Inkscape crashes when opening large images

[David Hugo]

Using inkscape-trunk from inkscape ppa on ubuntu 16.04

Able to reproduce: always
Steps to reproduce:
  1. Open this file https://drive.google.com/file/d/0B4jQXMkiOx3tSkhTeV9rM3NTU2c/view (830Mb)
  2. Zoom in

During the entire time the canvas appears white even though an image is loaded. Memory usage will climb about 7Gb or so in the process.

Backtrace:

Thread 1 "inkscape" received signal SIGSEGV, Segmentation fault.
0x00007ffff6ee1b5b in Inkscape::DrawingImage::_pickItem(Geom::Point const&, double, unsigned int) () from /usr/bin/../lib/inkscape/libinkscape_base.so
(gdb) bt
#0 0x00007ffff6ee1b5b in Inkscape::DrawingImage::_pickItem(Geom::Point const&, double, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#1 0x00007ffff6ee05ed in Inkscape::DrawingGroup::_pickItem(Geom::Point const&, double, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#2 0x00007ffff6ee05ed in Inkscape::DrawingGroup::_pickItem(Geom::Point const&, double, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#3 0x00007ffff6ec8330 in () at /usr/bin/../lib/inkscape/libinkscape_base.so
#4 0x00007ffff6f1de16 in SPCanvasGroup::point(SPCanvasItem*, Geom::Point, SPCanvasItem**) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#5 0x00007ffff6f1de16 in SPCanvasGroup::point(SPCanvasItem*, Geom::Point, SPCanvasItem**) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#6 0x00007ffff6f1ea17 in SPCanvas::pickCurrentItem(_GdkEvent*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#7 0x00007ffff6f1ed08 in SPCanvas::handle_motion(_GtkWidget*, _GdkEventMotion*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#8 0x00007ffff4dbcfac in () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#12 0x00007ffff300908f in <emit signal ??? on instance 0x555557e74130 [SPCanvas]> (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>)
    at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./gobject/gsignal.c:3441
    #9 0x00007ffff2fedfa5 in g_closure_invoke (closure=closure@entry=0x55555589ad00, return_value=return_value@entry=0x7fffffffdd70, n_param_values=2, param_values=param_values@entry=0x7fffffffddd0, invocation_hint=invocation_hint@entry=0x7fffffffdd50) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./gobject/gclosure.c:804
    #10 0x00007ffff300056e in signal_emit_unlocked_R (node=node@entry=0x55555589ad30, detail=detail@entry=0, instance=instance@entry=0x555557e74130, emission_return=emission_return@entry=0x7fffffffdee0, instance_and_params=instance_and_params@entry=0x7fffffffddd0) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./gobject/gsignal.c:3667
    #11 0x00007ffff30087f9 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffdf90)
    at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./gobject/gsignal.c:3395
#13 0x00007ffff4efac5c in () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#14 0x00007ffff4dba3be in () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#15 0x00007ffff4dbc1bc in gtk_main_do_event () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#16 0x00007ffff4929ca2 in () at /usr/lib/x86_64-linux-gnu/libgdk-3.so.0
#17 0x00007ffff65eb1a7 in g_main_context_dispatch (context=0x55555588ac50) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3154
#18 0x00007ffff65eb1a7 in g_main_context_dispatch (context=context@entry=0x55555588ac50) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3769
#19 0x00007ffff65eb400 in g_main_context_iterate (context=0x55555588ac50, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
    at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3840
#20 0x00007ffff65eb722 in g_main_loop_run (loop=0x555558f4e340) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:4034
#21 0x00007ffff4dbb395 in gtk_main () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#22 0x000055555555b8f0 in sp_main_gui(int, char const**) ()
#23 0x00007ffff3dea830 in __libc_start_main (main=
    0x555555559930 <main>, argc=1, argv=0x7fffffffe468, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe458)
    at ../csu/libc-start.c:291
#24 0x0000555555559e69 in _start ()
(gdb)

[rcspam (rcspam)]

I confirme this bug is always present in last inkscape-trunk (2018/04/02),

I work on big background maps (19000x26000 px), with ten layers in which there are hundred of objects and paths...
A zoom (with crtl+mouse wheel) on a little part near the border or in the border of the page, inkscape crash, sometimes with no secutity save file...
Is there an expected solution. this bug happened for me since 0.91 and still present.
Thanks.

(ubuntu 16.04/unity/ppa inskape devel team)

[rcspam (rcspam)]

This bug happened assurely when i zoom about the right bottom corner, or if i move an object in this region with at a high magnification... I hope this bug really fix soon because it is very handicapping...

Here is the dbg trace:
-------------------------------
.
.
.
[New Thread 0x7fffd49d6700 (LWP 19389)]
[New Thread 0x7fffcbfff700 (LWP 19391)]
[Thread 0x7fffd49d6700 (LWP 19389) exited]
[Thread 0x7fffcbfff700 (LWP 19391) exited]
[New Thread 0x7fffcbfff700 (LWP 21286)]
[Thread 0x7fffcbfff700 (LWP 21286) exited]

Thread 1 "inkscape" received signal SIGSEGV, Segmentation fault.
0x00007fffea5ac773 in ?? () from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0
(gdb) bt
#0 0x00007fffea5ac773 in ?? () from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0
#1 0x00007fffea5c1e5c in ?? () from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0
#2 0x00007fffea57df81 in pixman_image_composite32 () from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0
#3 0x00007ffff34a4505 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#4 0x00007ffff34d364b in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#5 0x00007ffff34d4a02 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#6 0x00007ffff34dbb4b in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#7 0x00007ffff34dc814 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#8 0x00007ffff34dd0ae in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#9 0x00007ffff34dd3c9 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#10 0x00007ffff3497779 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#11 0x00007ffff34e02b1 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#12 0x00007ffff349f825 in ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#13 0x00007ffff34920f5 in cairo_paint () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
#14 0x00007ffff6f02606 in Inkscape::DrawingImage::_renderItem(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () from /usr/bin/../lib/inkscape/libinkscape_base.so
#15 0x00007ffff6f06368 in Inkscape::DrawingItem::render(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () from /usr/bin/../lib/inkscape/libinkscape_base.so
#16 0x00007ffff6f01bd5 in Inkscape::DrawingGroup::_renderItem(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () from /usr/bin/../lib/inkscape/libinkscape_base.so
#17 0x00007ffff6f06368 in Inkscape::DrawingItem::render(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () from /usr/bin/../lib/inkscape/libinkscape_base.so
#18 0x00007ffff6f01bd5 in Inkscape::DrawingGroup::_renderItem(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () from /usr/bin/../lib/inkscape/libinkscape_base.so
#19 0x00007ffff6f0668c in Inkscape::DrawingItem::render(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () from /usr/bin/../lib/inkscape/libinkscape_base.so
#20 0x00007ffff6f01bd5 in Inkscape::DrawingGroup::_renderItem(Inkscape::DrawingContext&, Geom::GenericRect<int> const&, unsigned int, Inkscape::DrawingItem*) () fro...