[Pkg-gnome-extras-maintainers] Bug#1127969: evince: Crash on startup even without parameters, ensure_surface_for_gicon: assertion failed
Horst Schirmeier
debianbugs at schirmeier.com
Sat Feb 14 17:48:16 GMT 2026
Package: evince
Version: 48.1-4+b1
Severity: grave
Justification: renders package unusable
X-Debbugs-Cc: debianbugs at schirmeier.com
Dear Maintainer,
evince crashes on startup, even without any parameters / files; this seems to
be caused by AppArmor:
$ evince
(org.gnome.Evince:7829): Gtk-WARNING **: 18:18:12.119: Could not load a pixbuf from /org/gtk/libgtk/icons/16x16/status/dialog-password-symbolic.symbolic.png.
This may indicate that pixbuf loaders or the mime database could not be found.
**
Gtk:ERROR:../../../gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: Could not spawn `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--symlink" "/usr/lib32" "/lib32" "--symlink" "/usr/lib" "/lib" "--symlink" "/usr/libx32" "/libx32" "--symlink" "/usr/lib64" "/lib64" "--ro-bind-try" "/etc/fonts/conf.d" "/etc/fonts/conf.d" "--ro-bind-try" "/etc/fonts/fonts.conf" "/etc/fonts/fonts.conf" "--ro-bind-try" "/home/hsc/.cache/fontconfig" "/home/hsc/.cache/fontconfig" "--ro-bind-try" "/home/hsc/.config/fontconfig/fonts.conf" "/home/hsc/.config/fontconfig/fonts.conf" "--ro-bind-try" "/home/hsc/.fonts" "/home/hsc/.fonts" "--ro-bind-try" "/var/cache/fontconfig" "/var/cache/fontconfig" "--bind-try" "/home/hsc/.cache/glycin/usr/libexec/glycin-loaders/2+/glycin-svg" "/home/hsc/.cache/glycin/usr/libexec/glycin-loaders/2+/glycin-svg" "--setenv" "XDG_CACHE_HOME" "/home/hsc/.cache/glycin/usr/libexec/glycin-loaders/2+/glycin-svg" "--seccomp" "24" "/usr/libexec/glycin-loaders/2+/glycin-svg" "--dbus-fd" "23"`: Permission denied (os error 13) (gdk-pixbuf-error-quark, 0)
Bail out! Gtk:ERROR:../../../gtk/gtkiconhelper.c:495:ensure_surface_for_gicon: assertion failed (error == NULL): Failed to load /usr/share/icons/breeze/status/64/image-missing.svg: Could not spawn `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--symlink" "/usr/lib32" "/lib32" "--symlink" "/usr/lib" "/lib" "--symlink" "/usr/libx32" "/libx32" "--symlink" "/usr/lib64" "/lib64" "--ro-bind-try" "/etc/fonts/conf.d" "/etc/fonts/conf.d" "--ro-bind-try" "/etc/fonts/fonts.conf" "/etc/fonts/fonts.conf" "--ro-bind-try" "/home/hsc/.cache/fontconfig" "/home/hsc/.cache/fontconfig" "--ro-bind-try" "/home/hsc/.config/fontconfig/fonts.conf" "/home/hsc/.config/fontconfig/fonts.conf" "--ro-bind-try" "/home/hsc/.fonts" "/home/hsc/.fonts" "--ro-bind-try" "/var/cache/fontconfig" "/var/cache/fontconfig" "--bind-try" "/home/hsc/.cache/glycin/usr/libexec/glycin-loaders/2+/glycin-svg" "/home/hsc/.cache/glycin/usr/libexec/glycin-loaders/2+/glycin-svg" "--setenv" "XDG_CACHE_HOME" "/home/hsc/.cache/glycin/usr/libexec/glycin-loaders/2+/glycin-svg" "--seccomp" "24" "/usr/libexec/glycin-loaders/2+/glycin-svg" "--dbus-fd" "23"`: Permission denied (os error 13) (gdk-pixbuf-error-quark, 0)
Aborted (core dumped) evince
$ sudo dmesg
[...]
[ 2161.919187] kauditd_printk_skb: 123 callbacks suppressed
[ 2161.919193] audit: type=1400 audit(1771091101.388:1186): apparmor="DENIED" operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" pid=16178 comm="blocking-2" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 2161.919199] audit: type=1400 audit(1771091101.388:1187): apparmor="DENIED" operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" pid=16178 comm="blocking-2" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 2161.922439] audit: type=1400 audit(1771091101.388:1188): apparmor="DENIED" operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" pid=16180 comm="gly-hdl-loader" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 2161.922449] audit: type=1400 audit(1771091101.388:1189): apparmor="DENIED" operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" pid=16180 comm="gly-hdl-loader" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 2161.929531] audit: type=1400 audit(1771091101.396:1190): apparmor="DENIED" operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" pid=16182 comm="gly-hdl-loader" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[ 2161.929541] audit: type=1400 audit(1771091101.396:1191): apparmor="DENIED" operation="exec" class="file" profile="/usr/bin/evince" name="/usr/bin/bwrap" pid=16182 comm="gly-hdl-loader" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
After disabling the evince AppArmor profile (which is only desirable as a
temporary workaround), evince works as expected:
$ sudo aa-disable /etc/apparmor.d/usr.bin.evince
-- System Information:
Debian Release: forky/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.18.9+deb14-amd64 (SMP w/20 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages evince depends on:
ii dconf-gsettings-backend [gsettings-backend] 0.49.0-4
ii evince-common 48.1-4
ii gsettings-desktop-schemas 50~alpha-1
ii libatk1.0-0t64 2.59.1-2
ii libc6 2.42-11+b1
ii libcairo-gobject2 1.18.4-3
ii libcairo2 1.18.4-3
ii libevdocument3-4t64 48.1-4+b1
ii libevview3-3t64 48.1-4+b1
ii libgdk-pixbuf-2.0-0 2.44.5+dfsg-3
ii libglib2.0-0t64 2.87.2-3
ii libgnome-desktop-3-20t64 44.5-1
ii libgtk-3-0t64 3.24.51-4
ii libhandy-1-0 1.8.3-3+b1
ii libpango-1.0-0 1.57.0-1
ii libpangocairo-1.0-0 1.57.0-1
ii libsecret-1-0 0.21.7-2
ii shared-mime-info 2.4-5+b3
Versions of packages evince recommends:
ii dbus-user-session [default-dbus-session-bus] 1.16.2-3
Versions of packages evince suggests:
ii gvfs 1.58.0-2
pn nautilus-sendto <none>
ii poppler-data 0.4.12-1
-- no debconf information
More information about the pkg-gnome-extras-maintainers
mailing list