Crash when ungrouping connectors

[Bug Importer]

create 3 objects, connect two of them and then mark the
3rd so that the connectors avoid it. Group the 3
objects, then ungroup - crash.

Inkscape crashes with error:
"Inkscape encounted an internal error and will close
now. Automatic backups of unsaved..."

Inkscape 0.44 Windows XP

reproducible 9 out of 10 times

tomh

[Zeimusu-users (zeimusu-users)]

I can confirm this crash in recent SVG build. Here's a back
trace

Program received signal SIGSEGV, Segmentation fault.
sp_item_update (object=0x3ebd678, ctx=0x22d8c0, flags=2) at
uri-references.h:74
74 SPObject *getObject() const { return _obj; }
(gdb) bt
#0 sp_item_update (object=0x3ebd678, ctx=0x22d8c0, flags=2)
    at uri-references.h:74
#1 0x0044cdae in sp_group_update (object=0x3ebd678,
ctx=0x22d8c0, flags=2)
    at sp-item-group.cpp:184
#2 0x00422c74 in SPObject::updateDisplay (this=0x3ebd678,
ctx=0x22d8c0,
    flags=0) at sp-object.cpp:1232
#3 0x0044d9b9 in CGroup::onUpdate (this=0x2c39390,
ctx=0x22da40, flags=2)
    at sp-item-group.cpp:624
#4 0x0044cd8f in sp_group_update (object=0x3190030,
ctx=0x22da40, flags=2)
    at sp-item-group.cpp:61
#5 0x00422c74 in SPObject::updateDisplay (this=0x3190030,
ctx=0x22da40,
    flags=0) at sp-object.cpp:1232
#6 0x0044d9b9 in CGroup::onUpdate (this=0x2c2c3c0,
ctx=0x22dc80, flags=2)
    at sp-item-group.cpp:624
#7 0x0044cd8f in sp_group_update (object=0x318b078,
ctx=0x22dc80, flags=2)
    at sp-item-group.cpp:61
#8 0x00414fc0 in sp_root_update (object=0x318b078,
ctx=0x22dda0, flags=2)
    at sp-root.cpp:545
#9 0x00422c74 in SPObject::updateDisplay (this=0x318b078,
ctx=0x22dda0,
    flags=0) at sp-object.cpp:1232
#10 0x0040f3c6 in sp_document_ensure_up_to_date (doc=0x34b8fa0)
    at document.cpp:763
#11 0x00602597 in sp_conn_end_move_compensate
(mp=<incomplete type>,
    moved_item=0x0, path=0x3ebe808, updatePathRepr=true) at
sp-conn-end.cpp:44
#12 0x00604791 in emitPathInvalidationNotification
(ptr=0x3ebe808)
    at
c:/mingw/bin/../lib/gcc/mingw32/3.4.4/../../../../include/c++/3.4.4/bits/
stl_list.h:216
#13 0x0045c21a in Avoid::Router::delShape (this=0x2c2db50,
shape=0x6a31980)
    at
c:/mingw/bin/../lib/gcc/mingw32/3.4.4/../../../../include/c++/3.4.4/bits/
stl_list.h:131
#14 0x004921a5 in SPAvoidRef::~SPAvoidRef (this=0x6d8d540)
    at conn-avoid-ref.cpp:52
#15 0x00416d98 in sp_item_release (object=0x3ebf968) at
sp-item.cpp:419
#16 0x00423ecf in SPObject::releaseReferences (this=0x3ebf968)
    at sp-object.cpp:857
#17 0x00425298 in sp_object_detach (parent=0x3ebd678,
object=0x3ebf968)
    at sp-object.cpp:642
#18 0x004253ec in sp_object_release (object=0x3ebd678) at
sp-object.cpp:723
#19 0x00416d8e in sp_item_release (object=0x3ebd678) at
sp-item.cpp:424
#20 0x0044ca36 in sp_group_release (object=0x3ebd678) at
sp-item-group.cpp:136
#21 0x00423ecf in SPObject::releaseReferences (this=0x3ebd678)
    at sp-object.cpp:857
#22 0x00425298 in sp_object_detach (parent=0x3190030,
object=0x3ebd678)
    at sp-object.cpp:642
#23 0x0044cba2 in sp_group_remove_child (object=0x3190030,
child=0x69269b4)
    at sp-item-group.cpp:166
#24 0x00421bcd in sp_object_repr_child_removed (repr=0x34b74d4,
    child=0x69269b4, ref=0x0, data=0x3190030) at
sp-object.cpp:909
#25 0x004b6193 in
Inkscape::XML::CompositeNodeObserver::notifyChildRemoved (
    this=0x34b74b4, node=@0x34b74d4, child=@0x69269b4, prev=0x0)
    at ./util/list.h:134
#26 0x0049405f in Inkscape::XML::SimpleNode::removeChild
(this=0x34b7480,
    child=0x69269b4) at xml/simple-node.cpp:445
#27 0x004263b9 in SPObject::deleteObject (this...

[Buliabyak-users (buliabyak-users)]

Confirmed, assigning to Michael

[Bryce Harrington (bryce)]

Originator: NO

Is this still occurring? How severe is it? Any ideas on attaining a
solution to it?

[Bug Importer (bug-importer)]

This error still occurs. In fact it occurs also when a group used as one
of the shapes which the connector connects, is ungrouped (or this is
attempted as the system crashes before the action is completed).

[Buliabyak-users (buliabyak-users)]

Originator: NO

Michael,

just today my 8 y.o. daughter got this crash :( She loves to draw in
Inkscape and tries out all the tools. She even lost some work with the
crash (although I told her to save often).

It's pretty embarrassing when your child manages to crash your program :)

Could you please look into fixing this ASAP? Best of all, for 0.45.1?

Thanks!

[Michael Wybrow (mjwybrow)]

Originator: NO

Could someone please confirm whether they see this bug in current SVN? I
fixed a related bug with connectors and groups earlier today, and I can't
reproduce this one. (I see weird routing after grouping, but no crash)

[Buliabyak-users (buliabyak-users)]

Originator: NO

confirm fixed, thanks

indeed routing changes after grouping but that's a different bug :)