Public bug reported:

Binary package hint: evince

When filling in a PDF form, I typed ctrl+left-arrow and Evince crashed.
By running via GDB, I gained the following output:

Starting program: /usr/bin/evince /home/john/Desktop/DPInternalEoIformDP12.pdf
[Thread debugging using libthread_db enabled]
[New Thread 0xb6832b70 (LWP 13956)]
[New Thread 0xb569cb70 (LWP 13957)]

Program received signal SIGSEGV, Segmentation fault.
doc_rect_to_view_rect (view=0x849c1b0, page=<value optimised out>, 
    doc_rect=0x0, view_rect=0xbfc24ce0) at ev-view.c:965
965     ev-view.c: No such file or directory.
        in ev-view.c
(gdb) where
#0  doc_rect_to_view_rect (view=0x849c1b0, page=<value optimised out>, 
    doc_rect=0x0, view_rect=0xbfc24ce0) at ev-view.c:965
#1  0x00a37335 in ev_view_get_area_from_mapping (view=0x849c1b0, 
    page=<value optimised out>, mapping_list=0x0, data=0x8511970, 
    area=0xbfc24ce0) at ev-view.c:1149
#2  0x00a39877 in ev_view_form_field_get_region (view=0x849c1b0, 
    field=<value optimised out>) at ev-view.c:1645
#3  0x00a3990f in ev_view_form_field_text_save (view=0x849c1b0, 
    widget=0x860c818) at ev-view.c:1743
#4  0x0043b951 in weak_refs_notify (data=0x864eef8)
    at /build/buildd/glib2.0-2.22.3/gobject/gobject.c:1992
#5  0x005d2e83 in g_data_set_internal (datalist=0x860c820, key_id=52, 
    data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.22.3/glib/gdataset.c:242
#6  IA__g_datalist_id_set_data_full (datalist=0x860c820, key_id=52, data=0x0, 
    destroy_func=0) at /build/buildd/glib2.0-2.22.3/glib/gdataset.c:362
#7  0x0043bf89 in g_object_real_dispose (object=0x860c818)
    at /build/buildd/glib2.0-2.22.3/gobject/gobject.c:767
#8  0x00ba4ed1 in gtk_object_dispose (gobject=0x860c818)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkobject.c:426
#9  0x00ca6360 in gtk_widget_dispose (object=0x860c818)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwidget.c:8370
#10 0x0043c110 in IA__g_object_unref (_object=0x860c818)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.22.3/gobject/gobject.c:2441
#11 0x0045c688 in IA__g_value_unset (value=0x849b12c)
    at /build/buildd/glib2.0-2.22.3/gobject/gvalue.c:276
#12 0x00450b56 in IA__g_signal_emit_valist (instance=0x849c1b0, signal_id=85, 
    detail=0, var_args=0xbfc24ff0 "HP¿0\017I")
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3009
#13 0x00450fb6 in IA__g_signal_emit (instance=0x849c1b0, signal_id=85, 
    detail=0) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#14 0x00aeb9b1 in IA__gtk_container_remove (container=0x849c1b0, 
    widget=0x860c818) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkcontainer.c:1233
#15 0x00a320c5 in ev_view_remove_all (view=<value optimised out>)
    at ev-view.c:3143
#16 0x00a32138 in ev_view_set_rotation (view=0x849c1b0, rotation=270)
    at ev-view.c:5225
#17 0x00a321b4 in ev_view_rotate_left (view=0x0) at ev-view.c:5212
#18 0x004479fc in IA__g_cclosure_marshal_VOID__VOID (closure=0x83c3118, 
    return_value=0x0, n_param_values=1, param_values=0x85c8cc8, 
    invocation_hint=0xbfc251f0, marshal_data=0x8074e10)
    at /build/buildd/glib2.0-2.22.3/gobject/gmarshal.c:77
#19 0x0043a072 in IA__g_closure_invoke (closure=0x83c3118, return_value=0x0, 
    n_param_values=1, param_values=0x85c8cc8, invocation_hint=0xbfc251f0)
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:767
#20 0x0044f7a8 in signal_emit_unlocked_R (node=<value optimised out>, 
---Type <return> to continue, or q <return> to quit---
    detail=<value optimised out>, instance=0x8355a60, emission_return=0x0, 
    instance_and_params=0x85c8cc8)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3247
#21 0x00450b2d in IA__g_signal_emit_valist (instance=0x8355a60, signal_id=160, 
    detail=0, var_args=0xbfc253ac "\304d\252")
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:2980
#22 0x00450fb6 in IA__g_signal_emit (instance=0x8355a60, signal_id=160, 
    detail=0) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#23 0x00aa4ed5 in _gtk_action_emit_activate (action=0x8355a60)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaction.c:727
#24 0x00aa78c4 in closure_accel_activate (closure=0x83c3148, 
    return_value=0xbfc25514, n_param_values=4, param_values=0x8523288, 
    invocation_hint=0xbfc25500, marshal_data=0x0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaction.c:1647
#25 0x0043a072 in IA__g_closure_invoke (closure=0x83c3148, 
    return_value=0xbfc25514, n_param_values=4, param_values=0x8523288, 
    invocation_hint=0xbfc25500)
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:767
#26 0x0044f7a8 in signal_emit_unlocked_R (node=<value optimised out>, 
    detail=<value optimised out>, instance=0x83aa800, 
    emission_return=0xbfc2565c, instance_and_params=0x8523288)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3247
#27 0x004509b8 in IA__g_signal_emit_valist (instance=0x83aa800, signal_id=172, 
---Type <return> to continue, or q <return> to quit---
    detail=1107, 
    var_args=0xbfc256c8 "\334V¿\364\357", <incomplete sequence \337>)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:2990
#28 0x00450fb6 in IA__g_signal_emit (instance=0x83aa800, signal_id=172, 
    detail=1107) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#29 0x00aa0ae1 in IA__gtk_accel_group_activate (accel_group=0x83aa800, 
    accel_quark=1107, acceleratable=0x8393100, accel_key=65361, 
    accel_mods=GDK_CONTROL_MASK)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaccelgroup.c:860
#30 0x00aa0be5 in IA__gtk_accel_groups_activate (object=0x8393100, 
    accel_key=65361, accel_mods=GDK_CONTROL_MASK)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkaccelgroup.c:897
#31 0x00cb3634 in IA__gtk_window_activate_key (window=0x8393100, 
    event=0x84962a0) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwindow.c:8269
#32 0x00cb36bc in gtk_window_key_press_event (widget=0x8393100, 
    event=0x84962a0) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwindow.c:5170
#33 0x00b7f474 in _gtk_marshal_BOOLEAN__BOXED (closure=0x8370880, 
    return_value=0xbfc25974, n_param_values=2, param_values=0x84ac600, 
    invocation_hint=0xbfc25960, marshal_data=0x80720d0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmarshalers.c:84
#34 0x004386f9 in g_type_class_meta_marshal (closure=0x8370880, 
    return_value=0xbfc25974, n_param_values=2, param_values=0x84ac600, 
    invocation_hint=0xbfc25960, marshal_data=0xcc)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:878
#35 0x0043a072 in IA__g_closure_invoke (closure=0x8370880, 
    return_value=0xbfc25974, n_param_values=2, param_values=0x84ac600, 
    invocation_hint=0xbfc25960)
    at /build/buildd/glib2.0-2.22.3/gobject/gclosure.c:767
#36 0x0044f49e in signal_emit_unlocked_R (node=<value optimised out>, 
    detail=<value optimised out>, instance=0x8393100, 
    emission_return=0xbfc25abc, instance_and_params=0x84ac600)
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3285
#37 0x004509b8 in IA__g_signal_emit_valist (instance=0x8393100, signal_id=46, 
    detail=0, var_args=0xbfc25b20 "\\[¿\364Of")
    at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:2990
#38 0x00450fb6 in IA__g_signal_emit (instance=0x8393100, signal_id=46, 
    detail=0) at /build/buildd/glib2.0-2.22.3/gobject/gsignal.c:3037
#39 0x00c9b95e in gtk_widget_event_internal (widget=<value optimised out>, 
    event=0x84962a0) at /build/buildd/gtk+2.0-2.18.3/gtk/gtkwidget.c:4767
#40 0x00b77ceb in IA__gtk_propagate_event (widget=0x8393100, event=0x84962a0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:2391
#41 0x00b78ea9 in IA__gtk_main_do_event (event=0x84962a0)
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:1622
#42 0x002bc65a in gdk_event_dispatch (source=0x835f9d0, callback=0, 
    user_data=0x0) at /build/buildd/gtk+2.0-2.18.3/gdk/x11/gdkevents-x11.c:2369
#43 0x005e7e88 in g_main_dispatch (context=0x8334060)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:1960
#44 IA__g_main_context_dispatch (context=0x8334060)
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:2513
#45 0x005eb730 in g_main_context_iterate (context=0x8334060, 
    block=<value optimised out>, dispatch=1, self=0x8328050)
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:2591
#46 0x005ebb9f in IA__g_main_loop_run (loop=0x832a220)
    at /build/buildd/glib2.0-2.22.3/glib/gmain.c:2799
#47 0x00b79419 in IA__gtk_main ()
    at /build/buildd/gtk+2.0-2.18.3/gtk/gtkmain.c:1218
#48 0x08080c52 in main (argc=1, argv=0xbfc25f14) at main.c:497
(gdb)

** Affects: evince (Ubuntu)
     Importance: Undecided
         Status: New

-- 
crash on ctrl-left-arrow in Evince when filling a PDF form
https://bugs.launchpad.net/bugs/672866
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evince in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to