SVN: multiple instances - gradient tool crash

[Vladimir Savic]

Steps to reproduce:
- Start Inkscape
- Hit Create new document...
- In second instance draw rectangle
- Switch to Gradient tool
- Draw radial fill gradiend
- Select center gradient stop (a little square)
- Close that second instance (Close without saving)

(gdb) run
Starting program: /usr/local/bin/inkscape
[Thread debugging using libthread_db enabled]
[New Thread 0x7f026498b790 (LWP 21800)]

** (inkscape:21800): WARNING **: Family name Bitstream Vera Sans does not have an entry in the font lister.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f026498b790 (LWP 21800)]
Inkscape::Selection::itemList (this=0x0) at selection.cpp:318
318 if (_items) {

(gdb) bt
#0 Inkscape::Selection::itemList (this=0x0) at selection.cpp:318
#1 0x000000000089cac5 in sp_desktop_query_style (desktop=0x4498c00, style=0x530c200, property=1) at desktop-style.cpp:1327
#2 0x000000000084e4a1 in Inkscape::UI::Widget::SelectedStyle::update (this=0x4c5e0a0) at ui/widget/selected-style.cpp:921
#3 0x0000000000893b22 in SPDesktop::emitToolSubselectionChanged (this=0x4498c00, data=0x0) at /usr/include/sigc++-2.0/sigc++/signal.h:1006
#4 0x000000000046873c in ~GrDragger (this=0x535efb0) at gradient-drag.cpp:1333
#5 0x000000000046bde6 in ~GrDrag (this=0x4b3e0f0) at gradient-drag.cpp:476
#6 0x000000000045e0af in SPEventContext::enableGrDrag (this=0x2f1b430, enable=248) at event-context.cpp:842
#7 0x00000000008c9ac4 in sp_gradient_context_dispose (object=0x2f1b430) at gradient-context.cpp:117
#8 0x00007f02608d4ff2 in g_object_unref () from /usr/lib/libgobject-2.0.so.0
#9 0x0000000000891e98 in SPDesktop::destroy (this=0x4498c00) at desktop.cpp:367
#10 0x00000000006c779f in sp_desktop_widget_destroy (object=0x3ddda20) at widgets/desktop-widget.cpp:580
#11 0x00007f02608d311f in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#12 0x00007f02608e8b65 in ?? () from /usr/lib/libgobject-2.0.so.0
#13 0x00007f02608e9d07 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#14 0x00007f02608ea1f3 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#15 0x00007f0262373480 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#16 0x00007f02608d5470 in g_object_run_dispose () from /usr/lib/libgobject-2.0.so.0
#17 0x00007f02622cf719 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#18 0x00007f02608d31cd in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#19 0x00007f02608e8b65 in ?? () from /usr/lib/libgobject-2.0.so.0
#20 0x00007f02608e9d07 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#21 0x00007f02608ea1f3 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#22 0x00007f0262373480 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#23 0x00007f02608d5470 in g_object_run_dispose () from /usr/lib/libgobject-2.0.so.0
#24 0x00007f02644a804e in Gtk::Window::~Window () from /usr/lib/libgtkmm-2.4.so.1
#25 0x00000000006cbbfa in SPDesktopWidget::WidgetStub::destroy (this=0x4b3e430) at widgets/desktop-widget.h:157
#26 0x000000000088f2cb in SPDesktop::onDeleteUI (this=0x4498c00) at desktop.cpp:1332
#27 0x00007f026449b942 in ?? () from /usr/lib/libgtkmm-2.4.so.1
#28 0x00007f0262351158 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#29 0x00007f02608d31cd in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#30 0x00007f02608e8cab in ?? () from /usr/lib/libgobject-2.0.so.0
#31 0x00007f02608e9b9d in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#32 0x00007f02608ea1f3 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#33 0x00007f0262452e76 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#34 0x00007f026234b129 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#35 0x00007f0261fca9ac in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#36 0x00007f026000a7c1 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#37 0x00007f026000dde0 in ?? () from /usr/lib/libglib-2.0.so.0
#38 0x00007f026000e2a5 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#39 0x00007f026234b317 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#40 0x0000000000452d69 in sp_main_gui (argc=1, argv=0x7fff6c9d66d8) at main.cpp:943
#41 0x000000000045231e in main (argc=1, argv=0x7fff6c9d66d8) at main.cpp:679
(gdb)

[Alvin Penner (apenner)]

confirmed on Win32 revision 21345

[jazzynico (jazzynico)]

Confirmed on Ubuntu 9.04, Inkscape rev. 21447. Works well with 0.46.

Inkscape also crash :
whichever gradient handle is selected (providing that the gradient tool is active);
with a linear gradient;
when you use the first instance instead of the second one to draw your rectangle.

[Diederik van Lierop (mail-diedenrezi)]

Great catch, and thanks for your excellent bug report.

I think I've just fixed this (as of rev. #21506). Please test and confirm!

[jazzynico (jazzynico)]

Fix confirmed on Ubuntu 9.04. Thanks!