evince crashed with SIGSEGV

[Nicholas Skaggs]

Opening this document,

http://www.eurail.com/sites/all/files/eurail.com/downloads/2012/eurail-railwaymap-2012.pdf

causes the crash when scrolling to the second page of the document:

ProblemType: Crash
DistroRelease: Ubuntu 12.10
Package: evince 3.5.90-0ubuntu2
ProcVersionSignature: Ubuntu 3.5.0-13.14-generic 3.5.3
Uname: Linux 3.5.0-13-generic x86_64
ApportVersion: 2.5.1-0ubuntu3
Architecture: amd64
CrashCounter: 1
Date: Thu Aug 30 14:42:56 2012
ExecutablePath: /usr/bin/evince
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
KernLog:

ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-3.5.0-13-generic root=UUID=12c3b175-1d70-4a6d-a247-03a07e1e28d4 ro quiet splash vt.handoff=7
SegvAnalysis:
 Segfault happened at: 0x7fc9664d8f58: cmpq $0x0,0x30(%r12)
 PC (0x7fc9664d8f58) ok
 source "$0x0" ok
 destination "0x30(%r12)" (0x00000030) not located in a known VMA region (needed writable region)!
 Stack memory exhausted (SP below stack segment)
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: evince
StacktraceTop:
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
Title: evince crashed with SIGSEGV
UpgradeStatus: Upgraded to quantal on 2012-08-17 (12 days ago)
UserGroups: sambashare sudo
---
ApportVersion: 2.9.1-0ubuntu1
Architecture: amd64
DistroRelease: Ubuntu 13.04
InstallationDate: Installed on 2012-07-13 (240 days ago)
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
KernLog:

MarkForUpload: True
Package: evince 3.6.1-1ubuntu3
PackageArchitecture: amd64
ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-3.8.0-11-generic root=UUID=12c3b175-1d70-4a6d-a247-03a07e1e28d4 ro quiet splash vt.handoff=7
ProcVersionSignature: Ubuntu 3.8.0-11.20-generic 3.8.2
Tags: raring
Uname: Linux 3.8.0-11-generic x86_64
UpgradeStatus: Upgraded to raring on 2012-11-16 (114 days ago)
UserGroups: sambashare sudo

[Apport retracing service (apport)]

StacktraceTop:
 active_edges (polygon=0x7fc9327fad10, top=11242, left=0x7fc92033a880) at /build/buildd/cairo-1.12.2/src/cairo-polygon-intersect.c:1235
 intersection_sweep (polygon=0x7fc9327fad10, num_events=<optimized out>, start_events=<optimized out>) at /build/buildd/cairo-1.12.2/src/cairo-polygon-intersect.c:1271
 _cairo_polygon_intersect (a=a@entry=0x7fc9327fad10, winding_a=winding_a@entry=0, b=b@entry=0x7fc9327fa8c0, winding_b=<optimized out>) at /build/buildd/cairo-1.12.2/src/cairo-polygon-intersect.c:1466
 clip_and_composite_polygon (antialias=CAIRO_ANTIALIAS_DEFAULT, fill_rule=CAIRO_FILL_RULE_WINDING, polygon=0x7fc9327fad10, extents=0x7fc9327fb140, compositor=0x7fc96677e020) at /build/buildd/cairo-1.12.2/src/cairo-spans-compositor.c:861
 clip_and_composite_polygon (compositor=0x7fc96677e020, extents=0x7fc9327fb140, polygon=0x7fc9327fad10, fill_rule=CAIRO_FILL_RULE_WINDING, antialias=CAIRO_ANTIALIAS_DEFAULT) at /build/buildd/cairo-1.12.2/src/cairo-spans-compositor.c:819

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Chris Wilson (ickle)]

cairo-1.12.2 is old.

[Ernie 07 (ernestboyd)]

64-bit D07-1304 3.8.0-11-generic #20-Ubuntu SMP Tue Mar 5 20:32:48 UTC
2013

Open a PDF.
Prepare to search for text by pressing Control F
CRASH!

[Nicholas Skaggs (nskaggs)]

@chris wilson -- this bug is still present on an up-to-date raring. i can give the logs for a fresh crash from today if needed ;-)

[Chris Wilson (ickle)]

Works fine for me using the cairo I released.

[Nicholas Skaggs (nskaggs)]

apport information

[Nicholas Skaggs (nskaggs)]

apport information

[Nicholas Skaggs (nskaggs)]

apport information

[Nicholas Skaggs (nskaggs)]

@chris wilson -- weird! Would you like to see a new crash report on it?

[madbiologist (me-again)]

I'm unable to reproduce this on Ubuntu 16.04 "Xenial Xerus".

evince 3.18.2-1ubuntu4
poppler 0.41.0-0ubuntu1.1
licairo2 1.14.6-1