crash on ctrl-left-arrow in Evince when filling a PDF form

[John Pye]

Binary package hint: evince

When filling in a PDF form, I typed ctrl+left-arrow and Evince crashed. By running via GDB, I gained the following output:

Starting program: /usr/bin/evince /home/john/Desktop/DPInternalEoIformDP12.pdf
[Thread debugging using libthread_db enabled]
[New Thread 0xb6832b70 (LWP 13956)]
[New Thread 0xb569cb70 (LWP 13957)]

Program received signal SIGSEGV, Segmentation fault.
doc_rect_to_view_rect (view=0x849c1b0, page=<value optimised out>,
    doc_rect=0x0, view_rect=0xbfc24ce0) at ev-view.c:965
965 ev-view.c: No such file or directory.
 in ev-view.c
(gdb) where
#0 doc_rect_to_view_rect (view=0x849c1b0, page=<value optimised out>,
    doc_rect=0x0, view_rect=0xbfc24ce0) at ev-view.c:965
#1 0x00a37335 in ev_view_get_area_from_mapping (view=0x849c1b0,
    page=<value optimised out>, mapping_list=0x0, data=0x8511970,
    area=0xbfc24ce0) at ev-view.c:1149
#2 0x00a39877 in ev_view_form_field_get_region (view=0x849c1b0,
    field=<value optimised out>) at ev-view.c:1645
#3 0x00a3990f in ev_view_form_field_text_save (view=0x849c1b0,
    widget=0x860c818) at ev-view.c:1743
#4 0x0043b951 in weak_refs_notify (data=0x864eef8)
    at /build/buildd/glib2.0-2.22.3/gobject/gobject.c:1992
#5 0x005d2e83 in g_data_set_internal (datalist=0x860c820, key_id=52,
    data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.22.3/glib/gdataset.c:242
#6 IA__g_datalist_id_set_data_full (datalist=0x860c820, key_id=52, data=0x0,
    destroy_func=0) at /build/buildd/glib2.0-2.22.3/glib/gdataset.c:362
#7 0x0043bf89 in g_object_real_dispose (object=0x860c818)
    at /build/buildd/glib2.0-2.22.3/gobject/gobject.c:767
#8 0x00ba4ed1 in gtk_object_dispose (gobject=0x860c818)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkobject.c:426
#9 0x00ca6360 in gtk_widget_dispose (object=0x860c818)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwidget.c:8370
#10 0x0043c110 in IA__g_object_unref (_object=0x860c818)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.22.3/gobject/gobject.c:2441
#11 0x0045c688 in IA__g_value_unset (value=0x849b12c)
    at /build/buildd/glib2.0-2.22.3/gobject/gvalue.c:276
#12 0x00450b56 in IA__g_signal_emit_valist (instance=0x849c1b0, signal_id=85,
    detail=0, var_args=0xbfc24ff0 "HP¿0\017I")
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3009
#13 0x00450fb6 in IA__g_signal_emit (instance=0x849c1b0, signal_id=85,
    detail=0) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#14 0x00aeb9b1 in IA__gtk_container_remove (container=0x849c1b0,
    widget=0x860c818) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkcontainer.c:1233
#15 0x00a320c5 in ev_view_remove_all (view=<value optimised out>)
    at ev-view.c:3143
#16 0x00a32138 in ev_view_set_rotation (view=0x849c1b0, rotation=270)
    at ev-view.c:5225
#17 0x00a321b4 in ev_view_rotate_left (view=0x0) at ev-view.c:5212
#18 0x004479fc in IA__g_cclosure_marshal_VOID__VOID (closure=0x83c3118,
    return_value=0x0, n_param_values=1, param_values=0x85c8cc8,
    invocation_hint=0xbfc251f0, marshal_data=0x8074e10)
    at /build/buildd/glib2.0-2.22.3/gobject/gmarshal.c:77
#19 0x0043a072 in IA__g_closure_invoke (closure=0x83c3118, return_value=0x0,
    n_param_values=1, param_values=0x85c8cc8, invocation_hint=0xbfc251f0)
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:767
#20 0x0044f7a8 in signal_emit_unlocked_R (node=<value optimised out>,
---Type <return> to continue, or q <return> to quit---
    detail=<value optimised out>, instance=0x8355a60, emission_return=0x0,
    instance_and_params=0x85c8cc8)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3247
#21 0x00450b2d in IA__g_signal_emit_valist (instance=0x8355a60, signal_id=160,
    detail=0, var_args=0xbfc253ac "\304d\252")
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:2980
#22 0x00450fb6 in IA__g_signal_emit (instance=0x8355a60, signal_id=160,
    detail=0) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#23 0x00aa4ed5 in _gtk_action_emit_activate (action=0x8355a60)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaction.c:727
#24 0x00aa78c4 in closure_accel_activate (closure=0x83c3148,
    return_value=0xbfc25514, n_param_values=4, param_values=0x8523288,
    invocation_hint=0xbfc25500, marshal_data=0x0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaction.c:1647
#25 0x0043a072 in IA__g_closure_invoke (closure=0x83c3148,
    return_value=0xbfc25514, n_param_values=4, param_values=0x8523288,
    invocation_hint=0xbfc25500)
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:767
#26 0x0044f7a8 in signal_emit_unlocked_R (node=<value optimised out>,
    detail=<value optimised out>, instance=0x83aa800,
    emission_return=0xbfc2565c, instance_and_params=0x8523288)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3247
#27 0x004509b8 in IA__g_signal_emit_valist (instance=0x83aa800, signal_id=172,
---Type <return> to continue, or q <return> to quit---
    detail=1107,
    var_args=0xbfc256c8 "\334V¿\364\357", <incomplete sequence \337>)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:2990
#28 0x00450fb6 in IA__g_signal_emit (instance=0x83aa800, signal_id=172,
    detail=1107) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#29 0x00aa0ae1 in IA__gtk_accel_group_activate (accel_group=0x83aa800,
    accel_quark=1107, acceleratable=0x8393100, accel_key=65361,
    accel_mods=GDK_CONTROL_MASK)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaccelgroup.c:860
#30 0x00aa0be5 in IA__gtk_accel_groups_activate (object=0x8393100,
    accel_key=65361, accel_mods=GDK_CONTROL_MASK)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaccelgroup.c:897
#31 0x00cb3634 in IA__gtk_window_activate_key (window=0x8393100,
    event=0x84962a0) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwindow.c:8269
#32 0x00cb36bc in gtk_window_key_press_event (widget=0x8393100,
    event=0x84962a0) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwindow.c:5170
#33 0x00b7f474 in _gtk_marshal_BOOLEAN__BOXED (closure=0x8370880,
    return_value=0xbfc25974, n_param_values=2, param_values=0x84ac600,
    invocation_hint=0xbfc25960, marshal_data=0x80720d0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmarshalers.c:84
#34 0x004386f9 in g_type_class_meta_marshal (closure=0x8370880,
    return_value=0xbfc25974, n_param_values=2, param_values=0x84ac600,
    invocation_hint=0xbfc25960, marshal_data=0xcc)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:878
#35 0x0043a072 in IA__g_closure_invoke (closure=0x8370880,
    return_value=0xbfc25974, n_param_values=2, param_values=0x84ac600,
    invocation_hint=0xbfc25960)
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:767
#36 0x0044f49e in signal_emit_unlocked_R (node=<value optimised out>,
    detail=<value optimised out>, instance=0x8393100,
    emission_return=0xbfc25abc, instance_and_params=0x84ac600)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3285
#37 0x004509b8 in IA__g_signal_emit_valist (instance=0x8393100, signal_id=46,
    detail=0, var_args=0xbfc25b20 "\\[¿\364Of")
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:2990
#38 0x00450fb6 in IA__g_signal_emit (instance=0x8393100, signal_id=46,
    detail=0) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#39 0x00c9b95e in gtk_widget_event_internal (widget=<value optimised out>,
    event=0x84962a0) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwidget.c:4767
#40 0x00b77ceb in IA__gtk_propagate_event (widget=0x8393100, event=0x84962a0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:2391
#41 0x00b78ea9 in IA__gtk_main_do_event (event=0x84962a0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:1622
#42 0x002bc65a in gdk_event_dispatch (source=0x835f9d0, callback=0,
    user_data=0x0) at /build/buildd/gtk+2.0-2.18.3/gdk/x11/gdkevents-x11.c:2369
#43 0x005e7e88 in g_main_dispatch (context=0x8334060)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:1960
#44 IA__g_main_context_dispatch (context=0x8334060)
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:2513
#45 0x005eb730 in g_main_context_iterate (context=0x8334060,
    block=<value optimised out>, dispatch=1, self=0x8328050)
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:2591
#46 0x005ebb9f in IA__g_main_loop_run (loop=0x832a220)
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:2799
#47 0x00b79419 in IA__gtk_main ()
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:1218
#48 0x08080c52 in main (argc=1, argv=0xbfc25f14) at main.c:497
(gdb)

[Robert Roth (evfool)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. The issue you are reporting is an upstream one and it would be nice if somebody having it could send the bug to the developers of the software by following the instructions at https://wiki.ubuntu.com/Bugs/Upstream/GNOME. If you have done so, please tell us the number of the upstream bug (or the link), so we can add a bugwatch that will inform us about its status. Thanks in advance.