evince crashed with SIGSEGV in g_cclosure_marshal_VOID__BOXED()

Bug #418042 reported by Robert Jordens on 2009-08-24
This bug affects 7 people
Affects Status Importance Assigned to Milestone
Fix Released
evince (Ubuntu)
Ubuntu Desktop Bugs

Bug Description

Binary package hint: evince

Filling in a PDF form and scrolling around. PDF causing the crash:


ProblemType: Crash
Architecture: i386
CrashCounter: 1
Date: Mon Aug 24 11:00:11 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/evince
Package: evince 2.27.90-0ubuntu6
ProcCmdline: BOOT_IMAGE=/vmlinuz-2.6.31-6-generic root=/dev/mapper/sda6_crypt ro quiet splash
ProcVersionSignature: Ubuntu 2.6.31-6.26-generic
 Segfault happened at: 0xe377c0: fldl (%eax)
 PC (0x00e377c0) ok
 source "(%eax)" (0x00000000) not located in a known VMA region (needed readable region)!
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: evince
 ?? () from /usr/lib/libevview.so.1
 ?? () from /usr/lib/libevview.so.1
 ?? () from /usr/lib/libevview.so.1
 g_cclosure_marshal_VOID__BOXED ()
 ?? () from /usr/lib/libgobject-2.0.so.0
Title: evince crashed with SIGSEGV in g_cclosure_marshal_VOID__BOXED()
Uname: Linux 2.6.31-6-generic i686
UserGroups: adm admin audio cdrom dialout dip floppy fuse kvm libvirtd lpadmin openpcd plugdev polkituser scard thinkfinger vboxusers video

Robert Jordens (jordens) wrote :

StacktraceTop:doc_rect_to_view_rect (view=0x8acc060, page=<value optimized out>,
ev_view_get_area_from_mapping (view=0x8acc060,
ev_view_size_allocate (widget=0x8acc060,
IA__g_cclosure_marshal_VOID__BOXED (closure=0x88e0210,
g_type_class_meta_marshal (closure=0x88e0210,

Changed in evince (Ubuntu):
importance: Undecided → Medium
tags: removed: need-i386-retrace
visibility: private → public
Pedro Villavicencio (pedro) wrote :

Thanks for your bug report. This bug has been reported to the developers of the software. You can track it and make comments here: http://bugzilla.gnome.org/show_bug.cgi?id=593316

Changed in evince (Ubuntu):
assignee: nobody → Ubuntu Desktop Bugs (desktop-bugs)
status: New → Triaged
Changed in evince:
status: Unknown → New
Pedro Villavicencio (pedro) wrote :

This has been fixed upstream now, thanks for reporting!.

Changed in evince (Ubuntu):
status: Triaged → Fix Committed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package evince - 2.28.1-0ubuntu1

evince (2.28.1-0ubuntu1) karmic; urgency=low

  * New upstream release: (LP: #455690)
    - Make sure total_num_bytes > 0 before using it in progress callbacks
    - Escape document URI before showing it in progress area
      (Carlos Garcia Campos)
    - Remove progress message area when document download finishes
      (Carlos Garcia Campos)
    - Fix a crash when there are form field widgets active during
      rotation (LP: #418042) (Carlos Garcia Campos)
    - Do not try to recover invalid or unneeded files (LP: #432682)
      (Carlos Garcia Campos)
    - Translation updates

 -- Didier Roche <email address hidden> Mon, 19 Oct 2009 21:06:21 +0200

Changed in evince (Ubuntu):
status: Fix Committed → Fix Released
Changed in evince:
status: New → Fix Released
Changed in evince:
importance: Unknown → Critical
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.