Package: libpoppler5
Version: 0.12.2-2
Severity: normal

When trying to go to page 116 of 

http://downloads.bbc.co.uk/news/nol/shared/spl/hi/uk_politics/09/budget/09_12_09budget_document.pdf

in evince (i.e. open file, type 116 into goto-page text box at top, 
press enter) I get a SIGSEGV.

gdb backtrace attached: the immediate cause seems to be a null pointer 
dereference at line 236 of TextOutputDev.cc (note that fontA=0x0, but 
that (font=fontA)->gfxFont is demanded at the crash site).

Hope this helps.  Thanks for your efforts.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (300, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libpoppler5 depends on:
ii  libc6                       2.10.2-2     GNU C Library: Shared libraries
ii  libfontconfig1              2.6.0-4      generic font configuration library
ii  libfreetype6                2.3.11-1     FreeType 2 font engine, shared lib
ii  libgcc1                     1:4.4.2-3    GCC support library
ii  libjpeg62                   6b-15        The Independent JPEG Group's JPEG 
ii  liblcms1                    1.18.dfsg-1  Color management library
ii  libopenjpeg2                1.3+dfsg-4   JPEG 2000 image compression/decomp
ii  libpng12-0                  1.2.40-1     PNG library - runtime
ii  libstdc++6                  4.4.2-3      The GNU Standard C++ Library v3
ii  libxml2                     2.7.6.dfsg-1 GNOME XML library

libpoppler5 recommends no packages.

libpoppler5 suggests no packages.

-- no debconf information
Starting program: /usr/bin/evince fred.pdf
[Thread debugging using libthread_db enabled]
[New Thread 0x7fffec2cd910 (LWP 6364)]
[New Thread 0x7fffeb8be910 (LWP 6365)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffec2cd910 (LWP 6364)]
TextWord (this=0x7fffe4a1b7c0, state=0x7fffe53b75a0, rotA=3, x0=0, y0=0, 
    charPosA=0, fontA=0x0, fontSizeA=0) at TextOutputDev.cc:236
236     TextOutputDev.cc: No such file or directory.
        in TextOutputDev.cc
Current language:  auto
The current source language is "auto; currently c++".
#0  TextWord (this=0x7fffe4a1b7c0, state=0x7fffe53b75a0, rotA=3, x0=0, y0=0, 
    charPosA=0, fontA=0x0, fontSizeA=0) at TextOutputDev.cc:236
        ascent = <value optimized out>
        rgb = {r = -469761912, g = 32767, b = -449142192}
        gfxFont = <value optimized out>
        descent = <value optimized out>
#1  0x00007ffff1fe28d6 in TextPage::beginWord (this=0x7fffe53aa250, 
    state=0x7fffe53b75a0, x0=0, y0=0) at TextOutputDev.cc:1991
        gfxFont = <value optimized out>
        m = {0, 0, 0, -0}
        rot = 3
#2  0x00007ffff1fe4041 in TextPage::addChar (this=0x7fffe53aa250, 
    state=0x7fffe53b75a0, x=<value optimized out>, y=<value optimized out>, 
    dx=<value optimized out>, dy=<value optimized out>, c=0, nBytes=1, 
    u=<value optimized out>, uLen=<value optimized out>)
    at TextOutputDev.cc:2090
        x1 = <value optimized out>
        y1 = <value optimized out>
        w1 = <value optimized out>
        h1 = <value optimized out>
        base = 0
        sp = 6.9533336235958141e-310
        overlap = -449014000
        i = <value optimized out>
#3  0x00007ffff1fe41ad in ActualText::endMC (this=0x7fffe53aa330, 
    state=0x7fffe53b75a0) at TextOutputDev.cc:4603
        uniString = 0x7fffe53c9710 "\376\377"
        length = 1
        i = <value optimized out>
#4  0x00007ffff1f699fc in Gfx::go (this=0x7fffe53b4400, topLevel=1)
    at Gfx.cc:661
        timer = {start_time = {tv_sec = 1260370279, tv_usec = 184560}, 
          end_time = {tv_sec = 140737039254528, tv_usec = 140737039265516}, 
          active = 1}
        obj = {type = objCmd, {booln = -449034464, intg = -449034464, 
            real = 6.9533336225847582e-310, string = 0x7fffe53c4720, 
            name = 0x7fffe53c4720 "EMC", array = 0x7fffe53c4720, 
            dict = 0x7fffe53c4720, stream = 0x7fffe53c4720, ref = {
              num = -449034464, gen = 32767}, cmd = 0x7fffe53c4720 "EMC"}}
        args = {{type = objNone, {booln = -449008720, intg = -449008720, 
              real = 6.9533336238566808e-310, string = 0x7fffe53cabb0, 
              name = 0x7fffe53cabb0 "\300\305<\345\377\177", 
              array = 0x7fffe53cabb0, dict = 0x7fffe53cabb0, 
              stream = 0x7fffe53cabb0, ref = {num = -449008720, gen = 32767}, 
              cmd = 0x7fffe53cabb0 "\300\305<\345\377\177"}}, {type = objNone, 
            {booln = -449037232, intg = -449037232, 
              real = 6.9533336224480008e-310, string = 0x7fffe53c3c50, 
              name = 0x7fffe53c3c50 "  <\345\377\177", array = 0x7fffe53c3c50, 
              dict = 0x7fffe53c3c50, stream = 0x7fffe53c3c50, ref = {
                num = -449037232, gen = 32767}, 
              cmd = 0x7fffe53c3c50 "  <\345\377\177"}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}, {type = objNone, {booln = 0, intg = 0, real = 0, 
              string = 0x0, name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, 
              ref = {num = 0, gen = 0}, cmd = 0x0}}, {type = objNone, {
              booln = 0, intg = 0, real = 0, string = 0x0, name = 0x0, 
              array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, gen = 0}, 
              cmd = 0x0}}}
        numArgs = 0
        i = 2
        lastAbortCheck = 0
#5  0x00007ffff1f6b4b6 in Gfx::display (this=0x7fffe53b4400, 
    obj=0x7fffec2cce50, topLevel=1) at Gfx.cc:630
        obj2 = {type = objNone, {booln = 0, intg = 0, real = 0, string = 0x0, 
            name = 0x0, array = 0x0, dict = 0x0, stream = 0x0, ref = {num = 0, 
              gen = 0}, cmd = 0x0}}
        i = <value optimized out>
#6  0x00007ffff1fb5ad8 in Page::displaySlice (this=0x98cd90, out=0xa08400, 
    hDPI=72, vDPI=72, rotate=<value optimized out>, 
    useMediaBox=<value optimized out>, crop=1, sliceX=-1, sliceY=-1, 
    sliceW=-1, sliceH=-1, printing=0, catalog=0x9476e0, abortCheckCbk=0, 
    abortCheckCbkData=0x0, annotDisplayDecideCbk=0, 
    annotDisplayDecideCbkData=0x0) at Page.cc:474
        gfx = 0x7fffe53b4400
        obj = {type = objStream, {booln = -444273344, intg = -444273344, 
            real = 6.953333857815341e-310, string = 0x7fffe584ed40, 
            name = 0x7fffe584ed40 "P\267'\362\377\177", 
            array = 0x7fffe584ed40, dict = 0x7fffe584ed40, 
            stream = 0x7fffe584ed40, ref = {num = -444273344, gen = 32767}, 
            cmd = 0x7fffe584ed40 "P\267'\362\377\177"}}
        annotList = <value optimized out>
        i = <value optimized out>
#7  0x00007ffff5572d21 in _poppler_page_render (page=0xa08200, 
    cairo=0x7fffe4003b00, printing=0) at poppler-page.cc:560
        output_dev = 0xa08400
        __PRETTY_FUNCTION__ = "void _poppler_page_render(PopplerPage*, 
cairo_t*, GBool)"
#8  0x00007fffeb8c9bbb in pdf_page_render (document=<value optimized out>, 
    rc=0x7c58a0)
    at 
/build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./backend/pdf/ev-poppler.cc:510
        surface = <value optimized out>
        cr = 0x7fffe4003b00
#9  pdf_document_render (document=<value optimized out>, rc=0x7c58a0)
    at 
/build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./backend/pdf/ev-poppler.cc:560
        poppler_page = <value optimized out>
        width_points = 595.27600000000007
        height_points = 841.88999999999999
        width = 911
        height = 1289
#10 0x00007ffff779eb21 in ev_job_render_run (job=0x7ffed0)
    at 
/build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./libview/ev-jobs.c:521
        job_render = 0x7ffed0
        rc = <value optimized out>
#11 0x00007ffff779f820 in ev_job_thread (data=<value optimized out>)
    at 
/build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./libview/ev-job-scheduler.c:183
No locals.
#12 ev_job_thread_proxy (data=<value optimized out>)
    at 
/build/buildd-evince_2.28.1-1-amd64-XQDYeW/evince-2.28.1/./libview/ev-job-scheduler.c:213
        job = 0xb09080
#13 0x00007ffff3de3f64 in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#14 0x00007ffff600373a in start_thread (arg=<value optimized out>)
    at pthread_create.c:300
        __res = <value optimized out>
        pd = 0x7fffec2cd910
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737155750160, 
                -3912901807733527273, 140737488346720, 140737155750160, 
                140737354129472, 3, 3912868108249804055, 3912916184870104343}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, 
            data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <value optimized out>
#15 0x00007ffff379c69d in clone ()
    at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
No locals.
#16 0x0000000000000000 in ?? ()
No symbol table info available.

Reply via email to