Inkscape crashes when image x is NaN

Bug #1735733 reported by Philipp Hagemeister on 2017-12-01
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Inkscape
Medium
Unassigned

Bug Description

When opening the file https://phihag.de/2017/inkscape-crash.svg , which is simply

<?xml version="1.0"?>
<svg xmlns="http://www.w3.org/2000/svg">
  <image height="1" width="1" x="NaN"/>
</svg>

Inkscape 0.92.2 (5c3e80d, 2017-08-06) from debian sid crashes with the following backtrace:

#0 0x00007fffed890a70 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1 0x00007fffed89219a in __GI_abort () at abort.c:89
#2 0x00007fffedc91b85 in __gnu_cxx::__verbose_terminate_handler() () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#3 0x00007fffedc8f956 in () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#4 0x00007fffedc8f9a1 in () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#5 0x00007fffedc8fbe4 in () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#6 0x00007ffff77378a9 in Geom::Path::do_append(Geom::Curve*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#7 0x00007ffff6edf0d1 in SPCurve::lineto(Geom::Point const&) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#8 0x00007ffff6edf1da in SPCurve::new_from_rect(Geom::Rect const&, bool) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#9 0x00007ffff75b670b in SPImage::set(unsigned int, char const*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#10 0x00007ffff75b639c in SPImage::build(SPDocument*, Inkscape::XML::Node*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#11 0x00007ffff75dfd43 in SPObject::invoke_build(SPDocument*, Inkscape::XML::Node*, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#12 0x00007ffff75e1c2c in SPObject::build(SPDocument*, Inkscape::XML::Node*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#13 0x00007ffff75ee856 in SPRoot::build(SPDocument*, Inkscape::XML::Node*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#14 0x00007ffff75dfd43 in SPObject::invoke_build(SPDocument*, Inkscape::XML::Node*, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#15 0x00007ffff74c8b88 in SPDocument::createDoc(Inkscape::XML::Document*, char const*, char const*, char const*, unsigned int, SPDocument*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#16 0x00007ffff74c9993 in SPDocument::createNewDoc(char const*, unsigned int, bool, SPDocument*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#17 0x00007ffff6f41c58 in Inkscape::Extension::Input::open(char const*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#18 0x00007ffff6f44b09 in Inkscape::Extension::open(Inkscape::Extension::Extension*, char const*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#19 0x00007ffff74d5dd8 in sp_file_open(Glib::ustring const&, Inkscape::Extension::Extension*, bool, bool) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#20 0x000055555555cc0f in sp_main_gui(int, char const**) ()
#21 0x00007fffed87d561 in __libc_start_main (main=0x55555555a860 <main>, argc=2, argv=0x7fffffffe4e8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe4d8) at ../csu/libc-start.c:297
#22 0x000055555555adca in _start ()

Alvin Penner (apenner) wrote :

confirmed on Windows 10, Inkscape 0.92.2 (5c3e80d, 2017-08-06)

DOS error message is:

C:\Program Files (x86)\Inkscape>inkscape
terminate called after throwing an instance of 'Geom::ContinuityError'
  what(): lib2geom exception: Non-contiguous path (../src/2geom/path.cpp:1043)

Emergency save activated!
Emergency save completed. Inkscape will close now.
If you can reproduce this crash, please file a bug at www.inkscape.org
with a detailed description of the steps leading to the crash, so we can fix it.
**
ERROR:../src/sp-namedview.cpp:1080:SPNamedView* sp_document_namedview(SPDocument*, const gchar*): assertion failed: (nv != NULL)

Changed in inkscape:
status: New → Confirmed
Qantas94Heavy (qantas94heavy) wrote :
Changed in inkscape:
status: Confirmed → Fix Released
Qantas94Heavy (qantas94heavy) wrote :
Changed in inkscape:
milestone: none → 0.92.4
importance: Undecided → Medium
tbnorth (terry-n-brown) on 2019-11-29
tags: added: bug-migration
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers