System freezes on Perspective Path Effect

[Karlisson]

Hi, I'm using Ubuntu 8.04. I compiled rev 19980 and tested the Perspective Path Effect on a star object. After trying to modify the perspective with Node tool (and moving mouse around screen fastly), the entire system got frozen. I had to switch to terminal and kill Inkscape to free the system.

Here is some of the output:

*** glibc detected *** ./inkscape: double free or corruption (!prev): 0x0be357a0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb6ab2a85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb6ab64f0]
/usr/lib/libstdc++.so.6(_ZdlPv+0x21)[0xb6c96b11]
/usr/lib/libstdc++.so.6(_ZNSs4_Rep10_M_destroyERKSaIcE+0x1d)[0xb6c7279d]
/usr/lib/libstdc++.so.6(_ZNSs7reserveEj+0xa2)[0xb6c73fd2]
/usr/lib/libstdc++.so.6(_ZNSs6appendEjc+0x5f)[0xb6c740cf]
/usr/lib/libstdc++.so.6(_ZNSs6resizeEjc+0x77)[0xb6c75447]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x129)[0xb7628759]
/usr/lib/libgobject-2.0.so.0[0xb763cf8b]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x617)[0xb763e947]
/usr/lib/libgtk-x11-2.0.so.0(gtk_signal_emit+0x91)[0xb790c171]
/usr/lib/libgtk-x11-2.0.so.0[0xb78a38d4]
/usr/lib/libgobject-2.0.so.0[0xb7627079]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x129)[0xb7628759]
/usr/lib/libgobject-2.0.so.0[0xb763d11a]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x617)[0xb763e947]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb763ef69]
/usr/lib/libgtk-x11-2.0.so.0[0xb79c2667]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0xc1)[0xb789cb21]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x2b8)[0xb789dd88]
/usr/lib/libgdk-x11-2.0.so.0[0xb7716a9a]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x176)[0xb73d1dd6]
/usr/lib/libglib-2.0.so.0[0xb73d5193]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1e7)[0xb73d5577]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0xb789e264]
/usr/lib/libgtkmm-2.4.so.1(_ZN3Gtk4Main8run_implEv+0x17)[0xb7db9307]
/usr/lib/libgtkmm-2.4.so.1(_ZN3Gtk4Main3runEv+0x22)[0xb7db90f2]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb6a5d450]
======= Memory map: ========
b5d73000-b5d84000 r--p 00000000 08:02 117634112 /usr/share/fonts/truetype/ttf-bitstream-vera/Vera.ttf
b5e66000-b5eaa000 r--p 00000000 08:02 76295122 /usr/share/fonts/truetype/msttcorefonts/Arial.ttf
b600e000-b6089000 r--p 00000000 08:02 125987447 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Oblique.ttf
b618d000-b6214000 r--p 00000000 08:02 126025036 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf
b6296000-b62e2000 r--p 00000000 08:02 126025039 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b63e6000-b6477000 r--p 00000000 08:02 126025037 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b6477000-b6479000 r-xp 00000000 08:02 100774341 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b6479000-b647a000 rw-p 00001000 08:02 100774341 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b647a000-b6480000 r--s 00000000 08:02 25519011 /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2
b6480000-b6483000 r--s 00000000 08:02 25518951 /var/cache/fontconfig/e383d7ea5fbe662a33d9b44caf393297-
b64d7000-b64db000 r--s 00000000 08:04 218117440 /home/karlisson/.fontconfig/90113363c7b091b7af1eea3713dbeb52-x86.cache-2
b64db000-b64e1000 r-xp 00000000 08:02 67229630 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b64e1000-b64e2000 rw-p 00005000 08:02 67229630 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b64e2000-b6566000 rw-p b64e2000 00:00 0
b6566000-b656a000 r-xp 00000000 08:02 67229623 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b656a000-b656b000 rw-p 00003000 08:02 67229623 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b656b000-b6616000 r--p 00000000 08:02 59030061 /usr/share/icons/Tangerine/icon-theme.cache
b6616000-b661f000 r-xp 00000000 08:02 25244794 /lib/tls/i686/cmov/libnss_files-2.7.so
b661f000-b6621000 rw-p 00008000 08:02 25244794 /lib/tls/i686/cmov/libnss_files-2.7.so
b6621000-b6629000 r-xp 00000000 08:02 25244796 /lib/tls/i686/cmov/libnss_nis-2.7.so
b6629000-b662b000 rw-p 00007000 08:02 25244796 /lib/tls/i686/cmov/libnss_nis-2.7.so
b662b000-b663f000 r-xp 00000000 08:02 25244791 /lib/tls/i686/cmov/libnsl-2.7.so
b663f000-b6641000 rw-p 00013000 08:02 25244791 /lib/tls/i686/cmov/libnsl-2.7.so
b6643000-b664a000 r-xp 00000000 08:02 25244792 /lib/tls/i686/cmov/libnss_compat-2.7.so
b664a000-b664c000 rw-p 00006000 08:02 25244792 /lib/tls/i686/cmov/libnss_compat-2.7.so
b664e000-b665a000 r-xp 00000000 08:02 25219226 /usr/lib/gtk-2.0/2.10.0/engines/libindustrial.so
b665a000-b665b000 rw-p 0000c000 08:02 25219226 /usr/lib/gtk-2.0/2.10.0/engines/libindustrial.so
b665b000-b669a000 r--p 00000000 08:02 125886542 /usr/lib/locale/en_US.utf8/LC_CTYPE
b669a000-b669b000 r--p 00000000 08:02 125886547 /usr/lib/locale/en_US.utf8/LC_NUMERIC
b669b000-b669c000 r--p 00000000 08:02 125886550 /usr/lib/locale/en_US.utf8/LC_TIME
b669c000-b677d000 r--p 00000000 08:02 125886541 /usr/lib/locale/en_US.utf8/LC_COLLATE
b6780000-b6784000 r-xp 00000000 08:02 75546096 /usr/lib/libXdmcp.so.6.0.0
b6784000-b6785000 rw-p 00003000 08:02 75546096 /usr/lib/libXdmcp.so.6.0.0
b6785000-b6787000 r-xp 00000000 08:02 75546085 /usr/lib/libXau.so.6.0.0
b6787000-b6788000 rw-p 00001000 08:02 75546085 /usr/lib/libXau.so.6.0.0
b6788000-b679f000 r-xp 00000000 08:02 75983662 /usr/lib/libxcb.so.1.0.0
b679f000-b67a0000 rw-p 00016000 08:02 75983662 /usr/lib/libxcb.so.1.0.0
b67a1000-b67a2000 r-xp 00000000 08:02 75983660 /usr/lib/libxcb-xlib.so.0.0.0
b67a2000-b67a3000 rw-p 00000000 08:02 75983660 /usr/lib/libxcb-xlib.so.0.0.0
b67a3000-b67b8000 r-xp 00000000 08:02 75546049 /usr/lib/libICE.so.6.3.0

[jazzynico (jazzynico)]

Lots of LPE and node related bugs are now fixed.
Could you please test a recent dev version (http://sourceforge.net/projects/inkscape/files/inkscape/) and confirm you still have this bug?
Thanks!

[jazzynico (jazzynico)]

Could be a duplicate of Bug #387298 (Repeatable crash with VonKoch LPE).

[su_v (suv-lp)]

Crash as reported not reproduced with current trunk: Inkscape crashes already when trying to apply the 'Perspective path' LPE:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x0000006c
Inkscape::LivePathEffect::LPEPerspectivePath::LPEPerspectivePath (this=0x8ea8400, lpeobject=0x77d7cd8) at live_effects/lpe-perspective_path.cpp:61
61 Proj::TransfMat3x4 pmat = persp->perspective_impl->tmat;

Backtrace with Inkscape 0.48+devel r10298 on Mac OS X 10.5.8 (i386) attached.

[su_v (suv-lp)]

Changing status to 'Confirmed' -> experimental 'Perspective path' LPE produces crash when applied to a path.

[su_v (suv-lp)]

Linking as duplicate to
Bug #1068987 “LPE perspective path crashes Inkscape”
<https://bugs.launchpad.net/inkscape/+bug/1068987>

The newer report has more recent backtraces from current trunk (r11809). Any progress in fixing this (experimental) LPE can be tracked in bug #1068987.

Please revert the duplicate status if you don't agree and think these are different issues, or the newer report ought to be linked as duplicate of this one.