Bug 1095419

Summary: [abrt] graphviz: Bezier(): dot killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Mattias Ellert <mattias.ellert>
Component: graphvizAssignee: Jaroslav Škarvada <jskarvad>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: urgent    
Version: rawhideCC: alex, jskarvad, tremble
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/51764c249a4768f591a492d1b056edbdd33c2241
Whiteboard: abrt_hash:7dde227eda96123f95459576fdc1abed82511f1f
Fixed In Version: graphviz-2.38.0-5.fc21 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-05-28 13:32:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: proc_pid_status
none
File: var_log_messages
none
The .dot file that triggers the crash none

Description Mattias Ellert 2014-05-07 16:30:33 UTC
Description of problem:
This bug appeared during the build of root on Fedora 21. It is a regression, the version of graphviz in Fedora 20 does not cause problems when building root.

Version-Release number of selected component:
graphviz-2.38.0-3.fc21

Additional info:
reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        dot -q1 -Tpng -ohtmldoc/inhmem/TBtreeIter_InhMem.png -Tcmap -ohtmldoc/inhmem/TBtreeIter_InhMem.map htmldoc/inhmem/TBtreeIter_InhMem.dot
crash_function: Bezier
executable:     /usr/bin/dot
kernel:         3.15.0-0.rc3.git5.3.fc21.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (2 frames)
 #0 Bezier at utils.c:226
 #1 findHorizontal at compound.c:229

Comment 1 Mattias Ellert 2014-05-07 16:30:38 UTC
Created attachment 893367 [details]
File: backtrace

Comment 2 Mattias Ellert 2014-05-07 16:30:40 UTC
Created attachment 893368 [details]
File: cgroup

Comment 3 Mattias Ellert 2014-05-07 16:30:43 UTC
Created attachment 893369 [details]
File: core_backtrace

Comment 4 Mattias Ellert 2014-05-07 16:30:46 UTC
Created attachment 893370 [details]
File: dso_list

Comment 5 Mattias Ellert 2014-05-07 16:30:48 UTC
Created attachment 893371 [details]
File: environ

Comment 6 Mattias Ellert 2014-05-07 16:30:50 UTC
Created attachment 893372 [details]
File: exploitable

Comment 7 Mattias Ellert 2014-05-07 16:30:52 UTC
Created attachment 893373 [details]
File: limits

Comment 8 Mattias Ellert 2014-05-07 16:30:54 UTC
Created attachment 893374 [details]
File: maps

Comment 9 Mattias Ellert 2014-05-07 16:30:57 UTC
Created attachment 893375 [details]
File: proc_pid_status

Comment 10 Mattias Ellert 2014-05-07 16:30:59 UTC
Created attachment 893376 [details]
File: var_log_messages

Comment 11 Mattias Ellert 2014-05-08 07:41:46 UTC
Created attachment 893545 [details]
The .dot file that triggers the crash

Comment 12 Mattias Ellert 2014-05-28 05:12:57 UTC
Proposed fix in upstream pull request (github):

https://github.com/ellson/graphviz/pull/24

Comment 13 Jaroslav Škarvada 2014-05-28 12:08:17 UTC
Thanks for the patch.

Upstream ticket:
http://www.graphviz.org/mantisbt/view.php?id=2460