Crach in Geom::Path::operator*=(Geom::Matrix const&)

Bug #521797 reported by Frédéric Rodrigo
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Inkscape
Fix Released
High
Unassigned

Bug Description

Inkscape crach when openning http://upload.wikimedia.org/wikipedia/commons/b/b1/Olympic_Rings.svg

#0 0x00007ffff19ad035 in raise () from /lib/libc.so.6
#1 0x00007ffff19ae460 in abort () from /lib/libc.so.6
#2 0x00007ffff1d9a925 in __gnu_cxx::__verbose_terminate_handler() () from /usr/lib/libstdc++.so.6
#3 0x00007ffff1d98d56 in __cxxabiv1::__terminate(void (*)()) () from /usr/lib/libstdc++.so.6
#4 0x00007ffff1d98d83 in std::terminate() () from /usr/lib/libstdc++.so.6
#5 0x00007ffff1d98e7e in __cxa_throw () from /usr/lib/libstdc++.so.6
#6 0x0000000000c1a2dc in Geom::Path::operator*=(Geom::Matrix const&) ()
#7 0x0000000000bc8f71 in Path::LoadPath(Geom::Path const&, Geom::Matrix const&, bool, bool) ()
#8 0x0000000000bc9079 in Path::LoadPathVector(std::vector<Geom::Path, std::allocator<Geom::Path> > const&, Geom::Matrix const&, bool) ()
#9 0x000000000071b278 in nr_arena_shape_update_fill(NRArenaShape*, NRGC*, NRRectL*, bool) ()
#10 0x000000000071bce3 in ?? ()
#11 0x0000000000718eaf in ?? ()
#12 0x0000000000717f2e in nr_arena_item_invoke_render(_cairo*, NRArenaItem*, NRRectL const*, NRPixBlock*, unsigned int) ()
#13 0x0000000000718f1d in ?? ()
#14 0x0000000000718341 in nr_arena_item_invoke_render(_cairo*, NRArenaItem*, NRRectL const*, NRPixBlock*, unsigned int) ()
#15 0x0000000000718f1d in ?? ()
#16 0x0000000000718341 in nr_arena_item_invoke_render(_cairo*, NRArenaItem*, NRRectL const*, NRPixBlock*, unsigned int) ()
#17 0x0000000000718f1d in ?? ()
#18 0x0000000000718341 in nr_arena_item_invoke_render(_cairo*, NRArenaItem*, NRRectL const*, NRPixBlock*, unsigned int) ()
#19 0x0000000000718f1d in ?? ()
#20 0x0000000000718341 in nr_arena_item_invoke_render(_cairo*, NRArenaItem*, NRRectL const*, NRPixBlock*, unsigned int) ()
#21 0x0000000000718f1d in ?? ()
#22 0x0000000000718341 in nr_arena_item_invoke_render(_cairo*, NRArenaItem*, NRRectL const*, NRPixBlock*, unsigned int) ()
#23 0x0000000000ad99b0 in ?? ()
#24 0x000000000073d096 in ?? ()
#25 0x000000000073d096 in ?? ()
#26 0x000000000073efc6 in ?? ()
#27 0x000000000073eb0d in ?? ()
#28 0x000000000073eb0d in ?? ()
#29 0x000000000073f596 in ?? ()
#30 0x000000000073f782 in ?? ()
#31 0x00007ffff436c26e in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#32 0x00007ffff436fc28 in g_main_context_iterate () from /usr/lib/libglib-2.0.so.0
#33 0x00007ffff4370085 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#34 0x00007ffff5bf37b7 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#35 0x000000000060b31b in sp_main_gui(int, char const**) ()
#36 0x000000000060a7d9 in main ()

Tags: 2geom crash

Related branches

Revision history for this message
Frédéric Rodrigo (f-rodrigo) wrote :

Forget version, Inkscape 0.47 on Archlinux x86_64

Revision history for this message
Alvin Penner (apenner) wrote :

Confirmed on Windows XP, Inkscape 0.47 r22583 (Nov 21 2009), exit message is:

terminate called after throwing an instance of 'Geom::ContinuityError'
  what(): lib2geom exception: Non-contiguous path (src/2geom/path.cpp:88)

- however, no crash on bzr rev 9073

Revision history for this message
su_v (suv-lp) wrote :

reproduced with Inkscape 0.47 r22583 on OS X 10.5.8
not reproduced with Inkscape 0.47+devel r9089

looks like some recent changes have fixed this, but I have no idea what causes the crash and what fixed it.

tags: added: 2geom crash
Changed in inkscape:
status: New → Confirmed
Revision history for this message
su_v (suv-lp) wrote :

console message is the same, crash log including backtrace on OS X 10.5.8 with Inkscape 0.47 r22583 attached.

Revision history for this message
Johan Engelen (johanengelen) wrote :

i vaguely remember fixing reading of rare svg strings, and some other path continuity problems. usually they stem from adding a path node with infinite coordinates.

Can we confirm that it is fixed, and mark the bug as such?

Revision history for this message
su_v (suv-lp) wrote :

not reproduced with Inkscape 0.47+devel r9104 on OS X 10.5.8

Changed in inkscape:
milestone: none → 0.48
status: Confirmed → Fix Released
Revision history for this message
su_v (suv-lp) wrote :

oops

Changed in inkscape:
status: Fix Released → Fix Committed
Changed in inkscape:
importance: Undecided → High
jazzynico (jazzynico)
Changed in inkscape:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.