System freezes on Perspective Path Effect

Bug #280431 reported by Karlisson
2
Affects Status Importance Assigned to Milestone
Inkscape
Confirmed
High
Unassigned

Bug Description

Hi, I'm using Ubuntu 8.04. I compiled rev 19980 and tested the Perspective Path Effect on a star object. After trying to modify the perspective with Node tool (and moving mouse around screen fastly), the entire system got frozen. I had to switch to terminal and kill Inkscape to free the system.

Here is some of the output:

*** glibc detected *** ./inkscape: double free or corruption (!prev): 0x0be357a0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb6ab2a85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb6ab64f0]
/usr/lib/libstdc++.so.6(_ZdlPv+0x21)[0xb6c96b11]
/usr/lib/libstdc++.so.6(_ZNSs4_Rep10_M_destroyERKSaIcE+0x1d)[0xb6c7279d]
/usr/lib/libstdc++.so.6(_ZNSs7reserveEj+0xa2)[0xb6c73fd2]
/usr/lib/libstdc++.so.6(_ZNSs6appendEjc+0x5f)[0xb6c740cf]
/usr/lib/libstdc++.so.6(_ZNSs6resizeEjc+0x77)[0xb6c75447]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x129)[0xb7628759]
/usr/lib/libgobject-2.0.so.0[0xb763cf8b]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x617)[0xb763e947]
/usr/lib/libgtk-x11-2.0.so.0(gtk_signal_emit+0x91)[0xb790c171]
/usr/lib/libgtk-x11-2.0.so.0[0xb78a38d4]
/usr/lib/libgobject-2.0.so.0[0xb7627079]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x129)[0xb7628759]
/usr/lib/libgobject-2.0.so.0[0xb763d11a]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x617)[0xb763e947]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb763ef69]
/usr/lib/libgtk-x11-2.0.so.0[0xb79c2667]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0xc1)[0xb789cb21]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x2b8)[0xb789dd88]
/usr/lib/libgdk-x11-2.0.so.0[0xb7716a9a]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x176)[0xb73d1dd6]
/usr/lib/libglib-2.0.so.0[0xb73d5193]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1e7)[0xb73d5577]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0xb789e264]
/usr/lib/libgtkmm-2.4.so.1(_ZN3Gtk4Main8run_implEv+0x17)[0xb7db9307]
/usr/lib/libgtkmm-2.4.so.1(_ZN3Gtk4Main3runEv+0x22)[0xb7db90f2]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb6a5d450]
======= Memory map: ========
b5d73000-b5d84000 r--p 00000000 08:02 117634112 /usr/share/fonts/truetype/ttf-bitstream-vera/Vera.ttf
b5e66000-b5eaa000 r--p 00000000 08:02 76295122 /usr/share/fonts/truetype/msttcorefonts/Arial.ttf
b600e000-b6089000 r--p 00000000 08:02 125987447 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Oblique.ttf
b618d000-b6214000 r--p 00000000 08:02 126025036 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf
b6296000-b62e2000 r--p 00000000 08:02 126025039 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b63e6000-b6477000 r--p 00000000 08:02 126025037 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b6477000-b6479000 r-xp 00000000 08:02 100774341 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b6479000-b647a000 rw-p 00001000 08:02 100774341 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b647a000-b6480000 r--s 00000000 08:02 25519011 /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2
b6480000-b6483000 r--s 00000000 08:02 25518951 /var/cache/fontconfig/e383d7ea5fbe662a33d9b44caf393297-
b64d7000-b64db000 r--s 00000000 08:04 218117440 /home/karlisson/.fontconfig/90113363c7b091b7af1eea3713dbeb52-x86.cache-2
b64db000-b64e1000 r-xp 00000000 08:02 67229630 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b64e1000-b64e2000 rw-p 00005000 08:02 67229630 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b64e2000-b6566000 rw-p b64e2000 00:00 0
b6566000-b656a000 r-xp 00000000 08:02 67229623 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b656a000-b656b000 rw-p 00003000 08:02 67229623 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b656b000-b6616000 r--p 00000000 08:02 59030061 /usr/share/icons/Tangerine/icon-theme.cache
b6616000-b661f000 r-xp 00000000 08:02 25244794 /lib/tls/i686/cmov/libnss_files-2.7.so
b661f000-b6621000 rw-p 00008000 08:02 25244794 /lib/tls/i686/cmov/libnss_files-2.7.so
b6621000-b6629000 r-xp 00000000 08:02 25244796 /lib/tls/i686/cmov/libnss_nis-2.7.so
b6629000-b662b000 rw-p 00007000 08:02 25244796 /lib/tls/i686/cmov/libnss_nis-2.7.so
b662b000-b663f000 r-xp 00000000 08:02 25244791 /lib/tls/i686/cmov/libnsl-2.7.so
b663f000-b6641000 rw-p 00013000 08:02 25244791 /lib/tls/i686/cmov/libnsl-2.7.so
b6643000-b664a000 r-xp 00000000 08:02 25244792 /lib/tls/i686/cmov/libnss_compat-2.7.so
b664a000-b664c000 rw-p 00006000 08:02 25244792 /lib/tls/i686/cmov/libnss_compat-2.7.so
b664e000-b665a000 r-xp 00000000 08:02 25219226 /usr/lib/gtk-2.0/2.10.0/engines/libindustrial.so
b665a000-b665b000 rw-p 0000c000 08:02 25219226 /usr/lib/gtk-2.0/2.10.0/engines/libindustrial.so
b665b000-b669a000 r--p 00000000 08:02 125886542 /usr/lib/locale/en_US.utf8/LC_CTYPE
b669a000-b669b000 r--p 00000000 08:02 125886547 /usr/lib/locale/en_US.utf8/LC_NUMERIC
b669b000-b669c000 r--p 00000000 08:02 125886550 /usr/lib/locale/en_US.utf8/LC_TIME
b669c000-b677d000 r--p 00000000 08:02 125886541 /usr/lib/locale/en_US.utf8/LC_COLLATE
b6780000-b6784000 r-xp 00000000 08:02 75546096 /usr/lib/libXdmcp.so.6.0.0
b6784000-b6785000 rw-p 00003000 08:02 75546096 /usr/lib/libXdmcp.so.6.0.0
b6785000-b6787000 r-xp 00000000 08:02 75546085 /usr/lib/libXau.so.6.0.0
b6787000-b6788000 rw-p 00001000 08:02 75546085 /usr/lib/libXau.so.6.0.0
b6788000-b679f000 r-xp 00000000 08:02 75983662 /usr/lib/libxcb.so.1.0.0
b679f000-b67a0000 rw-p 00016000 08:02 75983662 /usr/lib/libxcb.so.1.0.0
b67a1000-b67a2000 r-xp 00000000 08:02 75983660 /usr/lib/libxcb-xlib.so.0.0.0
b67a2000-b67a3000 rw-p 00000000 08:02 75983660 /usr/lib/libxcb-xlib.so.0.0.0
b67a3000-b67b8000 r-xp 00000000 08:02 75546049 /usr/lib/libICE.so.6.3.0

Revision history for this message
jazzynico (jazzynico) wrote :

Lots of LPE and node related bugs are now fixed.
Could you please test a recent dev version (http://sourceforge.net/projects/inkscape/files/inkscape/) and confirm you still have this bug?
Thanks!

Changed in inkscape:
importance: Undecided → High
tags: added: crash livepatheffects
Revision history for this message
jazzynico (jazzynico) wrote :

Could be a duplicate of Bug #387298 (Repeatable crash with VonKoch LPE).

jazzynico (jazzynico)
Changed in inkscape:
status: New → Incomplete
Revision history for this message
su_v (suv-lp) wrote :

Crash as reported not reproduced with current trunk: Inkscape crashes already when trying to apply the 'Perspective path' LPE:

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x0000006c
Inkscape::LivePathEffect::LPEPerspectivePath::LPEPerspectivePath (this=0x8ea8400, lpeobject=0x77d7cd8) at live_effects/lpe-perspective_path.cpp:61
61 Proj::TransfMat3x4 pmat = persp->perspective_impl->tmat;

Backtrace with Inkscape 0.48+devel r10298 on Mac OS X 10.5.8 (i386) attached.

Revision history for this message
su_v (suv-lp) wrote :

Changing status to 'Confirmed' -> experimental 'Perspective path' LPE produces crash when applied to a path.

Changed in inkscape:
status: Incomplete → Confirmed
Revision history for this message
su_v (suv-lp) wrote :

Linking as duplicate to
Bug #1068987 “LPE perspective path crashes Inkscape”
<https://bugs.launchpad.net/inkscape/+bug/1068987>

The newer report has more recent backtraces from current trunk (r11809). Any progress in fixing this (experimental) LPE can be tracked in bug #1068987.

Please revert the duplicate status if you don't agree and think these are different issues, or the newer report ought to be linked as duplicate of this one.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.