Bug#770673: evince: SIGSEGV when pdf file is changed while viewed

Sun Nov 23 08:27:55 UTC 2014

Package: evince
Version: 3.14.1-1
Severity: normal

Hi,

from time to time I saw evince crashing with SIGSEGV when viewing a
pdf file which is at the same time recreated by a LaTeX compilation.

To further look into that issue, I used the following test sequence:

 * open 'some.pdf' file in evince
 * make a copy 'copy.pdf' of the pdf file
 * run "while true; do cat copy.pdf > some.pdf; done"
 * wait a few seconds --> SIGSEGV

Attached is the gdb session including a backtrace.

Best regards,

     Andi

-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages evince depends on:
ii  evince-common              3.14.1-1
ii  gnome-icon-theme-symbolic  3.12.0-1
ii  libatk1.0-0                2.14.0-1
ii  libc6                      2.19-13
ii  libcairo-gobject2          1.14.0-2.1
ii  libcairo2                  1.14.0-2.1
ii  libevdocument3-4           3.14.1-1
ii  libevview3-3               3.14.1-1
ii  libgdk-pixbuf2.0-0         2.31.1-2+b1
ii  libglib2.0-0               2.42.0-2
ii  libgtk-3-0                 3.14.4-2
ii  libnautilus-extension1a    3.14.0-1
ii  libpango-1.0-0             1.36.8-2
ii  libpangocairo-1.0-0        1.36.8-2
ii  libsecret-1-0              0.18-1+b1
ii  libxml2                    2.9.1+dfsg1-4
ii  shared-mime-info           1.3-1
ii  zlib1g                     1:1.2.8.dfsg-2

Versions of packages evince recommends:
ii  dbus-x11  1.8.10-1
ii  gvfs      1.22.1-1

Versions of packages evince suggests:
pn  nautilus      <none>
ii  poppler-data  0.4.7-1
pn  unrar         <none>

-- no debconf information
-------------- next part --------------
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from evince...Reading symbols from /usr/lib/debug//usr/bin/evince...done.
done.
(gdb) run
Starting program: /usr/bin/evince 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffee0be700 (LWP 12475)]
[New Thread 0x7fffed8bd700 (LWP 12476)]
[New Thread 0x7fffed0bc700 (LWP 12477)]
[New Thread 0x7fffdffff700 (LWP 12478)]
[New Thread 0x7fffdf7fe700 (LWP 12479)]
[New Thread 0x7fffde6e2700 (LWP 12480)]
[Thread 0x7fffed8bd700 (LWP 12476) exited]
[Thread 0x7fffdf7fe700 (LWP 12479) exited]
[New Thread 0x7fffdf7fe700 (LWP 12506)]
[New Thread 0x7fffed8bd700 (LWP 12508)]
[New Thread 0x7fffcffff700 (LWP 12509)]
[Thread 0x7fffcffff700 (LWP 12509) exited]
[Thread 0x7fffed8bd700 (LWP 12508) exited]
[Thread 0x7fffdf7fe700 (LWP 12506) exited]
[New Thread 0x7fffdf7fe700 (LWP 12517)]
[New Thread 0x7fffed8bd700 (LWP 12521)]
[New Thread 0x7fffcffff700 (LWP 12522)]
[New Thread 0x7fffcf7fe700 (LWP 12523)]
[New Thread 0x7fffceffd700 (LWP 12524)]
[New Thread 0x7fffce7fc700 (LWP 12525)]
[New Thread 0x7fffcdffb700 (LWP 12526)]
[New Thread 0x7fffcd7fa700 (LWP 12527)]
[New Thread 0x7fffccff9700 (LWP 12528)]
[New Thread 0x7fffbffff700 (LWP 12529)]
[Thread 0x7fffcffff700 (LWP 12522) exited]
[Thread 0x7fffcdffb700 (LWP 12526) exited]
[Thread 0x7fffcd7fa700 (LWP 12527) exited]
[Thread 0x7fffce7fc700 (LWP 12525) exited]
[Thread 0x7fffcf7fe700 (LWP 12523) exited]
[Thread 0x7fffceffd700 (LWP 12524) exited]
[Thread 0x7fffdf7fe700 (LWP 12517) exited]
[Thread 0x7fffbffff700 (LWP 12529) exited]
[Thread 0x7fffed8bd700 (LWP 12521) exited]

Program received signal SIGSEGV, Segmentation fault.
__GI___libc_free (mem=0x3037312d363631) at malloc.c:2929
(gdb) bt
#0  __GI___libc_free (mem=0x3037312d363631) at malloc.c:2929
#1  0x00007ffff797bdc4 in ev_view_build_height_to_page_cache (view=view at entry=0x7622e0, 
    cache=cache at entry=0xd3d3b0) at /tmp/buildd/evince-3.14.1/./libview/ev-view.c:313
#2  0x00007ffff797d7b7 in ev_view_get_height_to_page (dual_height=0x0, height=<synthetic pointer>, page=0, 
    view=0x7622e0) at /tmp/buildd/evince-3.14.1/./libview/ev-view.c:439
#3  get_page_y_offset (view=view at entry=0x7622e0, page=0, y_offset=y_offset at entry=0x762374)
    at /tmp/buildd/evince-3.14.1/./libview/ev-view.c:1202
#4  0x00007ffff797e9c6 in ev_view_size_request_continuous (requisition=0x762370, view=0x7622e0)
    at /tmp/buildd/evince-3.14.1/./libview/ev-view.c:3721
#5  ev_view_size_request (widget=widget at entry=0x7622e0, requisition=requisition at entry=0x7fffffffb4a0)
    at /tmp/buildd/evince-3.14.1/./libview/ev-view.c:3836
#6  0x00007ffff79857d4 in ev_view_size_allocate (widget=0x7622e0, allocation=0x7fffffffb9a0)
    at /tmp/buildd/evince-3.14.1/./libview/ev-view.c:3898
#7  0x00007ffff509f19f in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#8  0x00007ffff50b080b in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#9  0x00007ffff50b9748 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#10 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#11 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#12 0x00007ffff6f97b6b in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#13 0x00007ffff6f989b8 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#14 0x00007ffff50a2223 in g_cclosure_marshal_VOID__BOXEDv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#15 0x00007ffff509f3c2 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#16 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#17 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#18 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#19 0x00007ffff6e27a64 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#20 0x00007ffff6f5765b in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#21 0x00007ffff50a2223 in g_cclosure_marshal_VOID__BOXEDv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#22 0x00007ffff509f3c2 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#23 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#24 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#25 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#26 0x00007ffff6e2e15d in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#27 0x00007ffff50a2223 in g_cclosure_marshal_VOID__BOXEDv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#28 0x00007ffff509f3c2 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#29 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#30 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#31 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#32 0x00007ffff6f5af62 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#33 0x00007ffff50a2223 in g_cclosure_marshal_VOID__BOXEDv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#34 0x00007ffff509f3c2 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#35 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#36 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#37 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#38 0x00007ffff6e2e15d in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#39 0x00007ffff50a2223 in g_cclosure_marshal_VOID__BOXEDv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#40 0x00007ffff509f3c2 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#41 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#42 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#43 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#44 0x00007ffff706e253 in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#45 0x00007ffff6e20c7d in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#46 0x00007ffff509f245 in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#47 0x00007ffff50b080b in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#48 0x00007ffff50b9748 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#49 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#50 0x00007ffff7057ba7 in gtk_widget_size_allocate_with_baseline ()
   from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#51 0x00007ffff706853f in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#52 0x00007ffff509f474 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#53 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#54 0x00007ffff50b99af in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#55 0x00007ffff6e7212c in ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
#56 0x00007ffff509f474 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#57 0x00007ffff50b9057 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#58 0x00007ffff50b9efa in g_signal_emit_by_name () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#59 0x00007ffff6aa5974 in ?? () from /usr/lib/x86_64-linux-gnu/libgdk-3.so.0
#60 0x00007ffff6a97e78 in ?? () from /usr/lib/x86_64-linux-gnu/libgdk-3.so.0
#61 0x00007ffff4dca613 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#62 0x00007ffff4dc9b6d in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#63 0x00007ffff4dc9f48 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#64 0x00007ffff4dc9ffc in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#65 0x00007ffff53871bc in g_application_run () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
#66 0x000000000041c512 in main (argc=1, argv=0x7fffffffe3a8) at /tmp/buildd/evince-3.14.1/./shell/main.c:316
(gdb) cont
Continuing.
[Thread 0x7fffde6e2700 (LWP 12480) exited]
[Thread 0x7fffdffff700 (LWP 12478) exited]
[Thread 0x7fffed0bc700 (LWP 12477) exited]
[Thread 0x7fffee0be700 (LWP 12475) exited]
[Thread 0x7ffff7fc5980 (LWP 12471) exited]

Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.
(gdb) q