described by JazzyNico.

Another crash with 0.92pre2 or lp:inkscape/0.92.x:
1) launch inkscape
2) open test case
3) select the rectangle with the pattern fill
4) move it with cursor keys one tick (e.g. to the right)
5) move it with cursor keys one tick back (e.g. to the left)
--> crash

Crash also happens e.g. after adding a new layer and moving the two rectangles to the new layer.

[Nathan Lee (nathan.lee)]

Closing because fix has been committed at some point for all crashes described.

0.91.1 r13725 Win10 replicated crash on group, ungroup
0.92.0 r15299 Win10 replicated crash on ungroup, moving

0.92.4 5da689c313 2019-01-14 Win10 not replicated, any
0.92.4 (5095c1b47b, 2019-04-30) Linux Mint 19.1 not replicated, any
1.0alpha (e2c3b8f189, 2019-05-09) Linux Mint 19.1 not replicated, any

Will move the issue concerning the changing image to gitlab. Note that save and restart restores the re-renders the intended image.

Closed by: https://gitlab.com/nathanal

[Nathan Lee (nathan.lee)]

I forgot to add, but changing pattern issue tracked in https://gitlab.com/inkscape/inkscape/-/issues/781 and gradient has a bug too, possibly https://gitlab.com/inkscape/inkscape/-/issues/787