Bug#672336: Segfault when printing some PDF

Vincent Bernat bernat at debian.org
Thu Nov 1 11:57:50 UTC 2012


reassign 672336 libcairo2
forcemerge 687783 672336
thanks

 ❦ 30 octobre 2012 11:22 CET, Olivier Berger <olivier.berger at it-sudparis.eu> :

>> With the following PDF:
>>  http://www.ameli.fr/fileadmin/user_upload/formulaires/S3704.pdf
>> 
>> I get a segfault when printing (even with the preview, no need to really print):
>> 
>> #0  decode_integer (p=0x0, integer=0x7fff8aa1b388) at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:241
>> 241	/tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c: No such file or directory.
>> (gdb) bt full
>> #0  decode_integer (p=0x0, integer=0x7fff8aa1b388) at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:241
>> No locals.
>> #1  0x00007fac2dba802e in cairo_cff_font_read_top_dict (font=0x1a8d7e0) at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:1185
>
> At first look, this seems to be a bug in cairo and not evince-gtk... and very similar to #687783.
>
> Would you mind checking, and eventually (force)merging ?

Yes, that's the same:

(gdb) bt full
#0  decode_integer (p=0x0, integer=integer at entry=0x7fffffffe020)
    at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:241
No locals.
#1  0x00007ffff57a1bfa in cairo_cff_font_read_top_dict (font=0x55555620ab30)
    at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:1185
        index = {size = 1, num_elements = 1, element_size = 24, elements = 0x55555616aac0 ""}
        element = <optimized out>
        buf = "`\256\b\364\377\177\000\000\b\000\000\000\000\000\000\000\020\243)V"
        operand = <optimized out>
        status = CAIRO_INT_STATUS_SUCCESS
        p = 0x55555629a3db "r\244\371`\227\373f\244\367\067\213\006\367\361\224\374ڤ\a\323\n\343\v\367\252\024"
        size = <optimized out>
        offset = 204
#2  0x00007ffff57a32f2 in cairo_cff_font_read_font (font=0x55555620ab30)
    at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:1321
        i = <optimized out>
        status = <optimized out>
#3  cairo_cff_font_generate (length=<synthetic pointer>, data=<synthetic pointer>, font=0x55555620ab30)
    at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:2545
        status = <optimized out>
#4  _cairo_cff_subset_init (cff_subset=cff_subset at entry=0x7fffffffe2d0, 
    subset_name=subset_name at entry=0x7fffffffe340 "CairoFont-4-0", 
    font_subset=font_subset at entry=0x7fffffffe440) at /tmp/buildd/cairo-1.12.2/src/cairo-cff-subset.c:2928
        font = <optimized out>
        status = <optimized out>
        data = 0x0
        length = 0
        i = <optimized out>
#5  0x00007ffff57deba2 in _cairo_pdf_surface_emit_cff_font_subset (font_subset=0x7fffffffe440, 
    surface=0x5555564ade10) at /tmp/buildd/cairo-1.12.2/src/cairo-pdf-surface.c:4884
        status = <optimized out>
        subset = {family_name_utf8 = 0x555556496ab0 "", ps_name = 0x55555616aac0 "", 
          widths = 0x5555560b6cd0, x_min = -0.568359375, y_min = -0.306640625, x_max = 2.0283203125, 
          y_max = 1.0068359375, ascent = 0.89111328125, descent = -0.21630859375, 
          data = 0x555556408c00 "\360\361 at VUU", data_length = 21040}
        name = "CairoFont-4-0\000\000\000\260\001\034VUU\000\000\060\360GVUU\000\000\320\317~\365\377\177\000\000\000`\nVUU\000\000\227\000\000\000\000\000\000\000\254\n\330\363\377\177\000"
#6  _cairo_pdf_surface_emit_unscaled_font_subset (font_subset=0x7fffffffe440, closure=0x5555564ade10)
---Type <return> to continue, or q <return> to quit---
    at /tmp/buildd/cairo-1.12.2/src/cairo-pdf-surface.c:5596
        surface = 0x5555564ade10
        status = CAIRO_INT_STATUS_SUCCESS
#7  0x00007ffff57a49de in _cairo_sub_font_collect (closure=0x7fffffffe3f0, entry=0x5555561a2dc0)
    at /tmp/buildd/cairo-1.12.2/src/cairo-scaled-font-subsets.c:751
        sub_font = 0x5555561a2dc0
        collection = 0x7fffffffe3f0
        subset = {scaled_font = 0x555556337c00, font_id = 4, subset_id = 0, glyphs = 0x555555dd8c10, 
          utf8 = 0x555555dc7840, glyph_names = 0x0, to_latin_char = 0x5555564892e0, 
          latin_to_subset_glyph_index = 0x5555560bc090, num_glyphs = 2, is_composite = 1, is_scaled = 0, 
          is_latin = 1}
        i = <optimized out>
        j = <optimized out>
#8  _cairo_scaled_font_subsets_foreach_internal (font_subsets=<optimized out>, 
    font_subset_callback=font_subset_callback at entry=0x7ffff57deb20 <_cairo_pdf_surface_emit_unscaled_font_subset>, closure=closure at entry=0x5555564ade10, type=type at entry=CAIRO_SUBSETS_FOREACH_UNSCALED)
    at /tmp/buildd/cairo-1.12.2/src/cairo-scaled-font-subsets.c:1072
        collection = {glyphs = 0x555555dd8c10, utf8 = 0x555555dc7840, glyphs_size = 70, 
          to_latin_char = 0x5555564892e0, latin_to_subset_glyph_index = 0x5555560bc090, max_glyph = 1, 
          num_glyphs = 2, subset_id = 0, status = CAIRO_STATUS_SUCCESS, 
          font_subset_callback = 0x7ffff57deb20 <_cairo_pdf_surface_emit_unscaled_font_subset>, 
          font_subset_callback_closure = 0x5555564ade10}
        sub_font = 0x5555561a2dc0
        is_scaled = <optimized out>
        is_user = 0
#9  0x00007ffff57a5bb7 in _cairo_scaled_font_subsets_foreach_unscaled (font_subsets=<optimized out>, 
    font_subset_callback=font_subset_callback at entry=0x7ffff57deb20 <_cairo_pdf_surface_emit_unscaled_font_subset>, closure=closure at entry=0x5555564ade10)
    at /tmp/buildd/cairo-1.12.2/src/cairo-scaled-font-subsets.c:1100
No locals.
#10 0x00007ffff57dc652 in _cairo_pdf_surface_emit_font_subsets (surface=0x5555564ade10)
    at /tmp/buildd/cairo-1.12.2/src/cairo-pdf-surface.c:5646
        status = CAIRO_STATUS_SUCCESS
#11 _cairo_pdf_surface_finish (abstract_surface=0x5555564ade10)
    at /tmp/buildd/cairo-1.12.2/src/cairo-pdf-surface.c:1959
        surface = 0x5555564ade10
        offset = 5
        info = <optimized out>
        catalog = <optimized out>
---Type <return> to continue, or q <return> to quit---
        status = <optimized out>
        status2 = <optimized out>
#12 0x00007ffff578a68c in _cairo_surface_finish (surface=surface at entry=0x5555564ade10)
    at /tmp/buildd/cairo-1.12.2/src/cairo-surface.c:919
        status = <optimized out>
        __PRETTY_FUNCTION__ = "_cairo_surface_finish"
#13 0x00007ffff578aacd in INT_cairo_surface_finish (surface=0x5555564ade10)
    at /tmp/buildd/cairo-1.12.2/src/cairo-surface.c:963
No locals.
#14 0x00007ffff5765ad4 in _cairo_paginated_surface_finish (abstract_surface=0x5555564abd00)
    at /tmp/buildd/cairo-1.12.2/src/cairo-paginated-surface.c:213
        surface = 0x5555564abd00
        status = CAIRO_STATUS_SUCCESS
#15 0x00007ffff578a68c in _cairo_surface_finish (surface=surface at entry=0x5555564abd00)
    at /tmp/buildd/cairo-1.12.2/src/cairo-surface.c:919
        status = <optimized out>
        __PRETTY_FUNCTION__ = "_cairo_surface_finish"
#16 0x00007ffff578aacd in INT_cairo_surface_finish (surface=0x5555564abd00)
    at /tmp/buildd/cairo-1.12.2/src/cairo-surface.c:963
No locals.
#17 0x00007ffff6a21655 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
No symbol table info available.
#18 0x00007ffff690bd63 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
No symbol table info available.
#19 0x00007ffff64e38f0 in ?? () from /usr/lib/x86_64-linux-gnu/libgdk-3.so.0
No symbol table info available.
#20 0x00007ffff4aca355 in g_main_dispatch (context=0x555555814d20)
    at /build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:2539
        dispatch = 0x7ffff4ac8070 <g_idle_dispatch>
        was_in_call = 0
        user_data = 0x555556436600
        callback = 0x7ffff64e38c0
        cb_funcs = 0x7ffff4d769c0
        cb_data = 0x555556179250
        current_source_link = {data = 0x5555564ac040, next = 0x0}
        need_destroy = <optimized out>
        source = 0x5555564ac040
        current = 0x5555557f1f20
        i = <optimized out>
---Type <return> to continue, or q <return> to quit---
#21 g_main_context_dispatch (context=context at entry=0x555555814d20)
    at /build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3075
No locals.
#22 0x00007ffff4aca688 in g_main_context_iterate (context=0x555555814d20, block=block at entry=1, 
    dispatch=dispatch at entry=1, self=<error reading variable: Unhandled dwarf expression opcode 0xfa>)
    at /build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3146
        max_priority = 210
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = <optimized out>
        fds = 0x555555c4ec00
#23 0x00007ffff4acaa82 in g_main_loop_run (loop=0x55555591a3c0)
    at /build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3340
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#24 0x00007ffff68c82e5 in gtk_main () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
No symbol table info available.
#25 0x0000555555575ff5 in main ()
No symbol table info available.
-- 
printk(KERN_ERR "msp3400: chip reset failed, penguin on i2c bus?\n");
	2.2.16 /usr/src/linux/drivers/char/msp3400.c
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20121101/cd319d1b/attachment-0001.pgp>


More information about the pkg-gnome-maintainers mailing list