inkscape hangs when edit/cut objects

[guy]

Hi,

I report the bug at :
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665735

I recompile trunk from launchpad and the error is still there.
If you want, i can send the file where i find this bug.

Thank you

Guy

Version: 0.48.1-2.2

$ gdb inkscape
GNU gdb (GDB) 7.4-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/inkscape...(no debugging symbols
found)...done.
(gdb) run
Starting program: /usr/bin/inkscape
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffdf804700 (LWP 17093)]
[Thread 0x7fffdf804700 (LWP 17093) exited]

Program received signal SIGSEGV, Segmentation fault.
0x0000000000c2957c in Avoid::VertInf::removeFromGraph(bool) ()
(gdb) bt
#0 0x0000000000c2957c in Avoid::VertInf::removeFromGraph(bool) ()
#1 0x0000000000c146e5 in Avoid::ConnRef::removeFromGraph() ()
#2 0x00000000006dc96e in SPConnEndPair::release() ()
#3 0x000000000070e8f8 in ?? ()
#4 0x0000000000707a39 in SPObject::releaseReferences() ()
#5 0x0000000000709215 in sp_object_detach(SPObject*, SPObject*) ()
#6 0x00000000007092d8 in ?? ()
#7 0x00000000006eea79 in ?? ()
#8 0x0000000000707a39 in SPObject::releaseReferences() ()
#9 0x0000000000709215 in sp_object_detach(SPObject*, SPObject*) ()
#10 0x00000000006f5b11 in ?? ()
#11 0x0000000000bacb5a in
Inkscape::XML::CompositeNodeObserver::notifyChildRemoved(Inkscape::XML::Node&,
Inkscape::XML::Node&, Inkscape::XML::Node*) ()
#12 0x000000000094254d in
Inkscape::XML::SimpleNode::removeChild(Inkscape::XML::Node*) ()
#13 0x0000000000709b0e in SPObject::deleteObject(bool, bool) ()
#14 0x0000000000709b27 in SPObject::deleteObject(bool, bool) ()
#15 0x00000000006b8ad0 in sp_selection_delete_impl(_GSList const*, bool,
bool) ()
#16 0x00000000006b8b64 in sp_selection_delete(SPDesktop*) ()
#17 0x0000000000832322 in sp_action_perform(SPAction*, void*) ()
#18 0x00007ffff3e3e804 in g_closure_invoke () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#19 0x00007ffff3e5078a in ?? () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#20 0x00007ffff3e59e11 in g_signal_emit_valist () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#21 0x00007ffff3e59fb2 in g_signal_emit () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#22 0x00007ffff5b5f64e in gtk_widget_activate () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#23 0x00007ffff5a5a9bd in gtk_menu_shell_activate_item () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#24 0x00007ffff5a5ad57 in ?? () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#25 0x00007ffff5a47538 in ?? () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#26 0x00007ffff3e3e804 in g_closure_invoke () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#27 0x00007ffff3e505bf in ?? () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#28 0x00007ffff3e59be3 in g_signal_emit_valist () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#29 0x00007ffff3e59fb2 in g_signal_emit () from
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#30 0x00007ffff5b60451 in ?? () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#31 0x00007ffff5a456c3 in gtk_propagate_event () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#32 0x00007ffff5a45a23 in gtk_main_do_event () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#33 0x00007ffff56b11ec in ?? () from
/usr/lib/x86_64-linux-gnu/libgdk-x11-2.0.so.0
#34 0x00007ffff356e0cf in g_main_context_dispatch () from
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#35 0x00007ffff356e8c8 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#36 0x00007ffff356ee02 in g_main_loop_run () from
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#37 0x00007ffff5a44a77 in gtk_main () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#38 0x0000000000685970 in sp_main_gui(int, char const**) ()
---Type <return> to continue, or q <return> to quit---
#39 0x000000000066ae28 in main ()
(gdb)

--- System information. ---
Architecture: amd64
Kernel: Linux 3.2.0-2-amd64

Debian Release: wheezy/sid
  500 unstable ftp.fr.debian.org
  500 stable dl.google.com
  500 stable deb.opera.com
  500 hts www.lonelycoder.com
  300 testing ftp.fr.debian.org
  150 experimental ftp.fr.debian.org

--- Package information. ---
Depends (Version) | Installed
===========================================-+-=====================
libaspell15 (>= 0.60.7~20110707) | 0.60.7~20110707-1
libatk1.0-0 (>= 1.12.4) | 2.2.0-2
libatkmm-1.6-1 (>= 2.22.1) | 2.22.6-1
libc6 (>= 2.4) | 2.13-27
libcairo2 (>= 1.7.2) | 1.10.2-7
libcairomm-1.0-1 (>= 1.6.4) | 1.10.0-1
libfontconfig1 (>= 2.8.0) | 2.8.0-3.1
libfreetype6 (>= 2.2.1) | 2.4.9-1
libgc1c2 (>= 1:7.1) | 1:7.1-8
libgcc1 (>= 1:4.1.1) | 1:4.7.0-1
libgconf2-4 (>= 2.31.1) | 3.2.3-4
libgdk-pixbuf2.0-0 (>= 2.22.0) | 2.24.1-1
libglib2.0-0 (>= 2.24.0) | 2.30.2-6
libglibmm-2.4-1c2a (>= 2.30.0) | 2.30.1-1
libgnomevfs2-0 (>= 1:2.17.90) | 1:2.24.4-1
libgomp1 (>= 4.2.1) | 4.7.0-1
libgsl0ldbl (>= 1.9) | 1.15+dfsg-1
libgtk2.0-0 (>= 2.24.0) | 2.24.10-1
libgtkmm-2.4-1c2a (>= 1:2.24.0) | 1:2.24.2-1
libgtkspell0 (>= 2.0.10) | 2.0.16-1
liblcms1 (>= 1.15-1) | 1.19.dfsg-1+b1
libmagick++4 (>= 8:6.6.9.7) | 8:6.6.9.7-6
libmagickcore4 (>= 8:6.6.9.7) | 8:6.6.9.7-6
libpango1.0-0 (>= 1.14.0) | 1.29.4-3+b1
libpangomm-1.4-1 (>= 2.27.1) | 2.28.4-1
libpng12-0 (>= 1.2.13-4) | 1.2.47-1
libpoppler-glib6 (>= 0.16) | 0.16.7-3
libpoppler13 | 0.16.7-3
libpopt0 (>= 1.14) | 1.16-3
libsigc++-2.0-0c2a (>= 2.0.2) | 2.2.10-0.1
libstdc++6 (>= 4.6) | 4.7.0-1
libwpd-0.9-9 | 0.9.4-3
libwpg-0.2-2 | 0.2.1-1
libx11-6 | 2:1.4.4-4
libxml2 (>= 2.7.4) | 2.7.8.dfsg-7
libxslt1.1 (>= 1.1.25) | 1.1.26-8
zlib1g (>= 1:1.1.4) | 1:1.2.6.dfsg-2

Recommends (Version) | Installed
==========================-+-===========
aspell | 0.60.7~20110707-1
libwmf-bin | 0.2.8.4-10
pstoedit | 3.60-2
imagemagick | 8:6.6.9.7-6
perlmagick | 8:6.6.9.7-6

Suggests (Version) | Installed
==================================-+-===========
dia |
 OR dia-gnome |
ruby | 4.8
libgnomevfs2-extra | 1:2.24.4-1
libsvg-perl |
libxml-xql-perl |
python | 2.7.2-10
python-numpy | 1:1.5.1-4
python-lxml | 2.3.2-1
python-uniconvertor |
skencil |

[jazzynico (jazzynico)]

Thanks for your report.

Could you please attach an example file so that we can try to reproduce the issue?

[guy (guy-roussin)]

To reproduce the bug :
Shift-Ctrl-L : open control Layers
Select "Connecteurs" Layer and unlock this layer
Ctrl-A : select all objects in layer "Connecteurs"
Ctrl-X : Cut

[jazzynico (jazzynico)]

Confirmed on Windows XP, Inkscape 0.48.3.1 and trunk revision 11129.
Almost the same backtrace.

[jazzynico (jazzynico)]

Reproduced with 0.48.0.
Not reproduced with 0.47.

[jazzynico (jazzynico)]

Steps to reproduce:
1. Create an object (let's say a rectangle).
2. Select the object and open the connector tool.
3. Click twice on the object's center handle to connect the object to itself.
4. Clone the object.
5. Ctrl+A, Ctrl+X, crash.

[jazzynico (jazzynico)]

Correction:
4. Select the object and the connector (Ctrl+A) and clone the selection.

[jazzynico (jazzynico)]

5.1. Ctrl+A, Ctrl+C, Ctrl+V, crash.
5.2. Ctrl+A, Del (or backspace), crash.

No problem with Ctrl+D (duplicate).

[su_v (suv-lp)]

Related: bug #837631
(AFAICT same backtrace)

[jazzynico (jazzynico)]

Same backtrace, but apparently not exactly the same cause. "Fixing" as explained in bug #837631, comment #6, doesn't fix the issue.

[Alex Valavanis (valavanisalex)]

Possible duplicate:

bug #977003 <inkscape crashed with SIGSEGV in Avoid::VertInf::removeFromGraph()>

[jazzynico (jazzynico)]

Updated gdb trace, Inkscape trunk revision 11621.

[ScislaC (scislac)]

I can't reproduce this with trunk r13527 here.

Can someone else test to see if this is fixed and is indeed a dupe of bug #977003 (per Alex's thought)? Even though this is older, that report is where the fix took place.

[su_v (suv-lp)]

Retesting with related archived trunk builds on OS X 10.7.5:
a) steps to reproduce from comment #2
b) reduced test case from JazzyNico:
   1) launch trunk (default prefs, default new doc)
   2) draw rect
   3) switch to connector tool, click twice on center connection point of the rectangle
   4) switch to select tool, Ctrl+A, Alt+D
   5) Ctrl+A, Ctrl+C, Ctrl+V

--> both test cases crash with trunk r13443, no longer crash with r13444 (the commit which fixed bug #977003).

Linking as duplicate to bug #977003 as proposed, as that fix prevents the crash reported here, too. Please add a comment here (bug #965951) and revert the duplicate status if you disagree and think this was done in error.