Instant crash when trying to move svg symbol

[Joakim Berglund]

Steps to reproduce:
1. Run Inkscape 0.92.0 r15299
2. Open attached file
3. Drag the symbol from the symbol toolbar to the canvas
4. Try to move the symbol on the canvas => Crash

[su_v (suv-lp)]

Based on tests with archived builds (on OS X 10.7.5):
- not reproduced with Inkscape 0.91 r13725,
- not reproduced with lp:inkscape rev <= 14831,
- reproduced with lp:inkscape rev >= 14835,
- reproduced with Inkscape 0.92.0 r15299,
- reproduced with lp:inkscape/0.92.x r15355;
the reported issue possibly was exposed by changes in commits to address "invalid state when picking" warnings. (#Hackfest2016, r14832-14835)
https://bazaar.launchpad.net/~inkscape.dev/inkscape/trunk/changes/14835

Full backtrace attached (done with default new prefs, and a somewhat dated but equally affected debug build (r15036)).

[su_v (suv-lp)]

The content of the symbol does not trigger the crash, as tested with attached modified version of the test case (<symbol/> replaced with <g/>, viewBox attribute moved to root <svg/> element): the group can be moved without triggering the crash.

[jazzynico (jazzynico)]

Also reproduced on Windows XP (32-bit), lp:inkscape/0.92.x rev. 15364.

[jazzynico (jazzynico)]

Patch attached. Please test!

[su_v (suv-lp)]

Patch tested successfully with lp:inkscape/0.92.x r15364 on OS X 10.7.5.

[su_v (suv-lp)]

On Ubuntu 14.04.5 LTS:
- crash reproduced with lp:inkscape r15496, lp:inkscape/0.92.x r15364
- patch tested successfully lp:inkscape r15497, lp:inkscape/0.92.x r15364

[jazzynico (jazzynico)]

Fixed in lp:inkscape rev. 15498.
Thanks for your tests!

[su_v (suv-lp)]

Likely duplicate earlier report:
* Bug #1612989 “Crash on drag and drop”
  https://bugs.launchpad.net/inkscape/+bug/1612989

(cf STR, backtraces).

[jazzynico (jazzynico)]

Fixed in lp:inkscape/0.92.x rev. 15384.