Bug 5101 - crash in GfxImageColorMap::getRGBLine()
Summary: crash in GfxImageColorMap::getRGBLine()
Status: RESOLVED DUPLICATE of bug 4350
Alias: None
Product: poppler
Classification: Unclassified
Component: general (show other bugs)
Version: unspecified
Hardware: x86 (IA32) Linux (All)
: high critical
Assignee: Kristian Høgsberg
QA Contact:
URL: http://www.keynotepro.com/images/them...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-11-20 08:49 UTC by Christian Kirbach
Modified: 2005-11-20 15:17 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments

Description Christian Kirbach 2005-11-20 08:49:39 UTC
= Transfering this bug from GNOME Bugzilla: http://bugzilla.gnome.org/show_bug.
cgi?id=318778 =

Reporter: vincent.noel@gmail.com (Vincent Noel) 

The PDF showing a sample of the Sonoma template for pages
http://www.keynotepro.com/images/themes/Sonoma_Pages/Sonoma-SampleBrochure.pdf
is not rendered correctly in evince.

This PDF is very, very heavily loaded with images.

------- Additional Comment #1 From Christian Kirbach 2005-11-19 21:37 UTC ------
- 

I can reproduce.Confimring. not sure if it is libpoppler or evince's fault, here 
ist the stack trace.

Backtrace was generated from '/opt/gnome2/bin/evince'

Using host libthread_db library "/lib/tls/libthread_db.so.1".
`system-supplied DSO at 0xffffe000' has disappeared; keeping its symbols.
[Thread debugging using libthread_db enabled]
[New Thread -1228343072 (LWP 5194)]
[New Thread -1230566480 (LWP 5195)]
0xb72e65a9 in poll () from /lib/tls/libc.so.6
#0  0xb72e65a9 in poll () from /lib/tls/libc.so.6
#1  0xb73f8a64 in g_main_context_iterate (context=0x80d5248, block=1, 
    dispatch=1, self=0x80a8308) at gmain.c:2867
#2  0xb73f8f07 in IA__g_main_loop_run (loop=0x81671e8) at gmain.c:2769
#3  0xb7a799f3 in IA__gtk_main () at gtkmain.c:985
#4  0x08075cbd in main (argc=501, argv=0x1f5) at main.c:295

Thread 2 (Thread -1230566480 (LWP 5195)):
#0  0xb7362201 in __waitpid_nocancel () from /lib/tls/libpthread.so.0
No symbol table info available.
#1  0xb7f2dd2d in libgnomeui_segv_handle (signum=-512) at gnome-ui-init.c:749
estatus = -1228339808
in_segv = 1
sa = {__sigaction_handler = {sa_handler = 0, sa_sigaction = 0}, 
  sa_mask = {__val = {65517, 65518, 65519, 65520, 65521, 65522, 65523, 65524, 
      65525, 65526, 65527, 65528, 65529, 65530, 65531, 65532, 65533, 65534, 
      3070606556, 121387641, 3070607803, 225011984, 69, 3072467788, 
      3072502300, 3072523118, 408, 0, 0, 135183944, 3064332290, 3076669820}}, 
  sa_flags = 137824512, sa_restorer = 0x8366030}
pid = #0  0xb72e65a9 in poll () from /lib/tls/libc.so.6

------- Additional Comment #2 From Christian Kirbach 2005-11-19 21:44 UTC ------
- 

hmm this trace is slightly better....

(gdb) thread apply all bt

Thread 2 (Thread -1230861392 (LWP 5228)):
#0  0xb757f1d2 in GfxImageColorMap::getRGBLine (this=0x83c6080,
    in=0x83c6f40 
"ppqqrrrrrrutrsrssstsssvuvuvuvvtttttuuvvwwwwwwwxww
uxwvxuuxyzwxyxxxww"...,
    out=0xb5b02008, length=849) at GfxState.cc:3449
#1  0xb7555d88 in CairoOutputDev::drawImage (this=0x8366020, state=0x83ae200, 
ref=0xb6a2809c, str=0x83c56e8,
    width=849, height=565, colorMap=0x83c6080, maskColors=0x0, inlineImg=0) at 
CairoOutputDev.cc:561
#2  0xb75698a6 in Gfx::doImage (this=0x838c5b8, ref=0xb6a2809c, str=0x83c56e8, 
inlineImg=0) at Gfx.cc:3214
#3  0xb756c6df in Gfx::opXObject (this=0x838c5b8, args=0xb6a28160, numArgs=1) at 
Gfx.cc:2893
#4  0xb756787d in Gfx::execOp (this=0x838c5b8, cmd=0xd, args=0xb6a28160, 
numArgs=Variable "numArgs" is not available.
) at Gfx.cc:705
#5  0xb7567b22 in Gfx::go (this=0x838c5b8, topLevel=1) at Gfx.cc:575
#6  0xb7568673 in Gfx::display (this=0x838c5b8, obj=0xb6a28240, topLevel=1) at 
Gfx.cc:542
#7  0xb75af552 in Page::displaySlice (this=0x8371c00, out=0x8366020, hDPI=66.
470589637756348,
    vDPI=66.470589637756348, rotate=0, useMediaBox=0, crop=1, sliceX=0, 
sliceY=0, sliceW=565, sliceH=731,
    links=0x0, catalog=0x8365fa0, abortCheckCbk=0, abortCheckCbkData=0x0, 
annotDisplayDecideCbk=0,
    annotDisplayDecideCbkData=0x0) at Page.cc:360
#8  0xb764b2d2 in poppler_page_render_to_pixbuf (page=0x83883e8, src_x=0, 
src_y=0, src_width=565,
    src_height=731, scale=0.92320263385772705, rotation=0, pixbuf=0x83888f8) at 
poppler-page.cc:308
#9  0x0808e9bf in pdf_document_render_pixbuf (document=0x831d318, rc=0x8299370) 
at ev-poppler.cc:350
#10 0x080847d0 in ev_document_render_pixbuf (document=0x831d318, rc=0xd) at ev-
document.c:215
#11 0x0805b85f in ev_job_render_run (job=0x8354f68) at ev-jobs.c:298
#12 0x0805a1f2 in handle_job (job=0x8354f68) at ev-job-queue.c:104
#13 0x0805a310 in ev_render_thread (data=0x0) at ev-job-queue.c:187
#14 0xb73caf81 in g_thread_create_proxy (data=0x80ec8c8) at gthread.c:564
#15 0xb7314ccd in start_thread () from /lib/tls/libpthread.so.0
#16 0xb72a8b0e in clone () from /lib/tls/libc.so.6

---Type <return> to continue, or q <return> to quit---
Thread 1 (Thread -1228637984 (LWP 5225)):
#0  0xb729e5a9 in poll () from /lib/tls/libc.so.6
#1  0xb73b0a64 in g_main_context_iterate (context=0x80d5228, block=1, 
dispatch=1, self=0x80a8e48) at gmain.c:2867
#2  0xb73b0f07 in IA__g_main_loop_run (loop=0x83258a8) at gmain.c:2769
#3  0xb7a319f3 in IA__gtk_main () at gtkmain.c:985
#4  0x08075cbd in main (argc=420, argv=0x1a4) at main.c:295
0xb757f1d2      3449            *inp = byte_lookup[*inp * nComps + i];


(gdb) thread apply all bt full

Thread 2 (Thread -1230861392 (LWP 5228)):
#0  0xb757f1d2 in GfxImageColorMap::getRGBLine (this=0x83c6080,
    in=0x83c6f40 
"p&#65535;&#65535;p&#65535;&#65535;q&#65535;&#65535;q&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;u&#65535;&#65535;t&#65535;&#65535;r&#65535;&#65535;s&#65535;&#65535;r&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;t&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;v&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;v&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;u&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;v&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;x&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;
u&#65535;&#65535;x&#65535;&#65535;w&#65535;&#65535;v&#65535;&#65535;x&#65535;&#65535;u&#65535;&#65535;u&#65535;&#65535;x&#65535;&#65535;y&#65535;&#65535;z&#65535;&#65535;w&#65535;&#65535;x&#65535;&#65535;y&#65535;&#65535;x&#65535;&#65535;x&#65535;&#65535;x&#65535;&#65535;w&#65535;&#65535;w&#65535;"...,
    out=0xb5b02008, length=849) at GfxState.cc:3449
        i = 0
        j = 0
        inp = (
    Guchar *) 0x83c6f40 
"p&#65535;&#65535;p&#65535;&#65535;q&#65535;&#65535;q&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;r&#65535;&#65535;u&#65535;&#65535;t&#65535;&#65535;r&#65535;&#65535;s&#65535;&#65535;r&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;t&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;s&#65535;&#65535;v&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;v&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;t&#65535;&#65535;u&#65535;&#65535;u&#65535;&#65535;v&#65535;&#65535;v&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;x&#65535;&#65535;w&#65535;&#65535;w&#65535;&#65535;
u&#65535;&#65535;x&#65535;&#65535;w&#65535;&#65535;v&#65535;&#65535;x&#65535;&#65535;u&#65535;&#65535;u&#65535;&#65535;x&#65535;&#65535;y&#65535;&#65535;z&#65535;&#65535;w&#65535;&#65535;x&#65535;&#65535;y&#65535;&#65535;x&#65535;&#65535;x&#65535;&#65535;x&#65535;&#65535;w&#65535;&#65535;w&#65535;"...
        tmp_line = Variable "tmp_line" is not available.
Comment 1 Kristian Høgsberg 2005-11-21 10:17:38 UTC
This is a dupe of bug 4350, which should be fixed on CVS HEAD.  Please give that
a try, thanks.


*** This bug has been marked as a duplicate of 4350 ***


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.