inkscape crashed with SIGSEGV in sp_ctrlpoint_set_color()

Bug #1275164 reported by Sandra Karuving on 2014-02-01
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Inkscape
High
Unassigned
inkscape (Ubuntu)
Medium
Unassigned

Bug Description

it happens sometimes right after the "clean empty devs" > save > Remove a horizontal guide line

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: inkscape 0.48.4-3ubuntu2
ProcVersionSignature: Ubuntu 3.13.0-6.23-generic 3.13.0
Uname: Linux 3.13.0-6-generic x86_64
ApportVersion: 2.13.2-0ubuntu2
Architecture: amd64
CurrentDesktop: KDE
Date: Sat Feb 1 01:42:37 2014
ExecutablePath: /usr/bin/inkscape
InstallationDate: Installed on 2013-12-12 (50 days ago)
InstallationMedia: Kubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
ProcCmdline: /usr/bin/inkscape
ProcEnviron:
 LANGUAGE=de:en
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x74cb51 <_Z22sp_ctrlpoint_set_colorP11SPCtrlPointj+33>: cmp (%rdx),%rax
 PC (0x0074cb51) ok
 source "(%rdx)" (0xffffffffffffffff) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: inkscape
StacktraceTop:
 sp_ctrlpoint_set_color(SPCtrlPoint*, unsigned int) ()
 sp_guideline_set_color(SPGuideLine*, unsigned int) ()
 sp_dt_guide_event(SPCanvasItem*, _GdkEvent*, void*) ()
 sp_marshal_BOOLEAN__POINTER ()
 g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: inkscape crashed with SIGSEGV in sp_ctrlpoint_set_color()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom debian-tor dip lpadmin plugdev sambashare sudo

Sandra Karuving (lumks) wrote :

StacktraceTop:
 sp_ctrlpoint_set_color (cp=0x9802430, rgba=272) at display/sp-ctrlpoint.cpp:143
 sp_guideline_set_color (gl=0x9c192a0, rgba=<optimized out>) at display/guideline.cpp:264
 sp_dt_guide_event (item=0x9c192a0, event=0x8e25670, data=<optimized out>) at desktop-events.cpp:419
 sp_marshal_BOOLEAN__POINTER (closure=0x96f4670, return_value=0x7fffb1768420, n_param_values=<optimized out>, param_values=0x7fffb1768350, invocation_hint=<optimized out>, marshal_data=0x0) at helper/sp-marshal.cpp:124
 ?? ()

Changed in inkscape (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
information type: Private → Public
tags: added: crash guides
jazzynico (jazzynico) wrote :

Related or duplicate of Bug #1255791 "r12830, drag deleting a guide causes a crash"?

jazzynico (jazzynico) on 2014-06-24
Changed in inkscape:
importance: Undecided → High
Johan Engelen (johanengelen) wrote :

how to reproduce in trunk?

Changed in inkscape:
status: New → Incomplete
Kris (kris-degussem) wrote :

The only thing I could think if is a NULL check on line 143 for item->canvas.
But if this would be the case, is not there a more important underlying issue?

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers