evince crashed with SIGSEGV in __libc_free()

[Michael Terry]

Binary package hint: evince

I closed a pdf window and got this.

ProblemType: Crash
DistroRelease: Ubuntu 11.04
Package: evince 2.32.0-0ubuntu8
ProcVersionSignature: Ubuntu 2.6.38-1.28-generic 2.6.38-rc2
Uname: Linux 2.6.38-1-generic x86_64
Architecture: amd64
CrashCounter: 1
Date: Wed Feb 2 15:14:01 2011
ExecutablePath: /usr/bin/evince
ProcCmdline: evince /home/username/.cache/evolution/tmp/evolution-username-POFufg/page\ 3\ final_Layout\ 1.pdf
ProcCmdline_: BOOT_IMAGE=/boot/vmlinuz-2.6.38-1-generic root=UUID=625ed789-1cb3-4081-9c7e-f812810b5126 ro quiet splash vt.handoff=7
ProcEnviron:
 SHELL=/bin/bash
 LC_MESSAGES=en_US.utf8
 PATH=(custom, user)
 LANGUAGE=en_US:en
 LANG=en_GB.utf8
ProcVersionSignature_: Ubuntu 2.6.38-1.28-generic 2.6.38-rc2
SegvAnalysis:
 Segfault happened at: 0x7fbc8bc440fd <__libc_free+29>: mov -0x8(%rdi),%rsi
 PC (0x7fbc8bc440fd) ok
 source "-0x8(%rdi)" (0xfffffffffffffff9) not located in a known VMA region (needed readable region)!
 destination "%rsi" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: evince
StacktraceTop:
 __libc_free (mem=0x1) at malloc.c:3709
 ev_document_info_free () from /usr/lib/libevdocument.so.3
 ?? () from /usr/lib/libevdocument.so.3
 g_object_unref (_object=0x7fbc9069dcc0) at /build/buildd/glib2.0-2.27.93/gobject/gobject.c:2734
 ?? () from /usr/lib/libevview.so.3
Title: evince crashed with SIGSEGV in __libc_free()
UserGroups: adm admin cdrom dialout dip fax floppy fuse lpadmin plugdev sambashare tape video

[Apport retracing service (apport)]

StacktraceTop:
 *__GI___libc_free (mem=0x1) at arena.c:275
 ev_document_info_free (info=0x7fbc906fe2a0)
 ev_document_finalize (object=0x7fbc9069dcc0)
 g_object_unref (_object=0x7fbc9069dcc0)
 ?? ()

[Sebastien Bacher (seb128)]

Confirming due to the duplicates, would be worth running evince under valgrind to see if there is anything showing there

[Sebastien Bacher (seb128)]

seems similar to bug #708404 which has a patch waiting for sponsoring

[Sebastien Bacher (seb128)]

(the issue is due to the fact that poppler got updated but evince is still on the 2.32 serie)

[penalvch (penalvch)]

As per https://bugs.launchpad.net/ubuntu/+source/evince/+bug/712100/comments/7 .