Bug#700557: ev-document-misc.c:58:ev_document_misc_get_thumbnail_frame: assertion failed: (width_r >= 0 && height_r >= 0)

[Mathieu Malaterre]

Package: evince
Version: 2.30.3-2+squeeze1
Severity: important

I can reproduce a crash using evince. Steps:

$ convert -depth 8 -size 34560x25920 xc:white test.tiff
$ tiffinfo test.tiff
TIFF Directory at offset 0x3564c008 (895795208)
  Image Width: 34560 Image Length: 25920
  Resolution: 72, 72 (unitless)
  Bits/Sample: 8
  Compression Scheme: None
  Photometric Interpretation: min-is-black
  FillOrder: lsb-to-msb
  Orientation: row 0 top, col 0 lhs
  Samples/Pixel: 1
  Rows/Strip: 1
  Planar Configuration: single image plane
  Page Number: 0-1
  DocumentName: test.tiff
  Software: ImageMagick 6.6.0-4 2012-05-02 Q16 http://www.imagemagick.org
$ gdb /usr/bin/evince
[...]
Reading symbols from /usr/bin/evince...(no debugging symbols found)...done.
(gdb) r test.tiff
Starting program: /usr/bin/evince test.tiff
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/libthread_db.so.1".
[New Thread 0x7fffe97cf700 (LWP 14195)]
[New Thread 0x7fffe8fce700 (LWP 14196)]
[New Thread 0x7fffae980700 (LWP 14197)]
**
EvinceDocument:ERROR:/tmp/buildd/evince-2.30.3/./libdocument/ev-document-misc.c:58:ev_document_misc_get_thumbnail_frame: assertion failed: (width_r >= 0 && height_r >= 0)

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7fffe8fce700 (LWP 14196)]
0x00007ffff35481b5 in *__GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64  ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007ffff35481b5 in *__GI_raise (sig=<optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007ffff354afc0 in *__GI_abort () at abort.c:92
#2  0x00007ffff3d745d1 in g_assertion_message () from /lib/libglib-2.0.so.0
#3  0x00007ffff3d74b50 in g_assertion_message_expr () from /lib/libglib-2.0.so.0
#4  0x00007ffff79cebc6 in ev_document_misc_get_thumbnail_frame () from /usr/lib/libevdocument.so.2
#5  0x00007fffe85a76e4 in ?? () from /usr/lib/evince/2/backends/libtiffdocument.so
#6  0x00007ffff779380e in ?? () from /usr/lib/libevview.so.2
#7  0x00007ffff7794860 in ?? () from /usr/lib/libevview.so.2
#8  0x00007ffff3d78784 in ?? () from /lib/libglib-2.0.so.0
#9  0x00007ffff4aa38ca in start_thread (arg=<optimized out>) at pthread_create.c:300
#10 0x00007ffff35e5b6d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#11 0x0000000000000000 in ?? ()


Thanks !


-- System Information:
Debian Release: 6.0.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (200, 'testing'), (100, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-0.bpo.4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages evince depends on:
ii  evince-common      2.30.3-2+squeeze1     Document (PostScript, PDF) viewer 
ii  gconf2             2.28.1-6              GNOME configuration database syste
ii  gnome-icon-theme   2.30.3-2              GNOME Desktop icon theme
ii  libatk1.0-0        1.30.0-1              The ATK accessibility toolkit
ii  libc6              2.11.3-4              Embedded GNU C Library: Shared lib
ii  libcairo2          1.10.2-7~bpo60+1      The Cairo 2D vector graphics libra
ii  libdbus-1-3        1.2.24-4+squeeze1     simple interprocess messaging syst
ii  libdbus-glib-1-2   0.88-2.1              simple interprocess messaging syst
ii  libevince2         2.30.3-2+squeeze1     Document (PostScript, PDF) renderi
ii  libfontconfig1     2.8.0-2.1             generic font configuration library
ii  libfreetype6       2.4.9-1~bpo60+1       FreeType 2 font engine, shared lib
ii  libgconf2-4        2.28.1-6              GNOME configuration database syste
ii  libglib2.0-0       2.24.2-1              The GLib library of C routines
ii  libgnome-keyring0  2.30.1-1              GNOME keyring services library
ii  libgtk2.0-0        2.20.1-2              The GTK+ graphical user interface 
ii  libice6            2:1.0.6-2             X11 Inter-Client Exchange library
ii  libnautilus-extens 2.30.1-2squeeze1      libraries for nautilus components 
ii  libpango1.0-0      1.28.3-1+squeeze2     Layout and rendering of internatio
ii  libsm6             2:1.1.1-1             X11 Session Management library
ii  libx11-6           2:1.3.3-4             X11 client-side library
ii  libxml2            2.7.8.dfsg-2+squeeze5 GNOME XML library
ii  shared-mime-info   0.71-4                FreeDesktop.org shared MIME databa
ii  zlib1g             1:1.2.3.4.dfsg-3      compression library - runtime

Versions of packages evince recommends:
ii  dbus-x11               1.2.24-4+squeeze1 simple interprocess messaging syst
ii  gvfs                   1.6.4-3           userspace virtual filesystem - ser

Versions of packages evince suggests:
ii  nautilus                2.30.1-2squeeze1 file manager and graphical shell f
ii  poppler-data            0.4.3-1          Encoding data for the poppler PDF 
ii  unrar                   1:4.1.4-1        Unarchiver for .rar files (non-fre

-- no debconf information