Bug#565282: evince: crash after searching and scrolling

[Denis Laxalde]

Package: evince
Version: 2.28.2-1
Severity: important

Steps to reproduce:
 1. Open this document http://trac.openturns.org/raw-attachment/wiki/Documentation/OpenTURNS_ReferenceGuide.pdf
 2. Search some word (e.g. "variable")
 3. Scroll up and down a bit
 4. ... Evince crashes

I attached a backtrace.

Cheers,

Denis

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-trunk-amd64 (SMP w/1 CPU core)
Locale: LANG=fr_CA.UTF-8, LC_CTYPE=fr_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages evince depends on:
ii  evince-common           2.28.2-1         Document (postscript, pdf) viewer 
ii  gconf2                  2.28.0-1         GNOME configuration database syste
ii  gnome-icon-theme        2.28.0-1         GNOME Desktop icon theme
ii  libatk1.0-0             1.28.0-1         The ATK accessibility toolkit
ii  libc6                   2.10.2-5         Embedded GNU C Library: Shared lib
ii  libcairo2               1.8.8-2          The Cairo 2D vector graphics libra
ii  libdbus-1-3             1.2.16-2         simple interprocess messaging syst
ii  libdbus-glib-1-2        0.82-2           simple interprocess messaging syst
ii  libevince1              2.28.2-1         Document (postscript, pdf) renderi
ii  libfontconfig1          2.8.0-2          generic font configuration library
ii  libfreetype6            2.3.11-1         FreeType 2 font engine, shared lib
ii  libgconf2-4             2.28.0-1         GNOME configuration database syste
ii  libglib2.0-0            2.22.3-2         The GLib library of C routines
ii  libgnome-keyring0       2.28.2-1         GNOME keyring services library
ii  libgtk2.0-0             2.18.5-1         The GTK+ graphical user interface 
ii  libice6                 2:1.0.6-1        X11 Inter-Client Exchange library
ii  libnautilus-extension1  2.28.4-1         libraries for nautilus components 
ii  libpango1.0-0           1.26.2-1         Layout and rendering of internatio
ii  libpoppler-glib4        0.12.2-2.1       PDF rendering library (GLib-based 
ii  libsm6                  2:1.1.1-1        X11 Session Management library
ii  libx11-6                2:1.3.2-1        X11 client-side library
ii  libxml2                 2.7.6.dfsg-1     GNOME XML library
ii  shared-mime-info        0.70-1           FreeDesktop.org shared MIME databa
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages evince recommends:
ii  dbus-x11                      1.2.16-2   simple interprocess messaging syst
ii  gvfs                          1.4.3-1    userspace virtual filesystem - ser

Versions of packages evince suggests:
ii  nautilus                      2.28.4-1   file manager and graphical shell f
ii  poppler-data                  0.4.0-2    Encoding data for the poppler PDF 
pn  unrar                         <none>     (no description available)

-- no debconf information
-------------- next part --------------
Program received signal SIGSEGV, Segmentation fault.
0x00007ffff5572d0c in CairoOutputDev::restoreState(GfxState*) () from /usr/lib/libpoppler-glib.so.4
(gdb) 
(gdb) bt
#0  0x00007ffff5572d0c in CairoOutputDev::restoreState(GfxState*) () from /usr/lib/libpoppler-glib.so.4
#1  0x00007ffff1f6374f in Gfx::go(int) () from /usr/lib/libpoppler.so.5
#2  0x00007ffff1f67894 in Gfx::display(Object*, int) () from /usr/lib/libpoppler.so.5
#3  0x00007ffff1f6b1a5 in Gfx::doForm1(Object*, Dict*, double*, double*, int, int, GfxColorSpace*, int, int, int, Function*, GfxColor*) () from /usr/lib/libpoppler.so.5
#4  0x00007ffff1f739f3 in Gfx::doForm(Object*) () from /usr/lib/libpoppler.so.5
#5  0x00007ffff1f74093 in Gfx::opXObject(Object*, int) () from /usr/lib/libpoppler.so.5
#6  0x00007ffff1f6374f in Gfx::go(int) () from /usr/lib/libpoppler.so.5
#7  0x00007ffff1f67894 in Gfx::display(Object*, int) () from /usr/lib/libpoppler.so.5
#8  0x00007ffff1faec70 in Page::displaySlice(OutputDev*, double, double, int, int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*, int (*)(Annot*, void*), void*) () from /usr/lib/libpoppler.so.5
#9  0x00007ffff556ccb7 in ?? () from /usr/lib/libpoppler-glib.so.4
#10 0x00007ffff556ced5 in ?? () from /usr/lib/libpoppler-glib.so.4
#11 0x00007ffff556dd9b in poppler_page_find_text () from /usr/lib/libpoppler-glib.so.4
#12 0x00007fffead26f72 in pdf_document_find_find_text (document_find=<value optimized out>, page=<value optimized out>, text=0xcbbc00 "variable", case_sensitive=<value optimized out>) at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./backend/pdf/ev-poppler.cc:1514
#13 0x00007ffff779dc61 in ev_job_find_run (job=0x8d1980) at /build/buildd-evince_2.28.2-1-amd64-oB2N1b/evince-2.28.2/./libview/ev-jobs.c:1119
#14 0x00007ffff3db48fe in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#15 0x00007ffff3db82b8 in ?? () from /lib/libglib-2.0.so.0
#16 0x00007ffff3db8715 in g_main_loop_run () from /lib/libglib-2.0.so.0
#17 0x00007ffff72b7f87 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#18 0x000000000043d234 in ?? ()
#19 0x00007ffff36e8abd in __libc_start_main () from /lib/libc.so.6
#20 0x000000000041c559 in ?? ()
#21 0x00007fffffffe348 in ?? ()
#22 0x000000000000001c in ?? ()
#23 0x0000000000000002 in ?? ()
#24 0x00007fffffffe607 in ?? ()
#25 0x0000000000000000 in ?? ()
(gdb)