evince crashed with SIGSEGV in pixman_image_composite32()

[salva]

That happened after changing the zoom level to "fit page width".

I can not reproduce it again.

ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: evince 3.1.2-0ubuntu1
ProcVersionSignature: Ubuntu 3.0-2.3-generic 3.0.0-rc4
Uname: Linux 3.0-2-generic x86_64
Architecture: amd64
Date: Mon Jul 4 11:30:40 2011
ExecutablePath: /usr/bin/evince
KernLog:
 Jul 4 08:40:24 topo kernel: [ 1117.181950] type=1400 audit(1309761624.507:23): apparmor="STATUS" operation="profile_replace" name="/usr/sbin/libvirtd" pid=20635 comm="apparmor_parser"
 Jul 4 08:40:24 topo kernel: [ 1117.278861] type=1400 audit(1309761624.597:24): apparmor="STATUS" operation="profile_replace" name="/usr/lib/libvirt/virt-aa-helper" pid=20637 comm="apparmor_parser"
ProcCmdline: BOOT_IMAGE=/boot/vmlinuz-3.0-2-generic root=UUID=2f993a64-3e38-497b-84d4-d9d1691e3c29 ro crashkernel=384M-2G:64M,2G-:128M quiet splash vt.handoff=7
ProcEnviron:
 LANGUAGE=en_US:en
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 LC_MESSAGES=en_US.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7fde180f6ad0: add %al,(%rax)
 PC (0x7fde180f6ad0) in non-executable VMA region: 0x7fde18000000-0x7fde19846000 rw-p None
 source "%al" ok
 destination "(%rax)" (0x00000001) not located in a known VMA region (needed writable region)!
SegvReason:
 executing writable VMA None
 writing NULL VMA
Signal: 11
SourcePackage: evince
StacktraceTop:
 ?? ()
 ?? () from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0
 pixman_image_composite32 () from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
 ?? () from /usr/lib/x86_64-linux-gnu/libcairo.so.2
Title: evince crashed with SIGSEGV in pixman_image_composite32()
UpgradeStatus: Upgraded to oneiric on 2011-06-30 (4 days ago)
UserGroups: adm admin audio cdrom dialout libvirtd lpadmin plugdev sambashare video

[Apport retracing service (apport)]

StacktraceTop:
 ?? ()
 sse2_composite_add_n_8888_8888_ca (imp=<value optimized out>, op=<value optimized out>, src_image=<value optimized out>, mask_image=0x1, dst_image=0x7fff00000000, src_x=<value optimized out>, src_y=0, mask_x=0, mask_y=0, dest_x=169, dest_y=4, width=9, height=8) at ../../pixman/pixman-sse2.c:2552
 pixman_image_composite32 (op=<value optimized out>, src=0x7fde2e420120, mask=0x7fde180f6ad0, dest=0x7fde18052840, src_x=0, src_y=0, mask_x=0, mask_y=0, dest_x=169, dest_y=4, width=9, height=8) at ../../pixman/pixman.c:780
 _cairo_image_surface_composite (op=CAIRO_OPERATOR_ADD, src_pattern=0x7fde2e420120, mask_pattern=0x7fde180f6ad0, abstract_dst=0x7fde180d6a20, src_x=0, src_y=<value optimized out>, mask_x=0, mask_y=0, dst_x=169, dst_y=4, width=9, height=8, clip_region=0x0) at /build/buildd/cairo-1.10.2/src/cairo-image-surface.c:4222
 _cairo_surface_composite (op=CAIRO_OPERATOR_ADD, src=0x7fde2a1f7e60, mask=0x7fff96717f10, dst=0x7fde180d6a20, src_x=0, src_y=0, mask_x=0, mask_y=0, dst_x=169, dst_y=4, width=9, height=8, clip_region=0x0) at /build/buildd/cairo-1.10.2/src/cairo-surface.c:1802

[Victor Vargas (kamus)]

salva, can you attach the pdf file that you used to launch this crash? I tried to reproduce it with a sample but I am not able.

[salva (sfandino)]

The attached document triggers the bug from time to time, though I have not been able to find a way to do it deterministically. Just moving around and playing with the layout options (dual size, continuous, zoom, etc.) will eventually make it happen.

[Ingo Gerth (igerth)]

This happened on my computer when searching in the PGF manual, a manual for a LaTeX package.

[userdce (userdce)]

opened multiple pdfs and this happened

[David Raymond Christiansen (david-davidchristiansen)]

This happened to me when re-generating a PDF from LaTeX that Evince already had open. The PDF in question has lots of pgf and tikz graphics. I can't reproduce it reliably.

[madbiologist (me-again)]

This should finally be fixed upstream in cairo master:

http://cgit.freedesktop.org/cairo/commit/?id=5c9fdcb4aa9c3c32fe4760586c11924dc5fb47ef

[madbiologist (me-again)]

Fixed in cairo cairo-1.14.0. Ubuntu 15.04 "Vivid Vervet" contains libcairo2 1.14.2-1ubuntu1.