Package: libpoppler5 Version: 0.12.2-2 Severity: normal
When trying to go to page 116 of http://downloads.bbc.co.uk/news/nol/shared/spl/hi/uk_politics/09/budget/09_12_09budget_document.pdf in evince (i.e. open file, type 116 into goto-page text box at top, press enter) I get a SIGSEGV. gdb backtrace attached: the immediate cause seems to be a null pointer dereference at line 236 of TextOutputDev.cc (note that fontA=0x0, but that (font=fontA)->gfxFont is demanded at the crash site). Hope this helps. Thanks for your efforts. -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (300, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libpoppler5 depends on: ii libc6 2.10.2-2 GNU C Library: Shared libraries ii libfontconfig1 2.6.0-4 generic font configuration library ii libfreetype6 2.3.11-1 FreeType 2 font engine, shared lib ii libgcc1 1:4.4.2-3 GCC support library ii libjpeg62 6b-15 The Independent JPEG Group's JPEG ii liblcms1 1.18.dfsg-1 Color management library ii libopenjpeg2 1.3+dfsg-4 JPEG 2000 image compression/decomp ii libpng12-0 1.2.40-1 PNG library - runtime ii libstdc++6 4.4.2-3 The GNU Standard C++ Library v3 ii libxml2 2.7.6.dfsg-1 GNOME XML library libpoppler5 recommends no packages. libpoppler5 suggests no packages. -- no debconf information
Starting program: /usr/bin/evince fred.pdf [Thread debugging using libthread_db enabled] [New Thread 0x7fffec2cd910 (LWP 6364)] [New Thread 0x7fffeb8be910 (LWP 6365)] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fffec2cd910 (LWP 6364)] TextWord (this=0x7fffe4a1b7c0, state=0x7fffe53b75a0, rotA=3, x0=0, y0=0, charPosA=0, fontA=0x0, fontSizeA=0) at TextOutputDev.cc:236 236 TextOutputDev.cc: No such file or directory. in TextOutputDev.cc Current language: auto The current source language is "auto; currently c++". #0 TextWord (this=0x7fffe4a1b7c0, state=0x7fffe53b75a0, rotA=3, x0=0, y0=0, charPosA=0, fontA=0x0, fontSizeA=0) at TextOutputDev.cc:236 ascent = <value optimized out> rgb = {r = -469761912, g = 32767, b = -449142192} gfxFont = <value optimized out> descent = <value optimized out> #1 0x00007ffff1fe28d6 in TextPage::beginWord (this=0x7fffe53aa250, state=0x7fffe53b75a0, x0=0, y0=0) at TextOutputDev.cc:1991 gfxFont = <value optimized out> m = {0, 0, 0, -0} rot = 3 #2 0x00007ffff1fe4041 in TextPage::addChar (this=0x7fffe53aa250, state=0x7fffe53b75a0, x=<value optimized out>, y=<value optimized out>, dx=<value optimized out>, dy=<value optimized out>, c=0, nBytes=1, u=<value optimized out>, uLen=<value optimized out>) at TextOutputDev.cc:2090 x1 = <value optimized out> y1 = <value optimized out> w1 = <value optimized out> h1 = <value optimized out> base = 0 sp = 6.9533336235958141e-310 overlap = -449014000 i = <value optimized out> #3 0x00007ffff1fe41ad in ActualText::endMC (this=0x7fffe53aa330, state=0x7fffe53b75a0) at TextOutputDev.cc:4603 uniString = 0x7fffe53c9710 "\376\377" length = 1 i = <value optimized out> #4 0x00007ffff1f699fc in Gfx::go (this=0x7fffe53b4400, topLevel=1) at Gfx.cc:661 timer = {start_time = {tv_sec = 1260370279, tv_usec = 184560}, end_time = {tv_sec = 140737039254528, tv_usec = 140737039265516}, active = 1} obj = {type = objCmd, {booln = -449034464, intg = -449034464, real = 6.9533336225847582e-310, string = 0x7fffe53c4720, name = 0x7fffe53c4720 "EMC", array = 0x7fffe53c4720, dict = 0x7fffe53c4720, stream = 0x7fffe53c4720, ref = { num = -449034464, gen = 32767}, cmd = 0x7fffe53c4720 "EMC"}} args = {{type = objNone, {booln = -449008720, intg = -449008720, real = 6.9533336238566808e-310, string = 0x7fffe53cabb0, name = 0x7fffe53cabb0 "\300\305<\345\377\177", array = 0x7fffe53cabb0, dict = 0x7fffe53cabb0, stream = 0x7fffe53cabb0, ref = {num = -449008720, gen = 32767}, cmd = 0x7fffe53cabb0 "\300\305<\345\377\177"}}, {type = objNone, {booln = -449037232, intg = -449037232, real = 6.9533336224480008e-310, string = 0x7fffe53c3c50, name = 0x7fffe53c3c50 " <\345\377\177", array = 0x7fffe53c3c50, dict = 0x7fffe53c3c50, stream = 0x7fffe53c3c50, ref = { num = -449037232, gen = 32767}, cmd = 0x7fffe53c3c50 " <\345\377\177"}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, { booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}}} numArgs = 0 i = 2 lastAbortCheck = 0 #5 0x00007ffff1f6b4b6 in Gfx::display (this=0x7fffe53b4400, obj=0x7fffec2cce50, topLevel=1) at Gfx.cc:630 obj2 = {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, cmd = 0x0}} i = <value optimized out> #6 0x00007ffff1fb5ad8 in Page::displaySlice (this=0x98cd90, out=0xa08400, hDPI=72, vDPI=72, rotate=<value optimized out>, useMediaBox=<value optimized out>, crop=1, sliceX=-1, sliceY=-1, sliceW=-1, sliceH=-1, printing=0, catalog=0x9476e0, abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:474 gfx = 0x7fffe53b4400 obj = {type = objStream, {booln = -444273344, intg = -444273344, real = 6.953333857815341e-310, string = 0x7fffe584ed40, name = 0x7fffe584ed40 "P\267'\362\377\177", array = 0x7fffe584ed40, dict = 0x7fffe584ed40, stream = 0x7fffe584ed40, ref = {num = -444273344, gen = 32767}, cmd = 0x7fffe584ed40 "P\267'\362\377\177"}} annotList = <value optimized out> i = <value optimized out> #7 0x00007ffff5572d21 in _poppler_page_render (page=0xa08200, cairo=0x7fffe4003b00, printing=0) at poppler-page.cc:560 output_dev = 0xa08400 __PRETTY_FUNCTION__ = "void _poppler_page_render(PopplerPage*, cairo_t*, GBool)" #8 0x00007fffeb8c9bbb in pdf_page_render (document=<value optimized out>, rc=0x7c58a0) at /build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./backend/pdf/ev-poppler.cc:510 surface = <value optimized out> cr = 0x7fffe4003b00 #9 pdf_document_render (document=<value optimized out>, rc=0x7c58a0) at /build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./backend/pdf/ev-poppler.cc:560 poppler_page = <value optimized out> width_points = 595.27600000000007 height_points = 841.88999999999999 width = 911 height = 1289 #10 0x00007ffff779eb21 in ev_job_render_run (job=0x7ffed0) at /build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./libview/ev-jobs.c:521 job_render = 0x7ffed0 rc = <value optimized out> #11 0x00007ffff779f820 in ev_job_thread (data=<value optimized out>) at /build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./libview/ev-job-scheduler.c:183 No locals. #12 ev_job_thread_proxy (data=<value optimized out>) at /build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./libview/ev-job-scheduler.c:213 job = 0xb09080 #13 0x00007ffff3de3f64 in ?? () from /lib/libglib-2.0.so.0 No symbol table info available. #14 0x00007ffff600373a in start_thread (arg=<value optimized out>) at pthread_create.c:300 __res = <value optimized out> pd = 0x7fffec2cd910 unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737155750160, -3912901807733527273, 140737488346720, 140737155750160, 140737354129472, 3, 3912868108249804055, 3912916184870104343}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = <value optimized out> #15 0x00007ffff379c69d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112 No locals. #16 0x0000000000000000 in ?? () No symbol table info available.