Bug#439591: evince: dies with "Out of memory" when zooming to 300%

[Timo Juhani Lindfors]

Package: evince
Version: 0.4.0-5
Severity: normal

Steps to reproduce:
1) wget http://www.st.cs.uni-sb.de/birthmarking/schuler-ase-2007.pdf
2) evince schuler-ase-2007.pdf
3) click "Fit Page Width" and choose "300%"

Expected results:
3) Document is zoomed by 300%

Actual results:
3) evince dies with "Out of memory".

More info:
1) Complete list of all messages evince prints to stdout and stderr:

Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Error: Bad bounding box in Type 3 glyph
Out of memory

2) The exit code of the program is 1

3) strace shows

....
3222  _llseek(14, 16384, [16384], SEEK_SET) = 0
3222  read(14, "\225$\6\6\270\25\220\26\24uV\242sz\252\227,\10\n\246`\313"..., 4096) = 4096
3222  mmap2(NULL, 2780196864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory)
3222  mmap2(NULL, 2780196864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory)
3222  mmap2(NULL, 2780327936, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory)
3222  write(2, "Out of memory\n", 14)   = 14
....

so it is trying to allocate around 2.5 gigabytes!

4) As far as I can see the same problem does not happen with evince
0.8.3-1 in debian unstable.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-k7
Locale: LANG=C, LC_CTYPE=fi_FI (charmap=ISO-8859-1)