evince crashed with SIGSEGV in Object::free()

[Oliver Gerlich]

Binary package hint: evince

I opened the user manual supplied with my Toshiba laptop; evince opened and showed the initial page, but crashed then before I could do anything. The PDF file is located on the Vista (NTFS) partition; but copying it onto the Gutsy desktop doesn't prevent the crash either.

When running "evince Desktop/SPR6L45GR0.pdf" in terminal, it prints this:

Error (3388071): Unknown compression method in flate stream
Segmentation fault (core dumped)

The crash doesn't happen always like this. I have now tried it again, and evince started correctly (except that it printed that "Unknown compression method" error again; but when I maximized the evince window, it again crashed.

Then, starting it for a third time gives an immediate crash again, this time with much more terminal output:

Error (3388340): Illegal character <2f> in hex string
Error (3388340): Illegal character <50> in hex string
Error (3388340): Illegal character <72> in hex string
Error (3388344): Illegal character <52> in hex string
Error: Unterminated hex string
Error: End of file inside array
Error: End of file inside dictionary
Error (3388801): Unexpected end of file in flate stream
Error (3235503): Unexpected end of file in flate stream
Error: failed to load truetype font

some font thing failed
Segmentation fault (core dumped)

The crash info that I have submitted is from the first crash.

ProblemType: Crash
Architecture: i386
Date: Thu Dec 6 00:57:47 2007
DistroRelease: Ubuntu 7.10
ExecutablePath: /usr/bin/evince
NonfreeKernelModules: cdrom
Package: evince 2.20.0-0ubuntu3
PackageArchitecture: i386
ProcCmdline: evince file:///media/Vista/Program%20Files/TOSHIBA/Manuals/SPR6L45GR0.pdf
ProcCwd: /home/ursula
ProcEnviron:
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: evince
StacktraceTop:
 Object::free () from /usr/lib/libpoppler.so.2
 compare () from /usr/lib/libpoppler.so.2
 XRef::constructXRef () from /usr/lib/libpoppler.so.2
 ?? () from /usr/lib/libpoppler.so.2
 ?? ()
Title: evince crashed with SIGSEGV in Object::free()
Uname: Linux peterchen-laptop 2.6.22-14-generic #1 SMP Sun Oct 14 23:05:12 GMT 2007 i686 GNU/Linux
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin netdev plugdev powerdev scanner video

[Apport retracing service (apport)]

StacktraceTop:?? () from /lib/ld-linux.so.2
?? ()
?? ()
?? ()
?? ()

[Oliver Gerlich (ogerlich)]

The PDF file states that I'm not allowed to transfer it over the internet without consent of the author. Also I didn't find exactly this file (SPR6L45GR0.pdf) on the Toshiba homepage; but I found this similar user manual on the web which also makes evince crash sometimes:
http://www.manualnguide.com/download/manual-guide/toshiba-equium-l40-users-manual.html

Also I found a PDF very similar to the original one on the Toshiba homepage, at
http://support.toshiba-tro.de/tedd-files2/0/userman-20070719163413.zip . This PDF also makes evince crash immediately.
(if the link breaks, go to http://de.computers.toshiba-europe.com/cgi-bin/ToshibaCSG/download_manuals.jsp and search for the german manual for Satellite L40 Notebooks).

[Koen (koen-beek)]

Confirmed

Linux Dell_ubuntu 2.6.22-14-generic #1 SMP Sun Oct 14 21:45:15 GMT 2007 x86_64 GNU/Linux
evince 2.20.1-0ubuntu1 Document (postscript, pdf) viewer

first time I opened it it worked OK
second time I opened it crashed, thirs time it crashed with a different error message, ...

console output :

koen@Dell_ubuntu:~$ evince SPR6L40GR0.pdf (first try : worked OK - could paginate till end of pdf file)
cairo context error: NULL pointer
cairo context error: NULL pointer
koen@Dell_ubuntu:~$ evince SPR6L40GR0.pdf (second try : crash)
Error: End of file inside array
Error: End of file inside array
Error: End of file inside dictionary
Error (3559207): Bad block header in flate stream
Segmentation fault (core dumped)
koen@Dell_ubuntu:~$ evince SPR6L40GR0.pdf (third try : different error)
Error (72551): Unexpected end of file in flate stream
cairo context error: NULL pointer

(evince:20193): GLib-GObject-CRITICAL **: g_object_unref: assertion `G_IS_OBJECT (object)' failed
koen@Dell_ubuntu:~$ evince SPR6L40GR0.pdf (fourth try : anothe error)
Error (3559022): Illegal character '>'
Error (3559034): Illegal character '}'
Error (3559068): Illegal character <7e> in hex string
Error (194567): Bad dynamic code table in flate stream
Error (194567): Bad block header in flate stream
Error (3559069): Illegal character <f4> in hex string
Error (3559070): Illegal character <54> in hex string
Error (3559071): Illegal character <97> in hex string
Error (3559073): Illegal character <dc> in hex string
Error: failed to load truetype font

Error (3559074): some font thing failed
Illegal character <10> in hex string
Error (3559075): Illegal character <52> in hex string
Error (3559076): Illegal character <22> in hex string
Error (3559077): Illegal character <21> in hex string
Error (3559078): Illegal character <69> in hex string
Error (3559079): Illegal character <a3> in hex string
Error (3559080): Illegal character <1d> in hex string

[Koen (koen-beek)]

This is the pdf file I used

[Koen (koen-beek)]

This is a backtrace

[Pedro Villavicencio (pedro)]

Thanks for the bug report. This particular bug has already been reported into our bug tracking system, but please feel free to report any further bugs you find.