Public bug reported:

Binary package hint: evince

When filling in the boxes with the attached PDF form, evince crashes.
Maverick amd64 versions: evince_2.31.90-0ubuntu1,  libglib2.0-0
2.25.14-1ubuntu2

The GDK/GTK+ libraries are requesting an insane amount of memory:

$ gdb --args evince DrayTek_RMA.pdf 
(gdb) run
<type in boxes>

GLib-ERROR **: /build/buildd/glib2.0-2.25.14/glib/gmem.c:140: failed to 
allocate 8658654070048 bytes
aborting...

Program received signal SIGTRAP, Trace/breakpoint trap.
g_logv (log_domain=<value optimized out>, log_level=<value optimized out>, 
format=<value optimized out>, args1=0x7fffffffd5f0)
    at /build/buildd/glib2.0-2.25.14/glib/gmessages.c:554
554     /build/buildd/glib2.0-2.25.14/glib/gmessages.c: No such file or 
directory.
        in /build/buildd/glib2.0-2.25.14/glib/gmessages.c
(gdb) where
#0  g_logv (log_domain=<value optimized out>, log_level=<value optimized out>, 
format=<value optimized out>, args1=0x7fffffffd5f0)
    at /build/buildd/glib2.0-2.25.14/glib/gmessages.c:554
#1  0x00007ffff40f5973 in g_log (log_domain=0x7fffe8000020 "", log_level=0, 
format=0x1 <Address 0x1 out of bounds>)
    at /build/buildd/glib2.0-2.25.14/glib/gmessages.c:568
#2  0x00007ffff40f3cde in g_malloc (n_bytes=8658654070048) at 
/build/buildd/glib2.0-2.25.14/glib/gmem.c:139
#3  0x00007ffff6380a2d in miRegionCopy (dstrgn=0x7ffff8408390, 
rgn=0x7ffff83221d0) at /build/buildd/gtk+2.0-2.21.6/gdk/gdkregion-generic.c:632
#4  0x00007ffff6381059 in IA__gdk_region_copy (region=0x7ffff83221d0) at 
/build/buildd/gtk+2.0-2.21.6/gdk/gdkregion-generic.c:199
#5  0x00007ffff638f4e8 in gdk_window_invalidate_maybe_recurse_full 
(window=<value optimized out>, region=0x7ffff83221d0, 
    clear_bg=<value optimized out>, child_func=0x7ffff6388020 <true_predicate>, 
user_data=0x0)
    at /build/buildd/gtk+2.0-2.21.6/gdk/gdkwindow.c:5812
#6  0x00007ffff4bc96ce in g_closure_invoke (closure=0x7ffff8504fd0, 
return_value=0x0, n_param_values=2, param_values=0x7ffff83fe490, 
    invocation_hint=0x7fffffffd900) at 
/build/buildd/glib2.0-2.25.14/gobject/gclosure.c:766
#7  0x00007ffff4be1f59 in signal_emit_unlocked_R (node=0x7ffff8504df0, 
detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, instance_and_params=<value optimized 
out>) at /build/buildd/glib2.0-2.25.14/gobject/gsignal.c:3252
#8  0x00007ffff4be36d6 in g_signal_emit_valist (instance=0x7ffff85076b0, 
signal_id=<value optimized out>, detail=0, var_args=0x7fffffffdaf0)
    at /build/buildd/glib2.0-2.25.14/gobject/gsignal.c:2983
#9  0x00007ffff4be3f43 in g_signal_emit (instance=0x7fffe8000020, signal_id=0, 
detail=1) at /build/buildd/glib2.0-2.25.14/gobject/gsignal.c:3040
#10 0x00007ffff4bc96ce in g_closure_invoke (closure=0x7ffff83b8d00, 
return_value=0x0, n_param_values=1, param_values=0x7ffff856e240, 
    invocation_hint=0x7fffffffdd10) at 
/build/buildd/glib2.0-2.25.14/gobject/gclosure.c:766
#11 0x00007ffff4be1f59 in signal_emit_unlocked_R (node=0x7ffff84c5250, 
detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, instance_and_params=<value optimized 
out>) at /build/buildd/glib2.0-2.25.14/gobject/gsignal.c:3252
#12 0x00007ffff4be36d6 in g_signal_emit_valist (instance=0x7ffff8536ee0, 
signal_id=<value optimized out>, detail=0, var_args=0x7fffffffdf00)
    at /build/buildd/glib2.0-2.25.14/gobject/gsignal.c:2983
#13 0x00007ffff4be3f43 in g_signal_emit (instance=0x7fffe8000020, signal_id=0, 
detail=1) at /build/buildd/glib2.0-2.25.14/gobject/gsignal.c:3040
#14 0x00007ffff77178e0 in ?? () from /usr/lib/libevview.so.3
#15 0x00007ffff40eacb2 in g_main_dispatch (context=0x7ffff821b0a0) at 
/build/buildd/glib2.0-2.25.14/glib/gmain.c:2119
#16 g_main_context_dispatch (context=0x7ffff821b0a0) at 
/build/buildd/glib2.0-2.25.14/glib/gmain.c:2672
#17 0x00007ffff40eec18 in g_main_context_iterate (context=0x7ffff821b0a0, 
block=<value optimized out>, dispatch=<value optimized out>, 
    self=<value optimized out>) at 
/build/buildd/glib2.0-2.25.14/glib/gmain.c:2750
#18 0x00007ffff40ef125 in g_main_loop_run (loop=0x7ffff82ab090) at 
/build/buildd/glib2.0-2.25.14/glib/gmain.c:2958
#19 0x00007ffff6753a47 in IA__gtk_main () at 
/build/buildd/gtk+2.0-2.21.6/gtk/gtkmain.c:1237
#20 0x00007ffff7fdeddc in main (argc=1, argv=0x7fffffffe348) at 
/build/buildd/evince-2.31.90/./shell/main.c:322

** Affects: evince (Ubuntu)
     Importance: Undecided
         Status: New

-- 
evince crashes with SIGTRAP when filling form in
https://bugs.launchpad.net/bugs/628263
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to