Bug#974937: evince: crashes then runs

[Bernhard Übelacker]

Dear Maintainer,
I am sorry but I missed the offset of 42 in the kernel output,
which shows 42 bytes before the crashing instruction marked with "< >".
The location where the crash happened would therefore
not be in line 351, instead it would be in 355.

    0x00438186 <+102>:   push   0x14(%ebp)

That matches also the last three digits in ip value in the kernel output.

Then, based on the 0x14, the assumption would be that the priv
pointer might have contained an invalid value.
The segfaulting address is at 0xfffffdd4 kind of near 0.
Therefore might here private pointer "below" the ev_recent_view pointer by 0x240,
and ev_recent_view be a null pointer in this crash?

But still a proper backtrace would be helpful.

Kind regards,
Bernhard


https://gitlab.gnome.org/GNOME/evince/-/blob/master/shell/ev-recent-view.c#L355

355         gnome_desktop_thumbnail_factory_save_thumbnail (priv->thumbnail_factory,
356                                                         thumbnail, data->uri, data->mtime);

(gdb) print &((EvRecentViewPrivate *)0)->thumbnail_factory
$2 = (GnomeDesktopThumbnailFactory **) 0x14