evince-thumbnailer crashed with SIGSEGV in DCTStream::reset()

[Srik]

Binary package hint: evince

After i created a new pdf file, i had this crash and no preview

ProblemType: Crash
Architecture: i386
DistroRelease: Ubuntu 9.04
ExecutablePath: /usr/bin/evince-thumbnailer
Package: evince 2.26.1-0ubuntu1
ProcCmdline: evince-thumbnailer -s 128 file:///home/username/MyDownloads/Farmaceutica2-2x2.pdf /tmp/.gnome_desktop_thumbnail.K83UXU
ProcEnviron:
 LANG=it_IT.UTF-8
 SHELL=/bin/bash
Signal: 11
SourcePackage: evince
StacktraceTop:
 ?? () from /usr/lib/libjpeg.so.62
 DCTStream::reset () from /usr/lib/libpoppler.so.4
 ImageStream::reset () from /usr/lib/libpoppler.so.4
 CairoOutputDev::drawImage ()
 Gfx::doImage () from /usr/lib/libpoppler.so.4
Title: evince-thumbnailer crashed with SIGSEGV in DCTStream::reset()
Uname: Linux 2.6.28-13-generic i686
UserGroups: adm admin audio cdrom dialout dip fax fuse lpadmin netdev plugdev sambashare scanner tape video

[Apport retracing service (apport)]

StacktraceTop:output_pass_setup (cinfo=0x877a980) at ./jdapistd.c:99
DCTStream::reset (this=0x877a970) at DCTStream.cc:144
ImageStream::reset (this=0x8735f50) at Stream.cc:415
CairoOutputDev::drawImage (this=0x869ba50, state=0x877a230,
Gfx::doImage (this=0x8725670, ref=0xbf88a7d8,

[Pedro Villavicencio (pedro)]

Thanks for the report, may you please attach the /home/username/MyDownloads/Farmaceutica2-2x2.pdf file to the report? Thanks.

[Pedro Villavicencio (pedro)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to New. Thanks again!.

[smpahlman (sauli-pahlman)]

I was about to report a crash which seems a duplicate of this one. As the bug was marked as invalid because of a missing attachment, I am attaching a PDF which causes the same crash.

[Victor Vargas (kamus)]

I can't open this file because is damaged (tried with evince and adobe-reader), log file said:
Error: PDF file is damaged - attempting to reconstruct xref table...

[Pedro Villavicencio (pedro)]

May you please attach it again? is this still an issue for you?

[smpahlman (sauli-pahlman)]

This does not seem like a security issue, so fixing this is not that critical. Here's however, a minimal reproducer for the issue. Makes evince to segfault when opened.

[Pedro Villavicencio (pedro)]

this report has been filed here:

https://bugs.edge.launchpad.net/ubuntu/+source/poppler/+bug/406826

the linked pdf makes evince to crash in a poppler function:

http://launchpadlibrarian.net/51041044/sample.pdf.gz

backtrace:

"0x1c91244c in output_pass_setup (cinfo=0x225d024c) at ./jdapistd.c:99
99 ./jdapistd.c: No such file or directory.
 in ./jdapistd.c
#0 0x1c91244c in output_pass_setup (cinfo=0x225d024c) at ./jdapistd.c:99
#1 0x18ddcb00 in DCTStream::reset (this=0x225d0238) at DCTStream.cc:145
#2 0x18e5d033 in Object::streamReset (this=0x225cff68, xrefA=0x22564df8,
    obj=0xb5cff0e4) at Object.h:328
#3 Lexer (this=0x225cff68, xrefA=0x22564df8, obj=0xb5cff0e4) at Lexer.cc:99
#4 0x18e1b860 in Gfx::display (this=0x225fe268, obj=0xb5cff0e4, topLevel=1)
    at Gfx.cc:639
#5 0x18e68bd0 in Page::displaySlice (this=0x225657f8, out=0x22566600, hDPI=72,
    vDPI=72, rotate=0, useMediaBox=0, crop=1, sliceX=-1, sliceY=-1, sliceW=-1,
    sliceH=-1, printing=0, catalog=0x22564ef8, abortCheckCbk=0, abortCheckCbkData=0x0,
    annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:474
#6 0x1cca1ab1 in _poppler_page_render (page=0x225726a0, cairo=0x22579e98, printing=0)
    at poppler-page.cc:560
#7 0x00b75fb9 in pdf_page_render (document=0x2251c6d8, rc=0x225726c0)
    at ev-poppler.cc:402
#8 pdf_document_render (document=0x2251c6d8, rc=0x225726c0) at ev-poppler.cc:452
#9 0x0059e1d8 in ev_document_render () from /usr/lib/libevdocument.so.2
#10 0x00d1a4a1 in ev_job_render_run (job=0x224c7510) at ev-jobs.c:491
#11 0x00d173e1 in ev_job_run (job=0x224c7510) at ev-jobs.c:210
#12 0x00d1afc8 in ev_job_thread (data=0x0) at ev-job-scheduler.c:183
#13 ev_job_thread_proxy (data=0x0) at ev-job-scheduler.c:213
#14 0x00c80def in g_thread_create_proxy (data=0x22583fd0)
    at /build/buildd/glib2.0-2.24.1/glib/gthread.c:1893
#15 0x0022596e in start_thread (arg=0xb5cffb70) at pthread_create.c:300
#16 0x1a313a4e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 8 (Thread 0xb34fab70 (LWP 8699)):
#0 clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:111
No locals.
#1 0x003d0f00 in matchlet_match (matchlet=<value optimized out>,
    root=<value optimized out>) at /build/buildd/glib2.0-2.24.1/gio/gcontenttype.c:1608
        file = 0x13b031
        info = <value optimized out>
        result = <value optimized out>
        attrs = <value optimized out>
        l = <value optimized out>
#2 0x225b72a0 in ?? ()
No symbol table info available.
Backtrace stopped: previous frame inner to this frame (corrupt stack?)

Thread 7 (Thread 0xb3cfbb70 (LWP 8698)):
#0 0x001ef422 in __kernel_vsyscall ()
No symbol table info available.
#1 0x0022a342 in pthread_cond_timedwait@@GLIBC_2.3.2 ()
    at ../nptl/sysdeps/unix/sysv/linux/i386/i686/../i486/pthread_cond_timedwait.S:179
No locals.
#2 0x007610ce in g_cond_timed_wait_posix_impl (cond=0xfffffdfc, entered_mutex=0xc,
    abs_time=0xb3cfb298) at /build/buildd/glib2.0-2.24.1/gthread/gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1277913811, tv_nsec = 612032000}
        timed_out = <value optimized out>
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_p...

[Albert Astals Cid (aacid)]

Are you using poppler 0.14.0? Works perfectly here

[Pedro Villavicencio (pedro)]

confirming, thanks for attaching the new document. reassigning to poppler.

[Pedro Villavicencio (pedro)]

Thank you for your bug report. This bug has been reported to the developers of the software. You can track it and make comments at:
 https://bugs.freedesktop.org/show_bug.cgi?id=28853

[Pedro Villavicencio (pedro)]

Could you test with latest poppler on Natty? seems to work fine here.

[madbiologist (me-again)]

Unable to reproduce here on Ubuntu 14.04 "Trusty Tahr" either. Official support for Jaunty and Natty has ended. Can we close this bug?