pdftotext crashed with SIGSEGV in Form::findWidgetByRef()

[Leonard Michlmayr]

While running an update with update-manager, aport reported this problem.

ProblemType: Crash
Architecture: amd64
DistroRelease: Ubuntu 8.10
ExecutablePath: /usr/bin/pdftotext
NonfreeKernelModules: nvidia
Package: poppler-utils 0.8.5-1
ProcAttrCurrent: unconfined
ProcCmdline: pdftotext -q -nopgbrk -enc UTF-8 /usr/share/doc/texlive-latex-extra-doc/latex/interactiveworkbook/samplefiles/check.pdf -
ProcEnviron:
 SHELL=/bin/bash
 LC_NUMERIC=en_US.UTF-8
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=de_AT.UTF-8
 LANGUAGE=de_AT:de
Signal: 11
SourcePackage: poppler
StacktraceTop:
 Form::findWidgetByRef ()
 AnnotWidget::initialize ()
 AnnotWidget::AnnotWidget ()
 Annots::createAnnot () from /usr/lib/libpoppler.so.3
 Annots::Annots () from /usr/lib/libpoppler.so.3
Title: pdftotext crashed with SIGSEGV in Form::findWidgetByRef()
Uname: Linux 2.6.26-5-generic x86_64
UserGroups:

[Apport retracing service (apport)]

StacktraceTop:AnnotWidget::initialize (this=0x1013570, xrefA=<value optimized out>,
AnnotWidget (this=0x1013570, xrefA=0x100c640, dict=0x10105f0, catalog=0x100c6e0,
Annots::createAnnot (this=<value optimized out>, xref=0x100c640, dict=0x10105f0,
Annots (this=0x100c7d0, xref=0x100c640, catalog=0x100c6e0,
Page::displaySlice (this=0x100cda0, out=0x1011110, hDPI=72, vDPI=72,

[Pedro Villavicencio (pedro)]

this report has been filed here:

https://bugs.edge.launchpad.net/ubuntu/+source/poppler/+bug/258500

the crash was caused by this command:

pdftotext -q -nopgbrk -enc UTF-8 /usr/share/doc/texlive-latex-extra-doc/latex/interactiveworkbook/samplefiles/check.pdf -

Trace as follow:

".
Thread 1 (process 31041):
#0 Form::findWidgetByRef (this=0x0, aref={num = 64, gen = 0}) at Form.cc:1231
 i = 0
#1 0x00007f161f32bd37 in AnnotWidget::initialize (this=0x1013570, xrefA=<value optimized out>,
    catalog=0x100c6e0, dict=0x10105f0) at Annot.cc:1734
 obj1 = {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0,
    dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}
#2 0x00007f161f32bff0 in AnnotWidget (this=0x1013570, xrefA=0x100c640, dict=0x10105f0, catalog=0x100c6e0,
    obj=<value optimized out>) at Annot.cc:1713
No locals.
#3 0x00007f161f32e162 in Annots::createAnnot (this=<value optimized out>, xref=0x100c640, dict=0x10105f0,
    catalog=0x100c6e0, obj=0x7fff27899080) at Annot.cc:3393
 typeName = <value optimized out>
 annot = <value optimized out>
 obj1 = {type = objName, {booln = 16852416, intg = 16852416, real = 8.3261997950253567e-317,
    string = 0x10125c0, name = 0x10125c0 "Widget", array = 0x10125c0, dict = 0x10125c0, stream = 0x10125c0,
    ref = {num = 16852416, gen = 0}, cmd = 0x10125c0 "Widget"}}
#4 0x00007f161f32e418 in Annots (this=0x100c7d0, xref=0x100c640, catalog=0x100c6e0,
    annotsObj=0x7fff27899140) at Annot.cc:3332
No locals.
#5 0x00007f161f390e71 in Page::displaySlice (this=0x100cda0, out=0x1011110, hDPI=72, vDPI=72,
    rotate=<value optimized out>, useMediaBox=<value optimized out>, crop=<value optimized out>,
    sliceX=<value optimized out>, sliceY=-1, sliceW=-1, sliceH=-1, printing=0, catalog=0x100c6e0,
    abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0)
    at Page.cc:421
 gfx = (Gfx *) 0x10122b0
 obj = {type = objArray, {booln = 16846192, intg = 16846192, real = 8.3231247304456408e-317,
    string = 0x1010d70, name = 0x1010d70 "@Æ", array = 0x1010d70, dict = 0x1010d70, stream = 0x1010d70,
    ref = {num = 16846192, gen = 0}, cmd = 0x1010d70 "@Æ"}}
 annotList = <value optimized out>
 i = <value optimized out>
#6 0x00007f161f390fed in Page::display (this=0x0, out=0x40, hDPI=760, vDPI=760, rotate=16828128,
    useMediaBox=16844272, crop=16827968, printing=<value optimized out>, catalog=0x100c6e0, abortCheckCbk=0,
    abortCheckCbkData=0x0, annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:344
No locals.
#7 0x00007f161f394742 in PDFDoc::displayPages (this=0x100c240, out=0x1011110,
    firstPage=<value optimized out>, lastPage=3, hDPI=72, vDPI=72, rotate=0, useMediaBox=1, crop=0,
    printing=0, abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
    annotDisplayDecideCbkData=0x0) at PDFDoc.cc:388
 page = 2
#8 0x0000000000401ff2 in main (argc=3, argv=<value optimized out>) at pdftotext.cc:248
 doc = (PDFDoc *) 0x100c240
 fileName = <value optimized out>
 textFileName = <value optimized out>
 ownerPW = <value optimized out>
 userPW = <value optimized out>
 textOut = (class Te...

[Albert Astals Cid (aacid)]

Will be fixed in next poppler version

[Pedro Villavicencio (pedro)]

Thanks for your bug report. This bug has been reported to the developers of the software. You can track it and make comments here: https://bugs.freedesktop.org/show_bug.cgi?id=17451

[Pedro Villavicencio (pedro)]

fixed upstream, thanks for reporting.

[Sebastien Bacher (seb128)]

the new version has been uploaded to jaunty now