evince crashed with SIGSEGV in TextWord::TextWord()

[Beat Müller]

Binary package hint: evince

From Firefox 3.5.4 I opened successfully a first PDF document with Evince. When I tried
to open a second one it suddenly crashed when I was scrolling down. The behaviour
is reproducible.
First file: http://www.lindeweiningen.ch/pdf/Metzgete_2009.pdf
Second file: http://votecnmi.gov.mp/downloads/HLI-16-11.pdf

ProblemType: Crash
Architecture: i386
Date: Thu Nov 5 21:13:59 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/evince
NonfreeKernelModules: fglrx
Package: evince 2.28.1-0ubuntu1
ProcCmdline: root=UUID=ebfc9af2-8afd-42a4-a3f0-84fd692d8b0e ro quiet splash
ProcEnviron:
 PATH=(custom, user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
SegvAnalysis:
 Segfault happened at: 0x45a235c <_ZN8TextWordC1EP8GfxStateiddiP12TextFontInfod+44>: mov (%ecx),%ecx
 PC (0x045a235c) ok
 source "(%ecx)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%ecx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: evince
StacktraceTop:
 TextWord::TextWord(GfxState*, int, double, double, int, TextFontInfo*, double) () from /usr/lib/libpoppler.so.5
 TextPage::beginWord(GfxState*, double, double) ()
 TextPage::addChar(GfxState*, double, double, double, double, unsigned int, int, unsigned int*, int) () from /usr/lib/libpoppler.so.5
 ActualText::endMC(GfxState*) ()
 CairoOutputDev::endMarkedContent(GfxState*) ()
Title: evince crashed with SIGSEGV in TextWord::TextWord()
Uname: Linux 2.6.31-14-generic i686
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Apport retracing service (apport)]

StacktraceTop:TextWord::TextWord () from /usr/lib/libpoppler.so.5
TextPage::beginWord () from /usr/lib/libpoppler.so.5
TextPage::addChar () from /usr/lib/libpoppler.so.5
ActualText::endMC () from /usr/lib/libpoppler.so.5
CairoOutputDev::endMarkedContent ()