Crashes when open AI file

[Steve Bradshaw]

I have an AI file (attached) When open it in GIMP, it crashes. Dump follows:

```
GNU Image Manipulation Program version 2.10.14
git-describe: GIMP_2_10_12-511-ga4f55d6c7e
C compiler:
 Using built-in specs.
 COLLECT_GCC=gcc
 COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/7/lto-wrapper
 OFFLOAD_TARGET_NAMES=nvptx-none
 OFFLOAD_TARGET_DEFAULT=1
 Target: x86_64-linux-gnu
 Configured with: ../src/configure -v --with-pkgversion='Ubuntu 7.4.0-1ubuntu1~18.04.1' --with-bugurl=file:///usr/share/doc/gcc-7/README.Bugs --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --prefix=/usr --with-gcc-major-version-only --program-suffix=-7 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --with-sysroot=/ --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-libmpx --enable-plugin --enable-default-pie --with-system-zlib --with-target-system-zlib --enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
 Thread model: posix
 gcc version 7.4.0 (Ubuntu 7.4.0-1ubuntu1~18.04.1)

using babl version 0.1.72 (compiled against version 0.1.72)
using GEGL version 0.4.18 (compiled against version 0.4.18)
using GLib version 2.56.4 (compiled against version 2.56.4)
using GdkPixbuf version 2.36.11 (compiled against version 2.36.11)
using GTK+ version 2.24.32 (compiled against version 2.24.32)
using Pango version 1.40.14 (compiled against version 1.40.14)
using Fontconfig version 2.12.6 (compiled against version 2.12.6)
using Cairo version 1.15.10 (compiled against version 1.15.10)

```
> fatal error: Segmentation fault

Stack trace:
```

# Stack traces obtained from PID 14761 - Thread 14761 #

[New LWP 14762]
[New LWP 14763]
[New LWP 14764]
[New LWP 14765]
[New LWP 14766]
[New LWP 14769]
[New LWP 14791]
[New LWP 14866]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007f6632705384 in __libc_read (fd=20, buf=0x7ffc4d491ad0, nbytes=256) at ../sysdeps/unix/sysv/linux/read.c:27
  Id Target Id Frame
* 1 Thread 0x7f6637540e00 (LWP 14761) "gimp-2.10" 0x00007f6632705384 in __libc_read (fd=20, buf=0x7ffc4d491ad0, nbytes=256) at ../sysdeps/unix/sysv/linux/read.c:27
  2 Thread 0x7f66292b0700 (LWP 14762) "worker" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  3 Thread 0x7f6628aaf700 (LWP 14763) "worker" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  4 Thread 0x7f66282ae700 (LWP 14764) "worker" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  5 Thread 0x7f6625d7a700 (LWP 14765) "gmain" 0x00007f6632417bf9 in __GI___poll (fds=0x55e973cad1b0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  6 Thread 0x7f6625579700 (LWP 14766) "gdbus" 0x00007f6632417bf9 in __GI___poll (fds=0x55e973cc3720, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  7 Thread 0x7f6602737700 (LWP 14769) "async" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  8 Thread 0x7f65fbfff700 (LWP 14791) "swap writer" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  9 Thread 0x7f6601f36700 (LWP 14866) "pool" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38

Thread 9 (Thread 0x7f6601f36700 (LWP 14866)):
#0 0x00007f663241e839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f6632f4789a in g_cond_wait_until () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f6632ed4571 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f6632f29b34 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f66326fb6db in start_thread (arg=0x7f6601f36700) at pthread_create.c:463
        pd = 0x7f6601f36700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076096120576, 1431883946895633311, 140076096116992, 0, 94461213657888, 140721605123840, -1363727320035333217, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#6 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 8 (Thread 0x7f65fbfff700 (LWP 14791)):
#0 0x00007f663241e839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f6632f4777f in g_cond_wait () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f66345b5dad in () at /usr/lib/x86_64-linux-gnu/libgegl-0.4.so.0
#3 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f66326fb6db in start_thread (arg=0x7f65fbfff700) at pthread_create.c:463
        pd = 0x7f65fbfff700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140075996280576, 1431883946895633311, 140075996276992, 0, 94461212851680, 140721605118800, -1363212847914652769, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#5 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 7 (Thread 0x7f6602737700 (LWP 14769)):
#0 0x00007f663241e839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f6632f4777f in g_cond_wait () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x000055e9717fc36c in ()
#3 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f66326fb6db in start_thread (arg=0x7f6602737700) at pthread_create.c:463
        pd = 0x7f6602737700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076104513280, 1431883946895633311, 140076104509696, 0, 94461160224544, 140721605130016, -1363721823014065249, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#5 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 6 (Thread 0x7f6625579700 (LWP 14766)):
#0 0x00007f6632417bf9 in __GI___poll (fds=0x55e973cc3720, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
#1 0x00007f6632f015c9 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f6632f01962 in g_main_loop_run () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f663408a0e6 in () at /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
#4 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f66326fb6db in start_thread (arg=0x7f6625579700) at pthread_create.c:463
        pd = 0x7f6625579700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076689889024, 1431883946895633311, 140076689885440, 0, 94461157597264, 140721605130096, -1363649007212270689, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#6 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 5 (Thread 0x7f6625d7a700 (LWP 14765)):
#0 0x00007f6632417bf9 in __GI___poll (fds=0x55e973cad1b0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
#1 0x00007f6632f015c9 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f6632f016dc in g_main_context_iteration () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f6632f01721 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f66326fb6db in start_thread (arg=0x7f6625d7a700) at pthread_create.c:463
        pd = 0x7f6625d7a700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076698281728, 1431883946895633311, 140076698278144, 0, 94461157596016, 140721605129712, -1363647908237513825, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#6 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 4 (Thread 0x7f66282ae700 (LWP 14764)):
#0 0x00007f663241e839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f6632f4777f in g_cond_wait () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f663457dfc3 in () at /usr/lib/x86_64-linux-gnu/libgegl-0.4.so.0
#3 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f66326fb6db in start_thread (arg=0x7f66282ae700) at pthread_create.c:463
        pd = 0x7f66282ae700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076737292032, 1431883946895633311, 140076737288448, 0, 94461157595296, 140721605129904, -1363673104663155809, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#5 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7f6628aaf700 (LWP 14763)):
#0 0x00007f663241e839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f6632f4777f in g_cond_wait () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f663457dfc3 in () at /usr/lib/x86_64-linux-gnu/libgegl-0.4.so.0
#3 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f66326fb6db in start_thread (arg=0x7f6628aaf700) at pthread_create.c:463
        pd = 0x7f6628aaf700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076745684736, 1431883946895633311, 140076745681152, 0, 94461157595216, 140721605129904, -1363672005688398945, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#5 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 2 (Thread 0x7f66292b0700 (LWP 14762)):
#0 0x00007f663241e839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f6632f4777f in g_cond_wait () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f663457dfc3 in () at /usr/lib/x86_64-linux-gnu/libgegl-0.4.so.0
#3 0x00007f6632f29195 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f66326fb6db in start_thread (arg=0x7f66292b0700) at pthread_create.c:463
        pd = 0x7f66292b0700
        now = <optimised out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140076754077440, 1431883946895633311, 140076754073856, 0, 94461157595136, 140721605129904, -1363675304760153185, -1363616504439346273}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimised out>
#5 0x00007f663242488f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7f6637540e00 (LWP 14761)):
#0 0x00007f6632705384 in __libc_read (fd=20, buf=0x7ffc4d491ad0, nbytes=256) at ../sysdeps/unix/sysv/linux/read.c:27
        resultvar = 18446744073709551104
        sc_cancel_oldtype = 0
        sc_ret = <optimised out>
        sc_ret = <optimised out>
        nbytes = 256
        fd = 20
        buf = 0x7ffc4d491ad0
#1 0x00007f6635b76da0 in gimp_stack_trace_print () at /usr/lib/libgimpbase-2.0.so.0
#2 0x000055e971527ab4 in ()
#3 0x000055e9715280b8 in ()
#4 0x000055e9715287c7 in ()
#5 0x00007f6632706890 in <signal handler called> () at /lib/x86_64-linux-gnu/libpthread.so.0
#6 0x000055e9718cdff2 in file_open_image ()
#7 0x000055e9718cee25 in file_open_with_proc_and_display ()
#8 0x000055e9718ceff0 in file_open_with_display ()
#9 0x000055e9717192d5 in ()
#10 0x000055e9716acae7 in ()
#11 0x000055e9716ad441 in ()
#12 0x00007f6636bb9794 in () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#13 0x00007f66331dc10d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#14 0x00007f66331ef05e in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#15 0x00007f66331f7715 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#16 0x00007f66331f8608 in g_signal_emit_by_name () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#17 0x00007f6636ce820e in () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#18 0x00007f66331dc10d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#19 0x00007f66331ef05e in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#20 0x00007f66331f7715 in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#21 0x00007f66331f8608 in g_signal_emit_by_name () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#22 0x00007f6636c182e3 in () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#23 0x00007f6636c1be49 in () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#24 0x00007f6636bb738b in () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#25 0x00007f66331dc10d in g_closure_invoke () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#26 0x00007f66331eede8 in () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#27 0x00007f66331f70af in g_signal_emit_valist () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#28 0x00007f66331f812f in g_signal_emit () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#29 0x00007f6636ccd2bc in () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#30 0x00007f6636bb5b03 in gtk_main_do_event () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#31 0x00007f663682b02c in () at /usr/lib/x86_64-linux-gnu/libgdk-x11-2.0.so.0
#32 0x00007f6632f01417 in g_main_context_dispatch () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#33 0x00007f6632f01650 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#34 0x00007f6632f01962 in g_main_loop_run () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#35 0x000055e971527470 in app_run ()
#36 0x000055e971526d3c in main ()

```