Bug#442955: evince: segfaults when jumping to a page in a specific DjVu file

Fri Apr 4 10:10:33 UTC 2008

On Thu, Apr 03, 2008 at 11:14:26PM +0200, Sven Arvidsson wrote:
> On Mon, 2008-01-14 at 20:03 +0100, Lionel Elie Mamane wrote:

>> I still get the problem with libdjvulibre15 3.5.20-2 and evince
>> 2.20.2-1.

> Can you give it a try again with evince 2.22 from experimental and
> libdjvulibre15 3.5.20-4.?

The version in experimental is uninstallable, as libdjvulibre15
3.5.20-4 is nowhere to be found (neither lenny, nor sid, nor
experimental).

I recompiled evince 2.22 against libdjvulibre21 3.5.20-6, still
crashes; I assumed this would be an even better test; if not, tell me
and I'll fish libdjvulibre15 3.5.20-4 out of snapshot.debian.net .

Here's the crash info under gdb:

LD_LIBRARY_PATH=/usr/lib/debug/:/usr/lib/debug/lib/:/usr/lib/debug/usr/lib/ gdb evince
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) run SCH-A562engRev11.pdf.djvu
Starting program: /usr/bin/evince SCH-A562engRev11.pdf.djvu
[Thread debugging using libthread_db enabled]
[New Thread 0x2b1ba3851620 (LWP 7434)]
[New Thread 0x40800950 (LWP 7437)]
[New Thread 0x41001950 (LWP 7438)]
[Thread 0x41001950 (LWP 7438) exited]
[New Thread 0x41001950 (LWP 7439)]
[New Thread 0x41802950 (LWP 7440)]
[Thread 0x41802950 (LWP 7440) exited]
[Thread 0x41001950 (LWP 7439) exited]
[New Thread 0x41001950 (LWP 7441)]
[Thread 0x41001950 (LWP 7441) exited]
[New Thread 0x41001950 (LWP 7442)]
[Thread 0x41001950 (LWP 7442) exited]

(evince:7434): GLib-CRITICAL **: g_utf8_casefold: assertion `str != NULL' failed

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x2b1ba3851620 (LWP 7434)]
0x00002b1b9eb20899 in *__GI_strstr (phaystack=<value optimized out>, pneedle=0xec5b00 "6") at strstr.c:60
60	strstr.c: No such file or directory.
	in strstr.c
(gdb) thread apply all bt full

Thread 2 (Thread 0x40800950 (LWP 7437)):
#0  0x00002b1b9e899889 in pthread_cond_wait@@GLIBC_2.3.2 () from /usr/lib/debug/libpthread.so.0
No locals.
#1  0x000000000041dfb4 in ev_render_thread (data=<value optimized out>) at /home/master/src/evince/evince-2.22.0/./shell/ev-job-queue.c:256
	job = (EvJob *) 0x9b1a40
#2  0x00002b1b9e630ac4 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#3  0x00002b1b9e895017 in start_thread (arg=<value optimized out>) at pthread_create.c:297
	__res = <value optimized out>
	pd = (struct pthread *) 0x40800950
	unwind_buf = {cancel_jmp_buf = {{jmp_buf = {1082132816, 1247598938778369579, 47397623910224, 140733486918112, 140733486918112, 4096, 1247740775799324203, 
        5145188359386431019}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
	not_first_call = 0
	robust = <value optimized out>
#4  0x00002b1b9eb6f5bd in clone () from /usr/lib/debug/libc.so.6
	fstab_state = {fs_fp = 0x0, fs_buffer = 0x0, fs_mntres = {mnt_fsname = 0x0, mnt_dir = 0x0, mnt_type = 0x0, mnt_opts = 0x0, mnt_freq = 0, mnt_passno = 0}, fs_ret = {
    fs_spec = 0x0, fs_file = 0x0, fs_vfstype = 0x0, fs_mntops = 0x0, fs_type = 0x0, fs_freq = 0, fs_passno = 0}}
	__elf_set___libc_subfreeres_element_fstab_free__ = (const void *) 0x2b1b9eba2ce0
#5  0x0000000000000000 in ?? ()
No symbol table info available.

Thread 1 (Thread 0x2b1ba3851620 (LWP 7434)):
#0  0x00002b1b9eb20899 in *__GI_strstr (phaystack=<value optimized out>, pneedle=0xec5b00 "6") at strstr.c:60
	c = <value optimized out>
	haystack = (const unsigned char *) 0x0
	needle = <value optimized out>
	b = 54
#1  0x00000000004242f0 in match_completion (completion=<value optimized out>, key=<value optimized out>, filter_iter=<value optimized out>, proxy=<value optimized out>)
    at /home/master/src/evince/evince-2.22.0/./shell/ev-page-action-widget.c:192
	normalized_text = <value optimized out>
	case_normalized_text = (gchar *) 0x0
	retval = 0
	normalized_key = <value optimized out>
	case_normalized_key = (gchar *) 0xec5b00 "6"
	link = (EvLink *) 0x9b2ef0
	iter = (GtkTreeIter *) 0xec2480
	text = <value optimized out>
#2  0x00002b1b9bdee2c6 in gtk_entry_completion_visible_func (model=<value optimized out>, iter=0x7fff117ee720, data=<value optimized out>)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkentrycompletion.c:818
	ret = 0
	completion = (GtkEntryCompletion *) 0x9a1530
#3  0x00002b1b9bf2eaec in gtk_tree_model_filter_visible (filter=<value optimized out>, child_iter=0xec5b00) at /build/buildd/gtk+2.0-2.12.9/gtk/gtktreemodelfilter.c:749
No locals.
#4  0x00002b1b9bf31a9d in gtk_tree_model_filter_row_changed (c_model=0xa97b20, c_path=0xec5aa0, c_iter=0x7fff117ee840, data=0xcf02e0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtktreemodelfilter.c:1194
	filter = (GtkTreeModelFilter *) 0x0
	iter = {stamp = -1635199864, user_data = 0x2b1b9e631893, user_data2 = 0x8efbc0, user_data3 = 0x6f74e0}
	children = {stamp = -1642283904, user_data = 0x2b1b9e897220, user_data2 = 0x667a20, user_data3 = 0x667a60}
	real_c_iter = {stamp = 579621411, user_data = 0xb01190, user_data2 = 0x0, user_data3 = 0x0}
	path = <value optimized out>
	elt = <value optimized out>
	level = <value optimized out>
	requested_state = <value optimized out>
	current_state = <value optimized out>
	free_c_path = 0
	__PRETTY_FUNCTION__ = "gtk_tree_model_filter_row_changed"
#5  0x00002b1b9bf32039 in gtk_tree_model_filter_refilter_helper (model=0x0, path=0xec5b00, iter=0xec22e0, data=0x33)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtktreemodelfilter.c:3285
No locals.
#6  0x00002b1b9bf2d42f in gtk_tree_model_foreach_helper (model=0xa97b20, iter=0x7fff117ee840, path=0xec5aa0, func=0x2b1b9bf32030 <gtk_tree_model_filter_refilter_helper>, 
    user_data=0xcf02e0) at /build/buildd/gtk+2.0-2.12.9/gtk/gtktreemodel.c:1578
	child = {stamp = 0, user_data = 0x0, user_data2 = 0x0, user_data3 = 0x0}
#7  0x00002b1b9bf2dc50 in IA__gtk_tree_model_foreach (model=0xa97b20, func=0x2b1b9bf32030 <gtk_tree_model_filter_refilter_helper>, user_data=0xcf02e0)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtktreemodel.c:1624
	path = (GtkTreePath *) 0xec5aa0
	iter = {stamp = 579621411, user_data = 0xb01190, user_data2 = 0x0, user_data3 = 0x0}
	__PRETTY_FUNCTION__ = "IA__gtk_tree_model_foreach"
#8  0x00002b1b9bdeee55 in IA__gtk_entry_completion_complete (completion=0x9a1530) at /build/buildd/gtk+2.0-2.12.9/gtk/gtkentrycompletion.c:1182
	tmp = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__gtk_entry_completion_complete"
#9  0x00002b1b9bde6f88 in gtk_entry_completion_timeout (data=<value optimized out>) at /build/buildd/gtk+2.0-2.12.9/gtk/gtkentry.c:5729
	matches = <value optimized out>
	actions = <value optimized out>
	s = <value optimized out>
	popup_single = <value optimized out>
	completion = (GtkEntryCompletion *) 0x9a1530
#10 0x00002b1b9d1a582e in gdk_threads_dispatch (data=0xd22520) at /build/buildd/gtk+2.0-2.12.9/gdk/gdk.c:470
	ret = 0
#11 0x00002b1b9e60b6bb in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#12 0x00002b1b9e60af92 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#13 0x00002b1b9e60e236 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#14 0x00002b1b9e60e4f7 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#15 0x00002b1b9be5ab63 in IA__gtk_main () at /build/buildd/gtk+2.0-2.12.9/gtk/gtkmain.c:1163
	tmp_list = (GList *) 0x2
	functions = (GList *) 0x0
	init = (GtkInitFunction *) 0x6b2ae0
	loop = (GMainLoop *) 0x6afe50
#16 0x0000000000448803 in main (argc=6812312, argv=<value optimized out>) at /home/master/src/evince/evince-2.22.0/./shell/main.c:401
	enable_metadata = 1
	context = <value optimized out>
	args = (GHashTable *) 0x6a4e80
	program = (GnomeProgram *) 0x677050
Current language:  auto; currently asm
Current language:  auto; currently c

-- 
Lionel