qmlscene crashed with SIGSEGV in toPoint()

[Andreas Pokorny]

Steps to reproducde:

1 start the ubuntu touch notes-app
2 start editing a note or add a new note
3 hit the text field with two or more fingers

ProblemType: Crash
DistroRelease: Ubuntu 14.10
Package: qmlscene 5.3.0-3ubuntu8
Uname: Linux 3.4.0-6-manta armv7l
ApportVersion: 2.14.5-0ubuntu4
Architecture: armhf
CrashCounter: 1
CurrentDesktop: Unity
Date: Tue Aug 12 13:39:00 2014
ExecutablePath: /usr/lib/arm-linux-gnueabihf/qt5/bin/qmlscene
InstallationDate: Installed on 2014-08-10 (2 days ago)
InstallationMedia: Ubuntu Utopic Unicorn (development branch) - armhf (20140810-020204)
ProcCmdline: /usr/lib/arm-linux-gnueabihf/qt5/bin/qmlscene $@ -I ./usr/lib/arm-linux-gnueabihf/qt5/qml NotesApp.qml
Signal: 11
SourcePackage: qtdeclarative-opensource-src
StacktraceTop:
 InverseMouseAreaType::mapEventToArea(QObject*, QEvent*, QPoint&) () from /usr/lib/arm-linux-gnueabihf/qt5/qml/Ubuntu/Components/libUbuntuComponents.so
 InverseMouseAreaType::eventFilter(QObject*, QEvent*) () from /usr/lib/arm-linux-gnueabihf/qt5/qml/Ubuntu/Components/libUbuntuComponents.so
 QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*, QEvent*) () from /usr/lib/arm-linux-gnueabihf/libQt5Core.so.5
 QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /usr/lib/arm-linux-gnueabihf/libQt5Widgets.so.5
 QApplication::notify(QObject*, QEvent*) () from /usr/lib/arm-linux-gnueabihf/libQt5Widgets.so.5
Title: qmlscene crashed with SIGSEGV in InverseMouseAreaType::mapEventToArea()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm autopilot cdrom dialout dip plugdev sudo tty video

[Apport retracing service (apport)]

StacktraceTop:
 toPoint (this=0x18) at /usr/include/arm-linux-gnueabihf/qt5/QtCore/qpoint.h:391
 pos (this=0x0) at /usr/include/arm-linux-gnueabihf/qt5/QtGui/qevent.h:120
 InverseMouseAreaType::mapEventToArea (this=this@entry=0x10e08c8, target=<optimized out>, event=event@entry=0xbee1ec60, point=...) at inversemouseareatype.cpp:425
 InverseMouseAreaType::eventFilter (this=0x10e08c8, object=<optimized out>, event=0xbee1ec60) at inversemouseareatype.cpp:442
 QCoreApplicationPrivate::sendThroughObjectEventFilters (this=this@entry=0xe58fd0, receiver=receiver@entry=0x1086c68, event=event@entry=0xbee1ec60) at kernel/qcoreapplication.cpp:1031

[Timo Jyrinki (timo-jyrinki)]

I could reproduce it on mako. The crash happens in ubuntu-ui-toolkit's inversemouseareatype.cpp