Bug#768475: evince: segfault on trying to open a pdf

[Lennert Van Alboom]

I can confirm this happens with *all* pdfs I have tried (20+). I can attach an
example if you want, but that'd just be doing a find / -name *.pdf | head -1
so I'm not sure it matters :-)


Backtrace as requested:

[alver at Crusoe ~]$ gdb evince
GNU gdb (Debian 7.7.1+dfsg-3) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from evince...(no debugging symbols found)...done.
(gdb) run altairz80_doc.pdf
Starting program: /usr/bin/evince altairz80_doc.pdf
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffee08d700 (LWP 30810)]
[New Thread 0x7fffed88c700 (LWP 30811)]
[New Thread 0x7fffec974700 (LWP 30816)]
[New Thread 0x7fffdfd04700 (LWP 30817)]
[New Thread 0x7fffdf2e3700 (LWP 30818)]
[New Thread 0x7fffdeae2700 (LWP 30819)]
[New Thread 0x7fffde2e1700 (LWP 30820)]
[New Thread 0x7fffddae0700 (LWP 30821)]
[New Thread 0x7fffdd2df700 (LWP 30822)]
[New Thread 0x7fffdcade700 (LWP 30823)]
[New Thread 0x7fffc7fff700 (LWP 30824)]
[New Thread 0x7fffc77fe700 (LWP 30825)]
[New Thread 0x7fffc6ffd700 (LWP 30826)]

(evince:30806): EvinceDocument-WARNING **: /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8: undefined symbol: _ZN7GfxFont16getAlternateNameEPKc

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffc6ffd700 (LWP 30826)]
0x000000000001f576 in ?? ()
(gdb) bt full
#0  0x000000000001f576 in ?? ()
No symbol table info available.
#1  0x00007fffc65c5637 in poppler_document_new_from_file () from /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8
No symbol table info available.
#2  0x00007fffdc0d7a2b in ?? () from /usr/lib/evince/4/backends/libpdfdocument.so
No symbol table info available.
#3  0x00007ffff7bb7ef7 in ev_document_load () from /usr/lib/libevdocument3.so.4
No symbol table info available.
#4  0x00007ffff7bb9cfb in ev_document_factory_get_document () from /usr/lib/libevdocument3.so.4
No symbol table info available.
#5  0x00007ffff796ac6d in ?? () from /usr/lib/libevview3.so.3
No symbol table info available.
#6  0x00007ffff796c1ea in ?? () from /usr/lib/libevview3.so.3
No symbol table info available.
#7  0x00007ffff4df3925 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#8  0x00007ffff46520a4 in start_thread (arg=0x7fffc6ffd700) at pthread_create.c:309
        __res = <optimized out>
        pd = 0x7fffc6ffd700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140736532043520, -2297013931208070973, 1, 140737354125408, 140737301657808, 140736532043520, 
                2297064510323173571, 2297035052063795395}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, 
              cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#9  0x00007ffff4387c2d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.
(gdb) quit
A debugging session is active.

    Inferior 1 [process 30806] will be killed.

Quit anyway? (y or n) y

[alver at Crusoe ~]$ dpkg -l evince
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                            Version              Architecture         Description
+++-===============================-====================-====================-====================================================================
ii  evince                          3.14.1-1             amd64                Document (PostScript, PDF) viewer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20141108/57d964ad/attachment.sig>