evince crashed
@hussam
Submitted by Hussam Al-Tayeb Link to original bug (#783765)
Description
Program terminated with signal SIGSEGV, Segmentation fault.
#0 g_type_check_instance_cast (type_instance=type_instance@entry=0x305e430,
iface_type=37685456) at gtype.c:4057
4057 gtype.c: No such file or directory.
[Current thread is 1 (Thread 0x7faf66826940 (LWP 1689))]
(gdb) thread apply all bt full
Thread 9 (Thread 0x7faf4a5ef700 (LWP 14603)):
#0 0x00007faf63504029 in syscall () at /usr/lib/libc.so.6
#1 0x00007faf63d8062a in g_cond_wait_until (cond=cond@entry=0x2433bb8, mutex=mutex@entry=0x2433bb0, end_time=end_time@entry=28083574187)
at gthread-posix.c:1442
now = {tv_sec = 28083, tv_nsec = 74187526}
span = {tv_sec = 0, tv_nsec = 499999474}
sampled = 668
res = <optimized out>
#2 0x00007faf63d0f3b1 in g_async_queue_pop_intern_unlocked (queue=0x2433bb0, wait=wait@entry=1, end_time=28083574187) at gasyncqueue.c:422
retval = <optimized out>
__func__ = "g_async_queue_pop_intern_unlocked"
#3 0x00007faf63d0f9a8 in g_async_queue_timeout_pop_unlocked (queue=<optimized out>, timeout=timeout@entry=500000) at gasyncqueue.c:570
end_time = <optimized out>
#4 0x00007faf63d62e84 in g_thread_pool_wait_for_new_task (pool=<optimized out>) at gthreadpool.c:262
task = <optimized out>
pool = 0x24356d0
#5 0x00007faf63d62e84 in g_thread_pool_thread_proxy (data=<optimized out>)
at gthreadpool.c:296
---Type <return> to continue, or q <return> to quit---
pool = 0x24356d0
#6 0x00007faf63d624e5 in g_thread_proxy (data=0x7faf34004ad0) at gthread.c:784
thread = 0x7faf34004ad0
#7 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#8 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 8 (Thread 0x7faf5a207700 (LWP 1693)):
#0 0x00007faf634fef2d in poll () at /usr/lib/libc.so.6
#1 0x00007faf63d3ae69 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x7faf4c0010c0, timeout=<optimized out>, context=0x2442710)
at gmain.c:4185
poll_func = 0x7faf63d4a370 <g_poll>
max_priority = 2147483647
timeout = -1
some_ready = <optimized out>
nfds = 2
allocated_nfds = 2
fds = 0x7faf4c0010c0
#2 0x00007faf63d3ae69 in g_main_context_iterate (context=0x2442710, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3881
max_priority = 2147483647
timeout = -1
some_ready = <optimized out>
---Type <return> to continue, or q <return> to quit---
nfds = 2
allocated_nfds = 2
fds = 0x7faf4c0010c0
#3 0x00007faf63d3b202 in g_main_loop_run (loop=0x2444610) at gmain.c:4082
__func__ = "g_main_loop_run"
#4 0x00007faf6432b086 in gdbus_shared_thread_func (user_data=0x24411b0)
at gdbusprivate.c:275
data = 0x24411b0
#5 0x00007faf63d624e5 in g_thread_proxy (data=0x23ed770) at gthread.c:784
thread = 0x23ed770
#6 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#7 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 7 (Thread 0x7faf49dee700 (LWP 14602)):
#0 0x00007faf63504029 in syscall () at /usr/lib/libc.so.6
#1 0x00007faf63d8062a in g_cond_wait_until (cond=cond@entry=0x2433bb8, mutex=mutex@entry=0x2433bb0, end_time=end_time@entry=28084046167)
at gthread-posix.c:1442
now = {tv_sec = 28083, tv_nsec = 546168046}
span = {tv_sec = 0, tv_nsec = 499998954}
sampled = 670
res = <optimized out>
#2 0x00007faf63d0f3b1 in g_async_queue_pop_intern_unlocked (queue=0x2433bb0, wa---Type <return> to continue, or q <return> to quit---
it=wait@entry=1, end_time=28084046167) at gasyncqueue.c:422
retval = <optimized out>
__func__ = "g_async_queue_pop_intern_unlocked"
#3 0x00007faf63d0f9a8 in g_async_queue_timeout_pop_unlocked (queue=<optimized out>, timeout=timeout@entry=500000) at gasyncqueue.c:570
end_time = <optimized out>
#4 0x00007faf63d62e84 in g_thread_pool_wait_for_new_task (pool=<optimized out>) at gthreadpool.c:262
task = <optimized out>
pool = 0x24356d0
#5 0x00007faf63d62e84 in g_thread_pool_thread_proxy (data=<optimized out>)
at gthreadpool.c:296
pool = 0x24356d0
#6 0x00007faf63d624e5 in g_thread_proxy (data=0x7faf340048a0) at gthread.c:784
thread = 0x7faf340048a0
#7 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#8 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 6 (Thread 0x7faf4adf0700 (LWP 14604)):
#0 0x00007faf63504029 in syscall () at /usr/lib/libc.so.6
#1 0x00007faf63d8062a in g_cond_wait_until (cond=cond@entry=0x2435738, mutex=mutex@entry=0x2435730, end_time=end_time@entry=28098571269)
at gthread-posix.c:1442
---Type <return> to continue, or q <return> to quit---
now = {tv_sec = 28083, tv_nsec = 571269864}
span = {tv_sec = 14, tv_nsec = 999999136}
sampled = 204
res = <optimized out>
#2 0x00007faf63d0f3b1 in g_async_queue_pop_intern_unlocked (queue=queue@entry=0x2435730, wait=wait@entry=1, end_time=end_time@entry=28098571269)
at gasyncqueue.c:422
retval = <optimized out>
__func__ = "g_async_queue_pop_intern_unlocked"
#3 0x00007faf63d0f96c in g_async_queue_timeout_pop (queue=0x2435730, timeout=timeout@entry=15000000) at gasyncqueue.c:543
end_time = 28098571269
retval = <optimized out>
#4 0x00007faf63d62f8e in g_thread_pool_wait_for_new_pool ()
at gthreadpool.c:167
pool = <optimized out>
local_wakeup_thread_serial = <optimized out>
last_wakeup_thread_serial = <optimized out>
have_relayed_thread_marker = <optimized out>
free_pool = <optimized out>
pool = <optimized out>
#5 0x00007faf63d62f8e in g_thread_pool_thread_proxy (data=<optimized out>)
at gthreadpool.c:364
---Type <return> to continue, or q <return> to quit---
free_pool = <optimized out>
pool = <optimized out>
#6 0x00007faf63d624e5 in g_thread_proxy (data=0x7faf340049e0) at gthread.c:784
thread = 0x7faf340049e0
#7 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#8 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 5 (Thread 0x7faf4bdf2700 (LWP 1698)):
#0 0x00007faf634fef2d in poll () at /usr/lib/libc.so.6
#1 0x00007faf63d3ae69 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7faf440010c0, timeout=<optimized out>, context=0x28b01c0)
at gmain.c:4185
poll_func = 0x7faf63d4a370 <g_poll>
max_priority = 2147483647
timeout = -1
some_ready = <optimized out>
nfds = 1
allocated_nfds = 1
fds = 0x7faf440010c0
#2 0x00007faf63d3ae69 in g_main_context_iterate (context=context@entry=0x28b01c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
at gmain.c:3881
max_priority = 2147483647
---Type <return> to continue, or q <return> to quit---
timeout = -1
some_ready = <optimized out>
nfds = 1
allocated_nfds = 1
fds = 0x7faf440010c0
#3 0x00007faf63d3af7c in g_main_context_iteration (context=0x28b01c0, may_block=1) at gmain.c:3947
retval = <optimized out>
#4 0x00007faf4bdfa55d in () at /usr/lib/gio/modules/libdconfsettings.so
#5 0x00007faf63d624e5 in g_thread_proxy (data=0x28ae8a0) at gthread.c:784
thread = 0x28ae8a0
#6 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#7 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 4 (Thread 0x7faf495ed700 (LWP 14605)):
#0 0x00007faf63504029 in syscall () at /usr/lib/libc.so.6
#1 0x00007faf63d8062a in g_cond_wait_until (cond=cond@entry=0x2433bb8, mutex=mutex@entry=0x2433bb0, end_time=end_time@entry=28084046136)
at gthread-posix.c:1442
now = {tv_sec = 28083, tv_nsec = 546137210}
span = {tv_sec = 0, tv_nsec = 499998790}
sampled = 670
res = <optimized out>
---Type <return> to continue, or q <return> to quit---
#2 0x00007faf63d0f3b1 in g_async_queue_pop_intern_unlocked (queue=0x2433bb0, wait=wait@entry=1, end_time=28084046136) at gasyncqueue.c:422
retval = <optimized out>
__func__ = "g_async_queue_pop_intern_unlocked"
#3 0x00007faf63d0f9a8 in g_async_queue_timeout_pop_unlocked (queue=<optimized out>, timeout=timeout@entry=500000) at gasyncqueue.c:570
end_time = <optimized out>
#4 0x00007faf63d62e84 in g_thread_pool_wait_for_new_task (pool=<optimized out>) at gthreadpool.c:262
task = <optimized out>
pool = 0x24356d0
#5 0x00007faf63d62e84 in g_thread_pool_thread_proxy (data=<optimized out>)
at gthreadpool.c:296
pool = 0x24356d0
#6 0x00007faf63d624e5 in g_thread_proxy (data=0x7faf34004850) at gthread.c:784
thread = 0x7faf34004850
#7 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#8 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 3 (Thread 0x7faf5aa08700 (LWP 1692)):
#0 0x00007faf634fef2d in poll () at /usr/lib/libc.so.6
#1 0x00007faf63d3ae69 in g_main_context_poll (priority=<optimized out>, n_fds=2, fds=0x7faf540008e0, timeout=<optimized out>, context=0x2435820)
---Type <return> to continue, or q <return> to quit---
at gmain.c:4185
poll_func = 0x7faf63d4a370 <g_poll>
max_priority = 2147483647
timeout = -1
some_ready = <optimized out>
nfds = 2
allocated_nfds = 2
fds = 0x7faf540008e0
#2 0x00007faf63d3ae69 in g_main_context_iterate (context=context@entry=0x2435820, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
at gmain.c:3881
max_priority = 2147483647
timeout = -1
some_ready = <optimized out>
nfds = 2
allocated_nfds = 2
fds = 0x7faf540008e0
#3 0x00007faf63d3af7c in g_main_context_iteration (context=0x2435820, may_block=may_block@entry=1) at gmain.c:3947
retval = <optimized out>
#4 0x00007faf63d3afc1 in glib_worker_main (data=<optimized out>)
at gmain.c:5738
#5 0x00007faf63d624e5 in g_thread_proxy (data=0x23ed720) at gthread.c:784
---Type <return> to continue, or q <return> to quit---
thread = 0x23ed720
#6 0x00007faf637c8237 in start_thread () at /usr/lib/libpthread.so.0
#7 0x00007faf63508ecf in clone () at /usr/lib/libc.so.6
Thread 2 (Thread 0x7faf327fc700 (LWP 1708)):
#0 0x00007faf318dfa1f in Annots::createAnnot(Dict*, Object*) (this=0x7faf21cef620, dict=0x7faf21b33890, obj=0x7faf327fba80) at Annot.cc:7194
annot = 0x0
obj1 =
{type = objName, {booln = false, intg = 603373312, int64g = 140390199377664, real = 6.9361974525306933e-310, string = 0x7faf23f6bf00, name = 0x7faf23f6bf00 "Link", array = 0x7faf23f6bf00, dict = 0x7faf23f6bf00, stream = 0x7faf23f6bf00, ref = {num = 603373312, gen = 32687}, cmd = 0x7faf23f6bf00 "Link"}}
#1 0x00007faf318e0124 in Annots::~Annots() (this=0x7faf319d3d8e, __in_chrg=<optimized out>) at Annot.cc:7272
#2 0x00007faf21b5f9e0 in ()
#3 0x0103000400000007 in ()
#4 0x00007faf21b33890 in ()
#5 0x0000000000000009 in ()
#6 0x0000000000002e8f in ()
#7 0x00007faf327fbae0 in ()
#8 0x5fa85bf08b50c200 in ()
#9 0x00007faf21c12600 in ()
---Type <return> to continue, or q <return> to quit---
#10 0x00007faf21e230e0 in ()
#11 0x00007faf327fbae0 in ()
#12 0x00007faf21cef620 in ()
#13 0x00007faf327fbae0 in ()
#14 0x0000000002fcd540 in ()
#15 0x00007faf21c12600 in ()
#16 0x00007faf319555aa in Page::addAnnot(Annot*) (this=0x7faf21cef620, annot=0x7faf327fbae0) at Page.cc:455
obj1 =
{type = objArray, {booln = 32, intg = 569042976, int64g = 140390165047328, real = 6.9361957563867305e-310, string = 0x7faf21eae820, name = 0x7faf21eae820 "04\341!\257\177", array = 0x7faf21eae820, dict = 0x7faf21eae820, stream = 0x7faf21eae820, ref = {num = 569042976, gen = 32687}, cmd = 0x7faf21eae820 "04\341!\257\177"}}
tmp =
{type = objBool, {booln = false, intg = -1957641728, int64g = 6892860318378148352, real = 6.3789581882664757e+152, string = 0x5fa85bf08b50c200, name = 0x5fa85bf08b50c200 <error: Cannot access memory at address 0x5fa85bf08b50c200>, array = 0x5fa85bf08b50c200, dict = 0x5fa85bf08b50c200, stream = 0x5fa85bf08b50c200, ref = {num = -1957641728, gen = 1604869104}, cmd = 0x5fa85bf08b50c200 <error: Cannot access memory at address 0x5fa85bf08b50c200>}}
annotRef = {num = 7, gen = <optimized out>}
locker = {mutex = 0xd}
---Type <return> to continue, or q <return> to quit---
annotMarkup = <optimized out>
#17 0x00007faf2005a380 in ()
#18 0x00007faf210f3380 in ()
#19 0x5fa85bf08b50c200 in ()
#20 0x00000000028ae990 in ()
#21 0x0000000002fcd540 in ()
#22 0x00000000028ae990 in ()
#23 0x00007faf21c12600 in ()
#24 0x0000000000000000 in ()
Thread 1 (Thread 0x7faf66826940 (LWP 1689)):
#0 0x00007faf6403a542 in g_type_check_instance_cast (type_instance=type_instance@entry=0x305e430, iface_type=37685456) at gtype.c:4057
is_instantiatable = <optimized out>
check = <optimized out>
#1 0x0000000000449af6 in ev_page_action_widget_set_document (action_widget=0x305e430, document=0x7faf20022880 [PdfDocument]) at ev-page-action-widget.c:261
#5 0x00007faf640305af in <emit signal notify:document on instance 0x25c5240 [EvDocumentModel]> (instance=instance@entry=0x25c5240, signal_id=<optimized out>, detail=<optimized out>) at gsignal.c:3447
var_args =
{{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7ffc32602120, reg_save_area = 0x7ffc32602060}}
---Type <return> to continue, or q <return> to quit---
#2 0x00007faf640138ad in g_closure_invoke (closure=0x2fc53a0, return_value=0x0, n_param_values=2, param_values=0x7ffc32601e70, invocation_hint=0x7ffc32601df0) at gclosure.c:804
marshal = 0x7faf64016500 <g_cclosure_marshal_VOID__PARAM>
marshal_data = 0x0
in_marshal = 0
real_closure = 0x2fc5380
__func__ = "g_closure_invoke"
#3 0x00007faf640270ce in signal_emit_unlocked_R (node=node@entry=0x23c58f0, detail=detail@entry=1432, instance=instance@entry=0x25c5240, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7ffc32601e70) at gsignal.c:3635
tmp = <optimized out>
handler = 0x3164300
accumulator = 0x0
emission =
{next = 0x7ffc326022e0, instance = 0x25c5240, ihint = {signal_id = 1, detail = 1432, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
handler_list = 0x2bc1d40
return_accu = 0x0
accu =
{g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v---Type <return> to continue, or q <return> to quit---
_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
signal_id = 1
max_sequential_handler_number = 3569922
return_value_altered = 1
#4 0x00007faf6402fb95 in g_signal_emit_valist (instance=0x25c5240, signal_id=<optimized out>, detail=1432, var_args=var_args@entry=0x7ffc32602040)
at gsignal.c:3391
instance_and_params = 0x7ffc32601e70
signal_return_type = 4
param_values = 0x7ffc32601e88
i = <optimized out>
n_params = 1
__func__ = "g_signal_emit_valist"
#6 0x00007faf64017e74 in g_object_dispatch_properties_changed (object=0x25c5240 [EvDocumentModel], n_pspecs=<optimized out>, pspecs=<optimized out>)
at gobject.c:1064
i = <optimized out>
#7 0x00007faf6401a409 in g_object_notify_by_spec_internal (pspec=0x2548020 [GParamObject], object=0x25c5240 [EvDocumentModel]) at gobject.c:1157
nqueue = <optimized out>
notify_pspec = 0x2548020 [GParamObject]
---Type <return> to continue, or q <return> to quit---
pspec = 0x2548020 [GParamObject]
__func__ = "g_object_notify"
#8 0x00007faf6401a409 in g_object_notify (object=0x25c5240 [EvDocumentModel], property_name=property_name@entry=0x7faf662a5294 "document") at gobject.c:1205
pspec = 0x2548020 [GParamObject]
__func__ = "g_object_notify"
#9 0x00007faf6627ab25 in ev_document_model_set_document (model=<optimized out>, document=<optimized out>) at ev-document-model.c:381
__func__ = "ev_document_model_set_document"
#10 0x00000000004320dc in ev_window_reload_job_cb (job=0x7faf3c002c50 [EvJobLoad], ev_window=0x253c6f0 [EvWindow]) at ev-window.c:1779
ev_window = 0x253c6f0 [EvWindow]
job = 0x7faf3c002c50 [EvJobLoad]
#14 0x00007faf640305af in <emit signal ??? on instance 0x7faf3c002c50 [EvJobLoad]> (instance=<optimized out>, signal_id=<optimized out>, detail=detail@entry=0)
at gsignal.c:3447
var_args =
{{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7ffc32602610, reg_save_area = 0x7ffc32602550}}
#11 0x00007faf640138ad in g_closure_invoke (closure=0x31a0320, return_value=0x0, n_param_values=1, param_values=0x7ffc32602370, invocation_hint=0x7ffc326022f0) at gclosure.c:804
marshal = 0x41b980 <g_cclosure_marshal_VOID(int13_t &&) volatile---Type <return> to continue, or q <return> to quit---
@plt>
marshal_data = 0x0
in_marshal = 0
real_closure = 0x31a0300
__func__ = "g_closure_invoke"
#12 0x00007faf640270ce in signal_emit_unlocked_R (node=node@entry=0x2a55460, detail=detail@entry=0, instance=instance@entry=0x7faf3c002c50, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7ffc32602370) at gsignal.c:3635
tmp = <optimized out>
handler = 0x3193680
accumulator = 0x0
emission =
{next = 0x0, instance = 0x7faf3c002c50, ihint = {signal_id = 420, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
handler_list = 0x3193680
return_accu = 0x0
accu =
{g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
---Type <return> to continue, or q <return> to quit---
signal_id = 420
max_sequential_handler_number = 3569922
return_value_altered = 1
#13 0x00007faf6402fb95 in g_signal_emit_valist (instance=0x7faf3c002c50, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7ffc32602530)
at gsignal.c:3391
instance_and_params = 0x7ffc32602370
signal_return_type = 4
param_values = 0x7ffc32602388
i = <optimized out>
n_params = 0
__func__ = "g_signal_emit_valist"
#15 0x00007faf6627cf53 in emit_finished (job=<optimized out>) at ev-jobs.c:181
job = <optimized out>
#16 0x00007faf63d3ab25 in g_main_dispatch (context=0x23f26b0) at gmain.c:3148
dispatch = 0x7faf63d37460 <g_idle_dispatch>
prev_source = 0x0
was_in_call = 0
user_data = 0x7faf3c002c50
callback = 0x7faf6627cf30 <emit_finished>
cb_funcs = 0x7faf64002920 <g_source_callback_funcs>
cb_data = 0x7faf21a26820
need_destroy = <optimized out>
---Type <return> to continue, or q <return> to quit---
source = 0x7faf21ede8a0
current = 0x2429f60
i = 0
#17 0x00007faf63d3ab25 in g_main_context_dispatch (context=context@entry=0x23f26b0) at gmain.c:3813
#18 0x00007faf63d3aee8 in g_main_context_iterate (context=context@entry=0x23f26b0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
at gmain.c:3886
max_priority = 2147483647
timeout = 178
some_ready = 1
nfds = <optimized out>
allocated_nfds = 3
fds = 0x2473160
#19 0x00007faf63d3af7c in g_main_context_iteration (context=context@entry=0x23f26b0, may_block=may_block@entry=1) at gmain.c:3947
retval = <optimized out>
#20 0x00007faf642fdcbd in g_application_run (application=0x26060d0 [EvApplication], argc=argc@entry=0, argv=argv@entry=0x0) at gapplication.c:2378
arguments = 0x2473160
status = 0
context = 0x23f26b0
acquired_context = <optimized out>
---Type <return> to continue, or q <return> to quit---
__func__ = "g_application_run"
#21 0x000000000041d1be in main (argc=<optimized out>, argv=<optimized out>)
at main.c:316
application = 0x26060d0 [EvApplication]
context = <optimized out>
error = 0x0
status = <optimized out>
Version: git master