Bug#235660: libgtk2.0-0: evolution hangs in gdk_pixbuf

[Ove Kaaven]

Package: libgtk2.0-0
Version: 2.2.4-3
Severity: important

It seems evolution hangs when trying to display certain mails with
(presumably) embedded images, it's not yet clear if there are anything
special about those images. Here's a backtrace from attaching gdb to the
most active pid of the hanging process:

(gdb) bt
#0  0x40e9e116 in correct_total (weights=0x46900008, n_x=208, n_y=209, total=85696, overall_alpha=1)
    at pixops.c:1094
#1  0x40e9e78c in bilinear_make_fast_weights (filter=0xbfffe5f0, x_scale=0.004850444624090542, 
    y_scale=0.004807692307692308, overall_alpha=1) at pixops.c:1294
#2  0x40e9f91e in pixops_scale (dest_buf=0x88c00f8 [some crap], render_x0=0, render_y0=0, 
    render_x1=24, render_y1=5, dest_rowstride=72, dest_channels=3, dest_has_alpha=0, 
    src_buf=0x432bf008 [lotsa crap]..., src_width=4948, src_height=1040, src_rowstride=14844, src_channels=3, src_has_alpha=0, 
    scale_x=0.004850444624090542, scale_y=0.004807692307692308, interp_type=PIXOPS_INTERP_BILINEAR)
    at pixops.c:1644
#3  0x40e98c45 in gdk_pixbuf_scale (src=0x2, dest=0x82307f0, dest_x=0, dest_y=-3, dest_width=24, 
    dest_height=5, offset_x=0.5, offset_y=0.5, scale_x=0, scale_y=65536, interp_type=16757)
    at gdk-pixbuf-scale.c:75
#4  0x40e9929e in gdk_pixbuf_scale_simple (src=0x893e9d0, dest_width=24, dest_height=5, 
    interp_type=16757) at gdk-pixbuf-scale.c:243
#5  0x417333f8 in mail_display_queue_redisplay ()
   from /usr/lib/evolution/1.4/components/libevolution-mail.so
#6  0x4108b9c1 in g_idle_dispatch (source=0x889aa00, callback=0x4175, user_data=0x889a9d8)
    at gmain.c:3272
#7  0x41089086 in g_main_dispatch (context=0x80e59f0) at gmain.c:1751
#8  0x4108a029 in g_main_context_dispatch (context=0x80e59f0) at gmain.c:2299
#9  0x4108a347 in g_main_context_iterate (context=0x80e59f0, block=1, dispatch=1, self=0x80c0fe8)
    at gmain.c:2380
#10 0x4108a9b0 in g_main_loop_run (loop=0x80fe968) at gmain.c:2600
#11 0x40542038 in bonobo_main () from /usr/lib/libbonobo-2.so.0
#12 0x080a6899 in main ()

(gdb) frame 4
(gdb) print *src
$2 = {parent_instance = {g_type_instance = {g_class = 0x8100bc0}, ref_count = 2, qdata = 0x0}, 
  colorspace = GDK_COLORSPACE_RGB, n_channels = 3, bits_per_sample = 8, width = 4948, height = 1040, 
  rowstride = 14844, 
  pixels = 0x432bf008 [lotsa crap]..., destroy_fn = 0x40e93e30 <free_buffer>,
  destroy_fn_data = 0x0, has_alpha = 0}
(gdb) print *dest
$3 = {parent_instance = {g_type_instance = {g_class = 0x8100bc0}, ref_count = 1, qdata = 0x0}, 
  colorspace = GDK_COLORSPACE_RGB, n_channels = 3, bits_per_sample = 8, width = 24, height = 5, 
  rowstride = 72, pixels = 0x88c00f8 [some crap], destroy_fn = 0x40e93e30 <free_buffer>, 
  destroy_fn_data = 0x0, has_alpha = 0}

I'm supposing this means that the gdk_pixbuf scaling operation is in an infinite loop or
something. If I detach and attach again, sometimes dest_y=-35 or some such in frame 3,
which is probably out of the apparent dest_height=5 range.

Let me know if more information is needed.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.4.24-1-k7
Locale: LANG=no_NO.ISO-8859-1, LC_CTYPE=no_NO.ISO-8859-1

Versions of packages libgtk2.0-0 depends on:
ii  libatk1.0-0                 1.4.1-1      The ATK accessibility toolkit
ii  libc6                       2.3.2.ds1-11 GNU C Library: Shared libraries an
ii  libfontconfig1              2.2.1-16     generic font configuration library
ii  libfreetype6                2.1.7-2      FreeType 2 font engine, shared lib
ii  libglib2.0-0                2.2.3-1      The GLib library of C routines
ii  libgtk2.0-common            2.2.4-3      Common files for the GTK+ graphica
ii  libjpeg62                   6b-9         The Independent JPEG Group's JPEG 
ii  libpango1.0-0               1.2.5-2.1    Layout and rendering of internatio
ii  libpng12-0                  1.2.5.0-5    PNG library - runtime
ii  libtiff3g                   3.6.1-1      Tag Image File Format library
ii  libxft2                     2.1.2-5      FreeType-based font drawing librar
ii  libxrender1                 0.8.3-5      X Rendering Extension client libra
ii  xlibs                       4.3.0-2      X Window System client libraries m
ii  zlib1g                      1:1.2.1-4    compression library - runtime

-- no debconf information