Activity log for bug #1452030

Date Who What changed Old value New value Message
2015-05-05 21:22:25 hmil bug added bug
2015-05-05 21:23:01 hmil description When selecting an item which has a broken gradient background inheritance chain, Inskape would crash. Repro: - Save this as weapons.svg and open it in Inkscape: http://pastebin.com/wLCrG1hh - Open the fill&stroke panel - Select the circle. Inkscape crashes Here's a trace: http://paste.debian.net/plain/171640 I also found this piece of code where the return value of chase_hrefs is not checked in getVector but is checked in all other functions using chase_hrefs... (leading to the segfault seen in the trace) http://pastebin.com/u8vea1ur Note: The "weapons.svg" file was generated by Inkscape and was not tempered by an external tool (this could be a topic for another issue if someone manages to reproduce it, I didn't). When selecting an item which has a broken gradient background inheritance chain, Inskape would crash. Repro: - Save this as weapons.svg and open it in Inkscape: http://pastebin.com/wLCrG1hh - Open the fill&stroke panel - Select the circle. Inkscape crashes Here's a trace: http://paste.debian.net/plain/171640 I also found this piece of code where the return value of chase_hrefs is not checked in getVector but is checked in all other functions using chase_hrefs... (leading to the segfault seen in the trace) (in sp-gradient.cpp) http://pastebin.com/u8vea1ur Note: The "weapons.svg" file was generated by Inkscape and was not tempered by an external tool (this could be a topic for another issue if someone manages to reproduce it, I didn't).
2015-05-05 21:29:34 hmil attachment added weapons.svg https://bugs.launchpad.net/inkscape/+bug/1452030/+attachment/4391748/+files/weapons.svg
2015-05-05 21:39:10 su_v tags crash gradient ui
2015-05-05 21:39:38 su_v description When selecting an item which has a broken gradient background inheritance chain, Inskape would crash. Repro: - Save this as weapons.svg and open it in Inkscape: http://pastebin.com/wLCrG1hh - Open the fill&stroke panel - Select the circle. Inkscape crashes Here's a trace: http://paste.debian.net/plain/171640 I also found this piece of code where the return value of chase_hrefs is not checked in getVector but is checked in all other functions using chase_hrefs... (leading to the segfault seen in the trace) (in sp-gradient.cpp) http://pastebin.com/u8vea1ur Note: The "weapons.svg" file was generated by Inkscape and was not tempered by an external tool (this could be a topic for another issue if someone manages to reproduce it, I didn't). When selecting an item which has a broken gradient background inheritance chain, Inskape would crash. Repro: - Save this as weapons.svg and open it in Inkscape: http://pastebin.com/wLCrG1hh - Open the fill&stroke panel - Select the circle. Inkscape crashes Here's a trace: http://paste.debian.net/plain/171640 I also found this piece of code where the return value of chase_hrefs is not checked in getVector but is checked in all other functions using chase_hrefs... (leading to the segfault seen in the trace) (in sp-gradient.cpp) http://pastebin.com/u8vea1ur Note: The "weapons.svg" file was generated by Inkscape and was not tempered by an external tool (this could be a topic for another issue if someone manages to reproduce it, I didn't). Inkscape Version (from file): inkscape:version="0.91 r13725"
2015-05-05 21:40:32 su_v inkscape: importance Undecided High
2015-05-05 21:40:32 su_v inkscape: status New Confirmed
2015-05-06 07:06:54 jazzynico inkscape: status Confirmed Triaged
2015-10-14 20:40:06 su_v inkscape: status Triaged Fix Committed
2015-10-14 20:40:06 su_v inkscape: milestone 0.91.1
2015-10-14 20:40:06 su_v inkscape: assignee Tavmjong Bah (tavmjong-free)
2017-01-28 20:35:31 jazzynico inkscape: status Fix Committed Fix Released
2017-01-28 20:35:31 jazzynico inkscape: milestone 0.91.1 0.92