Bug 19024

Created attachment 21065 [details]
PDF document that crashes poppler

The attached PDF file, an application note from Texas Instruments, crashes Evince, epdfview, and Okular when it is opened.

I am running Gentoo Linux (~x86) and using poppler 0.10.2 and Evince 2.24.2, Linux 2.6.27-gentoo-r4 and gcc version 4.3.2.


The backtrace from Evince is:
--------------------------------------------------------------------------
cdb@gamma ~/evince $ gdb --args evince CC2430_Power_Mode_Entry_AN.pdf
GNU gdb 6.8
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...
(gdb) run
Starting program: /usr/bin/evince CC2430_Power_Mode_Entry_AN.pdf
[Thread debugging using libthread_db enabled]
[New Thread 0xb7d2e700 (LWP 15372)]

** (evince:15372): WARNING **: Failed to create dbus proxy for org.gnome.SettingsDaemon: Could not get owner of name 'org.gnome.SettingsDaemon': no such name
[New Thread 0xb683db90 (LWP 15375)]
[New Thread 0xb5f52b90 (LWP 15376)]
Error (0): Call to Object where the object was type 5, not the expected type 9

Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb683db90 (LWP 15375)]
0xb7f66424 in __kernel_vsyscall ()
(gdb) bt
#0  0xb7f66424 in __kernel_vsyscall ()
#1  0x47ebe670 in *__GI_raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2  0x47ebfeb8 in *__GI_abort () at abort.c:88
#3  0xb7e03747 in OutlineItem::readItemList (firstItemRef=0x94cf6a0, lastItemRef=0x94cf6ac, xrefA=0x94cebb8)
    at Object.h:198
#4  0xb7e037e8 in OutlineItem::open (this=0x94cf690) at Outline.cc:162
#5  0xb7f0f8fb in poppler_index_iter_get_child (parent=0x95c3580) at poppler-document.cc:988
#6  0xb7f5feb1 in build_tree (pdf_document=0x94aa650, model=0x9620688, parent=0x0, iter=0x95c3580)
    at ev-poppler.cc:1075
#7  0xb7f60061 in pdf_document_links_get_links_model (document_links=0x94aa650) at ev-poppler.cc:1101
#8  0xb7f37fe3 in ev_document_links_get_links_model (document_links=0x94aa650) at ev-document-links.c:65
#9  0x08061e0f in ev_job_links_run (job=0x94f4860) at ev-jobs.c:333
#10 0x08061420 in ev_job_thread_proxy (data=0x0) at ev-job-scheduler.c:183
#11 0x4843731f in g_thread_create_proxy (data=0x94a89f8) at gthread.c:635
#12 0x4800e170 in start_thread (arg=0xb683db90) at pthread_create.c:297
#13 0x47f62b9e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
(gdb) 
--------------------------------------------------------------------------