registry team mailing list archive
-
registry team
-
Mailing list archive
-
Message #15023
[Bug 124547] Re: evince crash: _cairo_pen_find_active_cw_vertex_index: Assertion `i < pen->num_vertices' failed
Launchpad has imported 5 comments from the remote bug at
http://bugs.freedesktop.org/show_bug.cgi?id=10598.
If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.
------------------------------------------------------------------------
On 2007-04-10T04:53:34+00:00 Michael Chudobiak wrote:
gThumb crashes when viewing an svg file, due to a crash in cairo svg
rendering.
The original bug reports are here:
http://bugzilla.gnome.org/show_bug.cgi?id=424199 (has svg file)
http://bugzilla.gnome.org/show_bug.cgi?id=428208 (best stacktrace)
The backtrace:
Distribution: Fedora Core release 6 (Zod)
Gnome Release: 2.16.3 2007-01-31 (Red Hat, Inc)
BugBuddy Version: 2.16.0
System: Linux 2.6.19-1.2911.fc6 #1 SMP Sat Feb 10 15:51:47 EST 2007 i686
X Vendor: The XFree86 Project, Inc
X Vendor Release: 40300000
Selinux: No
Accessibility: Disabled
Memory status: size: 133980160 vsize: 0 resident: 133980160 share: 0 rss:
44367872 rss_rlim: 0
CPU usage: start_time: 1176205406 rtime: 0 utime: 260 stime: 0 cutime:233
cstime: 0 timeout: 27 it_real_value: 0 frequency: 0
Backtrace was generated from '/usr/bin/gthumb'
Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread -1208346912 (LWP 9727)]
[New Thread -1318589552 (LWP 9745)]
[New Thread -1318061168 (LWP 9744)]
[New Thread -1316156528 (LWP 9743)]
[New Thread -1252689008 (LWP 9735)]
[New Thread -1252160624 (LWP 9734)]
0x00c79402 in __kernel_vsyscall ()
#0 0x00c79402 in __kernel_vsyscall ()
#1 0x00da398e in __lll_mutex_lock_wait () from /lib/libpthread.so.0
#2 0x00d9f7fc in _L_mutex_lock_85 () from /lib/libpthread.so.0
#3 0x00d9f33d in __pthread_mutex_lock (mutex=0x9a19778) at
pthread_mutex_lock.c:81
#4 0x00e30cef in check_thread (data=0x9a19a50) at image-loader.c:731
#5 0x037fca16 in g_timeout_dispatch (source=0x9b1c500, callback=0,
user_data=0x9a19a50) at gmain.c:3422
#6 0x037fc442 in IA__g_main_context_dispatch (context=0x991d660) at
gmain.c:2045
#7 0x037ff41f in g_main_context_iterate (context=0x991d660, block=1,
dispatch=1, self=0x9900f50)
at gmain.c:2677
#8 0x037ff7c9 in IA__g_main_loop_run (loop=0x9c4b240) at gmain.c:2881
#9 0x0212d4b4 in IA__gtk_main () at gtkmain.c:1148
#10 0x080a65b5 in main (argc=) at main.c:834
Thread 6 (Thread -1252160624 (LWP 9734)):
#0 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#1 0x00da4cbb in waitpid () from /lib/libpthread.so.0
No symbol table info available.
#2 0x02459cf6 in libgnomeui_segv_handle (signum=6) at gnome-ui-init.c:870
estatus = 29156194
sa = {__sigaction_handler = {sa_handler = 0, sa_sigaction = 0}, sa_mask
= {__val = {3042796064,
0, 0, 42233907, 29156194, 42239212, 29321448, 42242476, 29487233,
42243675, 29653524, 3042795880,
79228173, 1869, 0, 0, 0, 0, 42211898, 28662052, 42221258, 28826218,
42228603, 28990940, 42233907,
29156194, 0, 0, 0, 0, 3042796328, 2491416576}}, sa_flags = 1074222420,
sa_restorer = 0x2847033}
pid = 0
in_segv = 1
#3 <signal handler called>
No symbol table info available.
#4 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#5 0x00151d40 in *__GI_raise (sig=6) at
../nptl/sysdeps/unix/sysv/linux/raise.c:64
resultvar = <value optimized out>
pid = 2498548
selftid = 9734
#6 0x00153591 in *__GI_abort () at abort.c:88
act = {__sigaction_handler = {sa_handler = 0x263120 <main_arena>,
sa_sigaction = 0x263120 <main_arena>}, sa_mask = {__val = {162726616,
2498548, 2502944, 163952328,
162726608, 1642190, 2502944, 108, 2498548, 108, 163952328, 3042797000,
1598317, 162726616,
162726616, 107, 163952328, 0, 107, 4222451712, 162726616, 162726717,
162726616, 162726616,
162726723, 1632417, 162726616, 162726916, 0, 0, 0, 0}}, sa_flags = 0,
sa_restorer = 0x73256020}
sigs = {__val = {32, 0 <repeats 31 times>}}
#7 0x0014b38b in *__GI___assert_fail (assertion=0x4bd1070 "i <
pen->num_vertices",
file=0x4bd1064 "cairo-pen.c", line=323, function=0x4bd10a0
"_cairo_pen_find_active_cw_vertex_index")
at assert.c:78
buf = 0x9c5b6c8 ""
errstr = "Unexpected error.\n"
#8 0x04b8c16f in _cairo_pen_find_active_cw_vertex_index (pen=0xb55d67a4,
slope=0xb55d66d0,
active=0xb55d66d8) at cairo-pen.c:323
i = 4
__PRETTY_FUNCTION__ = "_cairo_pen_find_active_cw_vertex_index"
#9 0x04b8a9f4 in _cairo_stroker_add_cap (stroker=0xb55d678c, f=0xb55d6700) at
cairo-path-stroke.c:385
i = <value optimized out>
stop = <value optimized out>
slope = {dx = 20, dy = -10642879}
tri = {{x = 0, y = 0}, {x = 0, y = 0}, {x = 0, y = 0}}
pen = (cairo_pen_t *) 0xb55d67a4
start = <value optimized out>
status = <value optimized out>
#10 0x04b8ac65 in _cairo_stroker_add_leading_cap (stroker=0x0, face=<value
optimized out>)
at cairo-path-stroke.c:456
reversed = {ccw = {x = 42244184, y = 29794954}, point = {x = 42244184,
y = 29794954}, cw = {
x = 42244184, y = 29794954}, dev_vector = {dx = 20, dy = -10642879},
usr_vector = {
x = 1.9109012527931071e-06, y = -0.99999999999817424}}
#11 0x04b8ac95 in _cairo_stroker_add_caps (stroker=0xb55d678c) at
cairo-path-stroke.c:488
status = <value optimized out>
#12 0x04b8af1a in _cairo_path_fixed_stroke_to_traps (path=0x9c67a68,
stroke_style=0x9d09758,
ctm=0x9d097f4, ctm_inverse=0x9d09824, tolerance=0.10000000000000001,
traps=0xb55d6884)
at cairo-path-stroke.c:1005
status = CAIRO_STATUS_SUCCESS
stroker = {style = 0x9d09758, ctm = 0x9d097f4, ctm_inverse = 0x9d09824,
tolerance = 0.10000000000000001, traps = 0xb55d6884, pen = {radius = 0,
tolerance = 0.10000000000000001, vertices = 0x9b2d460, num_vertices = 4},
current_point = {
x = 42243675, y = 29653524}, first_point = {x = 42244184, y = 29794954},
has_sub_path = 0,
has_current_face = 1, current_face = {ccw = {x = 42243675, y = 29653524},
point = {x = 42243675,
y = 29653524}, cw = {x = 42243675, y = 29653524}, dev_vector = {dx =
76695, dy = 10642593},
usr_vector = {x = 0.0073278287515938199, y = 0.99997315110246199}},
has_first_face = 1,
first_face = {ccw = {x = 42244184, y = 29794954}, point = {x = 42244184, y =
29794954}, cw = {
x = 42244184, y = 29794954}, dev_vector = {dx = -20, dy = 10642879},
usr_vector = {
x = -1.9109012527931071e-06, y = 0.99999999999817424}}, dashed = 0,
dash_index = 0,
dash_on = -1345029298, dash_remain = 5.2995795623450048e-315}
#13 0x04b84db7 in _cairo_gstate_stroke_extents (gstate=0x9d09748,
path=0x9c67a68, x1=0xb55d6978,
y1=0xb55d6980, x2=0xb55d6988, y2=0xb55d6990) at cairo-gstate.c:1056
status = 79146852
traps = {traps = 0x0, num_traps = 0, traps_size = 0, extents = {p1 = {x
= 2147418112,
y = 2147418112}, p2 = {x = -2147483648, y = -2147483648}}}
extents = {p1 = {x = 164682544, y = 0}, p2 = {x = 1, y = 1}}
#14 0x04b7ffb2 in cairo_stroke_extents (cr=0x9c67a60, x1=0xb55d6978, y1=0x2606,
x2=0x6, y2=0xb55d6990)
at cairo.c:2021
No locals.
#15 0x009c6b14 in rsvg_cairo_render_path (ctx=0x9b1d768, bpath_def=0x9b302c0)
at rsvg-cairo-draw.c:546
sb = {x = 71.980259794366702, y = -1.3969901333541941, w =
575.82484947592877,
h = 575.82195093494511, virgin = 1, affine = {1.005657, 0, 0, 1.022627,
-6.8746500000000026,
161.63940000000002}}
state = (RsvgState *) 0x9d29868
cr = (cairo_t *) 0x9c67a60
bpath = <value optimized out>
i = 6
need_tmpbuf = 0
bbox = {x = 71.980259794366702, y = -1.3969901333541992, w =
575.82484947592877,
h = 575.82195093494511, virgin = 0, affine = {1.005657, 0, 0, 1.022627,
-6.8746500000000026,
161.63940000000002}}
#16 0x009c19ce in rsvg_render_path (ctx=0x9b1d768,
d=0x9d16e48 "M 647.80511,286.51260 A 287.91339,287.91339 0 1 1
647.79738,284.40230")
at rsvg-base.c:1639
bpath_def = (RsvgBpathDef *) 0x9b302c0
#17 0x009b747b in rsvg_node_path_draw (self=0x9d16c30, ctx=0x9b1d768,
dominate=0) at rsvg-shapes.c:61
No locals.
#18 0x009b9fee in rsvg_node_draw (self=0x6, ctx=0x9b1d768, dominate=0) at
rsvg-structure.c:54
stacksave = (GSList *) 0x0
#19 0x009ba2aa in _rsvg_node_draw_children (self=0x9d0a618, ctx=0x9b1d768,
dominate=0)
at rsvg-structure.c:73
i = 2
#20 0x009b9fee in rsvg_node_draw (self=0x6, ctx=0x9b1d768, dominate=0) at
rsvg-structure.c:54
stacksave = (GSList *) 0x0
#21 0x009ba2aa in _rsvg_node_draw_children (self=0x9c67cf0, ctx=0x9b1d768,
dominate=0)
at rsvg-structure.c:73
i = 2
#22 0x009b9fee in rsvg_node_draw (self=0x6, ctx=0x9b1d768, dominate=0) at
rsvg-structure.c:54
stacksave = (GSList *) 0x0
#23 0x009baaff in rsvg_node_svg_draw (self=0x9b20fa0, ctx=0x9b1d768,
dominate=0) at rsvg-structure.c:346
state = <value optimized out>
affine = {1, 0, 0, 1, 0, 0}
affine_old = {1, 0, 0, 1, 0, 0}
affine_new = {1, 0, 0, 1, 0, 0}
i = 5
nx = 0
ny = 0
nw = 744.09447999999998
nh = 1052.3622
#24 0x009b9fee in rsvg_node_draw (self=0x6, ctx=0x9b1d768, dominate=0) at
rsvg-structure.c:54
stacksave = (GSList *) 0x0
#25 0x009c72d7 in rsvg_handle_render_cairo_sub (handle=0x9c53558, cr=0x9c67a60,
id=0x0)
at rsvg-cairo-render.c:161
drawsub = (RsvgNode *) 0x9d29020
__PRETTY_FUNCTION__ = "rsvg_handle_render_cairo_sub"
#26 0x009c777e in rsvg_handle_get_pixbuf_sub (handle=0x9c53558, id=0x0) at
rsvg.c:101
dimensions = {width = 744, height = 1052, em = 744, ex = 1052}
output = <value optimized out>
surface = (cairo_surface_t *) 0x9c67978
cr = (cairo_t *) 0x9c67a60
rowstride = 2976
__PRETTY_FUNCTION__ = "rsvg_handle_get_pixbuf_sub"
#27 0x009c7855 in rsvg_handle_get_pixbuf (handle=0x9c53558) at rsvg.c:135
No locals.
#28 0x00527bc7 in gdk_pixbuf__svg_image_stop_load (data=0x9c5cca0,
error=0xb55d8368) at io-svg.c:154
pixbuf = <value optimized out>
#29 0x03d8611d in _gdk_pixbuf_generic_image_load (module=0x9939700,
f=0xb1705680, error=0xb55d8368)
at gdk-pixbuf-io.c:810
buffer =
"e-width:0.00000000;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4.0000000;stroke-dashoffset:1.8218375;stroke-opacity:1.0000000\"
transform=\"translate(24.42309,273.6212)\"/>\n <path d"...
length = <value optimized out>
pixbuf = (GdkPixbuf *) 0x0
animation = <value optimized out>
context = (gpointer) 0x9c5cca0
locked = 1
#30 0x03d87114 in IA__gdk_pixbuf_new_from_file (
filename=0xb1706950
"/fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg",
error=0xb55d8368) at gdk-pixbuf-io.c:902
pixbuf = <value optimized out>
f = (FILE *) 0xb1705680
buffer = "<?xml version=\"1.0\" encoding=\"UTF-8\"
standalone=\"no\"?>\n<!-- Created with Inkscape (http://www.inkscape.org/)
--><svg height=\"1052.3622\" id=\"svg1\" version=\"1.0\" width=\"744.09448\"
x=\"0.00000000\" xmlns=\""...
image_module = (GdkPixbufModule *) 0x9939700
display_name = (
gchar *) 0xb17067d8
"/fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg"
__PRETTY_FUNCTION__ = "IA__gdk_pixbuf_new_from_file"
#31 0x00e12b62 in gth_pixbuf_new_from_uri (
uri=0xb1706a10
"/fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg",
error=0xb55d8368,
requested_width_if_used=128, requested_height_if_used=128,
mime_type=0x9b7f5a0 "image/svg+xml")
at file-utils.c:2763
pixbuf = (GdkPixbuf *) 0xb1706a10
local_file = 0xb1706950
"/fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg"
#32 0x00e146a4 in gth_pixbuf_animation_new_from_uri (
filename=0xb1702218
"file:///fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg",
error=0xb55d8368, requested_width_if_used=128,
requested_height_if_used=128, factory=0x9af9f80,
mime_type=0x9b7f5a0 "image/svg+xml") at file-utils.c:2832
local_uri = 0xb1706a10
"/fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg"
animation = <value optimized out>
pixbuf = <value optimized out>
local_file = 0xb1705060
"/fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg"
#33 0x00e44ed6 in thumb_loader (
path=0xb1702218
"file:///fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg",
mime_type=0x9b7f5a0 "image/svg+xml", error=0xb55d8368, data=0x9af9eb0) at
thumb-loader.c:239
No locals.
#34 0x00e311f1 in load_image_thread (thread_data=0x9b020b0) at
image-loader.c:639
path = 0xb1702218
"file:///fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg"
exit_thread = <value optimized out>
priv = (ImageLoaderPrivateData *) 0x9b03168
animation = (GdkPixbufAnimation *) 0x0
error = (GError *) 0x0
#35 0x0381a29f in g_thread_create_proxy (data=0x9afda48) at gthread.c:591
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#36 0x00d9d3db in start_thread (arg=0xb55d8b90) at pthread_create.c:296
__res = <value optimized out>
__ignore1 = <value optimized out>
__ignore2 = <value optimized out>
pd = (struct pthread *) 0xb55d8b90
now = <value optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {14335988, 0, 4001536,
-1252162408, 1293221335,
-124736065}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0,
cleanup = 0x0, canceltype = 0}}}
not_first_call = 0
robust = <value optimized out>
#37 0x001f626e in clone () from /lib/libc.so.6
fstab_state = {fs_fp = 0x0, fs_buffer = 0x0, fs_mntres = {mnt_fsname =
0x0, mnt_dir = 0x0,
mnt_type = 0x0, mnt_opts = 0x0, mnt_freq = 0, mnt_passno = 0}, fs_ret =
{fs_spec = 0x0,
fs_file = 0x0, fs_vfstype = 0x0, fs_mntops = 0x0, fs_type = 0x0, fs_freq =
0, fs_passno = 0}}
__elf_set___libc_subfreeres_element_fstab_free__ = (const void *)
0x234160
Thread 5 (Thread -1252689008 (LWP 9735)):
#0 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#1 0x00da11a6 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#2 0x00e31179 in load_image_thread (thread_data=0x99f5b00) at
image-loader.c:619
path = 0x80c2a6c "\001"
exit_thread = <value optimized out>
priv = (ImageLoaderPrivateData *) 0x9b32400
animation = (GdkPixbufAnimation *) 0xda07c0
error = (GError *) 0x0
#3 0x0381a29f in g_thread_create_proxy (data=0x9b32520) at gthread.c:591
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#4 0x00d9d3db in start_thread (arg=0xb5557b90) at pthread_create.c:296
__res = <value optimized out>
__ignore1 = <value optimized out>
__ignore2 = <value optimized out>
pd = (struct pthread *) 0xb5557b90
now = <value optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {14335988, 0, 4001536,
-1252690792, 1293684183,
-124736065}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0,
cleanup = 0x0, canceltype = 0}}}
not_first_call = 0
robust = <value optimized out>
#5 0x001f626e in clone () from /lib/libc.so.6
fstab_state = {fs_fp = 0x0, fs_buffer = 0x0, fs_mntres = {mnt_fsname =
0x0, mnt_dir = 0x0,
mnt_type = 0x0, mnt_opts = 0x0, mnt_freq = 0, mnt_passno = 0}, fs_ret =
{fs_spec = 0x0,
fs_file = 0x0, fs_vfstype = 0x0, fs_mntops = 0x0, fs_type = 0x0, fs_freq =
0, fs_passno = 0}}
__elf_set___libc_subfreeres_element_fstab_free__ = (const void *)
0x234160
Thread 4 (Thread -1316156528 (LWP 9743)):
#0 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#1 0x00da398e in __lll_mutex_lock_wait () from /lib/libpthread.so.0
No symbol table info available.
#2 0x00d9f7fc in _L_mutex_lock_85 () from /lib/libpthread.so.0
No symbol table info available.
#3 0x00d9f33d in __pthread_mutex_lock (mutex=0xe65560) at
pthread_mutex_lock.c:81
ignore1 = <value optimized out>
ignore2 = <value optimized out>
oldval = <value optimized out>
retval = <value optimized out>
#4 0x00e31361 in load_image_thread (thread_data=0x9a19a50) at
image-loader.c:634
path = 0x9c4fb10
"file:///fileserver/mjcfiles/eraseme/svg/blue_eye_kilian_valkhof_.svg"
exit_thread = <value optimized out>
priv = (ImageLoaderPrivateData *) 0x9bb30e0
animation = <value optimized out>
error = (GError *) 0x0
#5 0x0381a29f in g_thread_create_proxy (data=0x9bb31e0) at gthread.c:591
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6 0x00d9d3db in start_thread (arg=0xb18d0b90) at pthread_create.c:296
__res = <value optimized out>
__ignore1 = <value optimized out>
__ignore2 = <value optimized out>
pd = (struct pthread *) 0xb18d0b90
now = <value optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {14335988, 0, 4001536,
-1316158312, 1237614039,
-124736065}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0,
cleanup = 0x0, canceltype = 0}}}
not_first_call = 0
robust = <value optimized out>
#7 0x001f626e in clone () from /lib/libc.so.6
fstab_state = {fs_fp = 0x0, fs_buffer = 0x0, fs_mntres = {mnt_fsname =
0x0, mnt_dir = 0x0,
mnt_type = 0x0, mnt_opts = 0x0, mnt_freq = 0, mnt_passno = 0}, fs_ret =
{fs_spec = 0x0,
fs_file = 0x0, fs_vfstype = 0x0, fs_mntops = 0x0, fs_type = 0x0, fs_freq =
0, fs_passno = 0}}
__elf_set___libc_subfreeres_element_fstab_free__ = (const void *)
0x234160
Thread 3 (Thread -1318061168 (LWP 9744)):
#0 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#1 0x00da11a6 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#2 0x00e31179 in load_image_thread (thread_data=0x9a19a20) at
image-loader.c:619
path = 0x9c86350 "\030¹\221\t\003"
exit_thread = <value optimized out>
priv = (ImageLoaderPrivateData *) 0x9bb8630
animation = (GdkPixbufAnimation *) 0x9d0ccd0
error = (GError *) 0x0
#3 0x0381a29f in g_thread_create_proxy (data=0x9a1ae40) at gthread.c:591
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#4 0x00d9d3db in start_thread (arg=0xb16ffb90) at pthread_create.c:296
__res = <value optimized out>
__ignore1 = <value optimized out>
__ignore2 = <value optimized out>
pd = (struct pthread *) 0xb16ffb90
now = <value optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {14335988, 0, 4001536,
-1318062952, 1227263447,
-124736065}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0,
cleanup = 0x0, canceltype = 0}}}
not_first_call = 0
robust = <value optimized out>
#5 0x001f626e in clone () from /lib/libc.so.6
fstab_state = {fs_fp = 0x0, fs_buffer = 0x0, fs_mntres = {mnt_fsname =
0x0, mnt_dir = 0x0,
mnt_type = 0x0, mnt_opts = 0x0, mnt_freq = 0, mnt_passno = 0}, fs_ret =
{fs_spec = 0x0,
fs_file = 0x0, fs_vfstype = 0x0, fs_mntops = 0x0, fs_type = 0x0, fs_freq =
0, fs_passno = 0}}
__elf_set___libc_subfreeres_element_fstab_free__ = (const void *)
0x234160
Thread 2 (Thread -1318589552 (LWP 9745)):
#0 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#1 0x00da11a6 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0
No symbol table info available.
#2 0x00e31179 in load_image_thread (thread_data=0x9a19810) at
image-loader.c:619
path = 0x80c2a6c "\001"
exit_thread = <value optimized out>
priv = (ImageLoaderPrivateData *) 0x9bb8e28
animation = (GdkPixbufAnimation *) 0xda07c0
error = (GError *) 0x0
#3 0x0381a29f in g_thread_create_proxy (data=0x9bb90a0) at gthread.c:591
__PRETTY_FUNCTION__ = "g_thread_create_proxy"
#4 0x00d9d3db in start_thread (arg=0xb167eb90) at pthread_create.c:296
__res = <value optimized out>
__ignore1 = <value optimized out>
__ignore2 = <value optimized out>
pd = (struct pthread *) 0xb167eb90
now = <value optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {14335988, 0, 4001536,
-1318591336, 1227791831,
-124736065}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0},
data = {prev = 0x0,
cleanup = 0x0, canceltype = 0}}}
not_first_call = 0
robust = <value optimized out>
#5 0x001f626e in clone () from /lib/libc.so.6
fstab_state = {fs_fp = 0x0, fs_buffer = 0x0, fs_mntres = {mnt_fsname =
0x0, mnt_dir = 0x0,
mnt_type = 0x0, mnt_opts = 0x0, mnt_freq = 0, mnt_passno = 0}, fs_ret =
{fs_spec = 0x0,
fs_file = 0x0, fs_vfstype = 0x0, fs_mntops = 0x0, fs_type = 0x0, fs_freq =
0, fs_passno = 0}}
__elf_set___libc_subfreeres_element_fstab_free__ = (const void *)
0x234160
Thread 1 (Thread -1208346912 (LWP 9727)):
#0 0x00c79402 in __kernel_vsyscall ()
No symbol table info available.
#1 0x00da398e in __lll_mutex_lock_wait () from /lib/libpthread.so.0
No symbol table info available.
#2 0x00d9f7fc in _L_mutex_lock_85 () from /lib/libpthread.so.0
No symbol table info available.
#3 0x00d9f33d in __pthread_mutex_lock (mutex=0x9a19778) at
pthread_mutex_lock.c:81
ignore1 = <value optimized out>
ignore2 = <value optimized out>
oldval = <value optimized out>
retval = <value optimized out>
#4 0x00e30cef in check_thread (data=0x9a19a50) at image-loader.c:731
il = <value optimized out>
done = <value optimized out>
error = <value optimized out>
loader_done = <value optimized out>
priv = (ImageLoaderPrivateData *) 0x9bb30e0
#5 0x037fca16 in g_timeout_dispatch (source=0x9b1c500, callback=0,
user_data=0x9a19a50) at gmain.c:3422
No locals.
#6 0x037fc442 in IA__g_main_context_dispatch (context=0x991d660) at
gmain.c:2045
No locals.
#7 0x037ff41f in g_main_context_iterate (context=0x991d660, block=1,
dispatch=1, self=0x9900f50)
at gmain.c:2677
got_ownership = <value optimized out>
max_priority = 0
timeout = 0
some_ready = 1
nfds = <value optimized out>
allocated_nfds = <value optimized out>
fds = (GPollFD *) 0x9c5a1a0
__PRETTY_FUNCTION__ = "g_main_context_iterate"
#8 0x037ff7c9 in IA__g_main_loop_run (loop=0x9c4b240) at gmain.c:2881
got_ownership = 14283488
self = (GThread *) 0x9900f50
__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#9 0x0212d4b4 in IA__gtk_main () at gtkmain.c:1148
tmp_list = (GList *) 0x0
functions = (GList *) 0x0
init = (GtkInitFunction *) 0xbf832054
loop = (GMainLoop *) 0x9c4b240
#10 0x080a65b5 in main (argc=) at main.c:834
No locals.
#0 0x00c79402 in __kernel_vsyscall ()
Reply at: https://bugs.launchpad.net/libcairo/+bug/124547/comments/0
------------------------------------------------------------------------
On 2007-04-10T04:54:15+00:00 Michael Chudobiak wrote:
Created an attachment (id=9555)
SVG file that causes the crash
Reply at: https://bugs.launchpad.net/libcairo/+bug/124547/comments/1
------------------------------------------------------------------------
On 2007-07-01T03:35:48+00:00 Christian Kirbach wrote:
see also http://bugzilla.gnome.org/show_bug.cgi?id=452601#stacktrace
nautilus: cairo-pen.c:323: _cairo_pen_find_active_cw_vertex_index: Assertion `i
< pen->num_vertices' failed.
could this be a bug in librsvg?
#7 0x4732338b in *__GI___assert_fail (
assertion=0x47ecc070 "i < pen->num_vertices",
file=0x47ecc064 "cairo-pen.c", line=323,
function=0x47ecc0a0 "_cairo_pen_find_active_cw_vertex_index")
at assert.c:78
buf = 0x93b6ec0 "ØØè?<<<<<<ì?"
errstr = "Unexpected error.\n"
#8 0x47e8716f in _cairo_pen_find_active_cw_vertex_index (pen=0xb5dfd834,
slope=0xb5dfd760, active=0xb5dfd768) at cairo-pen.c:323
i = 4
__PRETTY_FUNCTION__ = "_cairo_pen_find_active_cw_vertex_index"
#9 0x47e859f4 in _cairo_stroker_add_cap (stroker=0xb5dfd81c, f=0xb5dfd790)
at cairo-path-stroke.c:385
i = <value optimized out>
stop = <value optimized out>
slope = {dx = 37079, dy = -37273}
tri = {{x = 5311777, y = 2414207}, {x = 37079, y = 37274}, {
x = -88568302, y = 1072078999}}
pen = (cairo_pen_t *) 0xb5dfd834
start = <value optimized out>
status = <value optimized out>
#10 0x47e85c65 in _cairo_stroker_add_leading_cap (stroker=0x0,
face=<value optimized out>) at cairo-path-stroke.c:456
reversed = {ccw = {x = 5348856, y = 2376934}, point = {x = 5348856,
y = 2376934}, cw = {x = 5348856, y = 2376934}, dev_vector = {dx = 37079,
dy = -37273}, usr_vector = {x = 0.70711320477456541,
y = -0.70710035754017508}}
#11 0x47e85c95 in _cairo_stroker_add_caps (stroker=0xb5dfd81c)
at cairo-path-stroke.c:488
status = <value optimized out>
#12 0x47e85f1a in _cairo_path_fixed_stroke_to_traps (path=0x91986c8,
stroke_style=0x93b6990, ctm=0x93b6a2c, ctm_inverse=0x93b6a5c,
tolerance=0.10000000000000001, traps=0xb5dfd914)
at cairo-path-stroke.c:1005
status = CAIRO_STATUS_SUCCESS
stroker = {style = 0x93b6990, ctm = 0x93b6a2c,
ctm_inverse = 0x93b6a5c, tolerance = 0.10000000000000001,
traps = 0xb5dfd914, pen = {radius = -0, tolerance = 0.10000000000000001,
vertices = 0x93b5bd8, num_vertices = 4}, current_point = {x = 5348856,
y = 2451481}, first_point = {x = 5348856, y = 2376934}, has_sub_path = 1,
has_current_face = 1, current_face = {ccw = {x = 5348856, y = 2451481},
point = {x = 5348856, y = 2451481}, cw = {x = 5348856, y = 2451481},
dev_vector = {dx = 37079, dy = 37274}, usr_vector = {
x = 0.70710371941499006, y = 0.70710984294484758}}, has_first_face = 1,
first_face = {ccw = {x = 5348856, y = 2376934}, point = {x = 5348856,
y = 2376934}, cw = {x = 5348856, y = 2376934}, dev_vector = {
dx = -37079, dy = 37273}, usr_vector = {x = -0.70711320477456541,
y = 0.70710035754017508}}, dashed = 0, dash_index = 3226480967,
dash_on = 1195614196, dash_remain = 7.9165322551249684e-265}
#13 0x47e7fdb7 in _cairo_gstate_stroke_extents (gstate=0x93b6980,
path=0x91986c8, x1=0xb5dfda08, y1=0xb5dfda10, x2=0xb5dfda18,
y2=0xb5dfda20) at cairo-gstate.c:1056
status = 3051346236
traps = {traps = 0x93b8000, num_traps = 2, traps_size = 32,
extents = {p1 = {x = 5311777, y = 2376934}, p2 = {x = 5348856,
y = 2451481}}}
extents = {p1 = {x = -1891783525, y = 1094890508}, p2 = {
x = -1243621024, y = 5348856}}
#14 0x47e7afb2 in cairo_stroke_extents (cr=0x91986c0, x1=0xb5dfda08,
y1=0x11d4, x2=0x6, y2=0xb5dfda20) at cairo.c:2021
No locals.
#15 0x4672fb14 in rsvg_cairo_render_path (ctx=0x919b5b8, bpath_def=0x93b4790)
at rsvg-cairo-draw.c:546
sb = {x = 3.4542216629796162e-313, y = 1.8884829227941214e+35, w = 0,
h = 2.712707690888975e-314, virgin = 1, affine = {0.56577866123872023, 0,
0, 0.56874918932402085, 81.051291316319919, 36.837876467866657}}
state = (RsvgState *) 0x91bcd78
cr = (cairo_t *) 0x91986c0
bpath = <value optimized out>
i = 4
need_tmpbuf = 0
bbox = {x = 5.2998088236266445e-315, y = 5.2762970911146811e+36,
w = 0, h = 1, virgin = 1, affine = {0.56577866123872023, 0, 0,
0.56874918932402085, 81.051291316319919, 36.837876467866657}}
#16 0x4672a9ce in rsvg_render_path (ctx=0x919b5b8,
d=0x91d70b0 "M 1 -1 L 0 0 L 1 1 ") at rsvg-base.c:1639
bpath_def = (RsvgBpathDef *) 0x93b4790
#17 0x4672047b in rsvg_node_path_draw (self=0x91d6e98, ctx=0x919b5b8,
dominate=0) at rsvg-shapes.c:61
No locals.
#18 0x46722fee in rsvg_node_draw (self=0x6, ctx=0x919b5b8, dominate=0)
at rsvg-structure.c:54
stacksave = (GSList *) 0x0
#19 0x467232aa in _rsvg_node_draw_children (self=0x91d69a8, ctx=0x919b5b8,
dominate=1) at rsvg-structure.c:73
i = 2
#20 0x46722fee in rsvg_node_draw (self=0x6, ctx=0x919b5b8, dominate=1)
at rsvg-structure.c:54
stacksave = (GSList *) 0x0
#21 0x46723ed3 in rsvg_node_use_draw (self=0x91d7ed0, ctx=0x919b5b8,
dominate=0) at rsvg-structure.c:230
child = (RsvgNode *) 0x91d69a8
state = (RsvgState *) 0x91bc530
affine = {1, 0, 0, 1, 0, 0}
x = 0
y = 0
w = 0
h = 0
#22 0x46722fee in rsvg_node_draw (self=0x6, ctx=0x919b5b8, dominate=0)
at rsvg-structure.c:54
stacksave = (GSList *) 0x0
#23 0x4671ebae in rsvg_marker_render (self=0x91d74f8, x=0,
y=396.85000000000002, orient=0, linewidth=1.2, ctx=0x919b5b8)
at rsvg-marker.c:180
affine = {0.18250924556087747, 0, 0, 0.18346748042710348,
81.051291316319919, 36.837876467866657}
taffine = {1, 0, 0, 1, -0, -0}
i = 2
rotation = 0
state = <value optimized out>
Reply at: https://bugs.launchpad.net/libcairo/+bug/124547/comments/2
------------------------------------------------------------------------
On 2008-01-11T08:30:42+00:00 Chris Wilson wrote:
*** Bug 11493 has been marked as a duplicate of this bug. ***
Reply at: https://bugs.launchpad.net/libcairo/+bug/124547/comments/6
------------------------------------------------------------------------
On 2008-01-11T08:31:06+00:00 Chris Wilson wrote:
This was fixed by Carl Worth in commit
448c9314252bba779194d2b01950b8738b26fd13.
Reply at: https://bugs.launchpad.net/libcairo/+bug/124547/comments/7
** Changed in: libcairo
Importance: Unknown => Critical
** Bug watch added: GNOME Bug Tracker #424199
https://bugzilla.gnome.org/show_bug.cgi?id=424199
** Bug watch added: GNOME Bug Tracker #428208
https://bugzilla.gnome.org/show_bug.cgi?id=428208
** Bug watch added: GNOME Bug Tracker #452601
https://bugzilla.gnome.org/show_bug.cgi?id=452601
--
evince crash: _cairo_pen_find_active_cw_vertex_index: Assertion `i < pen->num_vertices' failed
https://bugs.launchpad.net/bugs/124547
You received this bug notification because you are a member of Registry
Administrators, which is the registrant for libcairo.
