Bug 2177270

Summary: [abrt] evince: g_malloc0(): evince killed by SIGABRT
Product: [Fedora] Fedora Reporter: Kamil Páral <kparal>
Component: evinceAssignee: Marek Kašík <mkasik>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 38CC: feborges, gnome-sig, mclasen, mkasik, rstrode, sandmann
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/0b35549a5c7241f3e4fb6bcbeffd1834633f25a
Whiteboard: abrt_hash:6903e7fe96909c7f4e613eea3b9e21c19071c502;VARIANT_ID=workstation;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-03-14 08:44:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: proc_pid_status
none
File: maps
none
File: limits
none
File: environ
none
File: open_fds
none
File: mountinfo
none
File: os_info
none
File: cpuinfo
none
File: core_backtrace
none
File: dso_list
none
File: var_log_messages
none
File: backtrace none

Description Kamil Páral 2023-03-10 16:35:48 UTC
Description of problem:
I opened and closed a PDF file.

Version-Release number of selected component:
evince-44~rc-1.fc38

Additional info:
reporter:       libreport-2.17.8
type:           CCpp
reason:         evince killed by SIGABRT
journald_cursor: s=f14ac85b1ea64de087f79c5fe57e0ea5;i=185dcf;b=f21a64da03ff4a59a1c72894e278f336;m=fe677ec2;t=5f68e574b2c9a;x=2197c0fbe3c2e24e
executable:     /usr/bin/evince
cmdline:        /usr/bin/evince /home/kparal/Downloads/MÍR-7371114604-Vyuctovani_20230310-20230310-0831002711.pdf
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/dbus-:1.1-org.gnome.Nautilus
rootdir:        /
uid:            1000
kernel:         6.2.2-301.fc38.x86_64
package:        evince-44~rc-1.fc38
runlevel:       N 5
backtrace_rating: 4
crash_function: g_malloc0
comment:        I opened and closed a PDF file.

Truncated backtrace:
Thread no. 1 (50 frames)
 #9 g_malloc0 at ../glib/gmem.c:163
 #10 _gtk_css_lookup_new at ../gtk/gtkcsslookup.c:28
 #11 gtk_css_static_style_new_compute at ../gtk/gtkcssstaticstyle.c:183
 #12 gtk_css_node_create_style at ../gtk/gtkcssnode.c:371
 #13 gtk_css_node_real_update_style at ../gtk/gtkcssnode.c:425
 #14 gtk_css_node_ensure_style.part.0.lto_priv.0 at ../gtk/gtkcssnode.c:1007
 #15 gtk_css_node_ensure_style at ../gtk/gtkcssnode.c:983
 #16 gtk_css_node_ensure_style.part.0.lto_priv.0 at ../gtk/gtkcssnode.c:1003
 #17 gtk_css_node_ensure_style at ../gtk/gtkcssnode.c:983
 #18 gtk_css_node_ensure_style.part.0.lto_priv.0 at ../gtk/gtkcssnode.c:996
 #19 gtk_css_node_ensure_style at ../gtk/gtkcssnode.c:983
 #20 gtk_css_node_get_style at ../gtk/gtkcssnode.c:1033
 #21 gtk_style_context_get_property at ../gtk/gtkstylecontext.c:844
 #22 gtk_style_context_get_valist at ../gtk/gtkstylecontext.c:876
 #23 gtk_style_context_get at ../gtk/gtkstylecontext.c:941
 #24 update_pango_context at ../gtk/gtkwidget.c:10423
 #25 gtk_widget_create_pango_context at ../gtk/gtkwidget.c:10608
 #26 gtk_widget_get_pango_context at ../gtk/gtkwidget.c:10389
 #27 gtk_widget_create_pango_layout at ../gtk/gtkwidget.c:10639
 #28 gtk_entry_create_layout at ../gtk/gtkentry.c:6353
 #29 gtk_entry_ensure_layout at ../gtk/gtkentry.c:6463
 #30 gtk_entry_get_cursor_locations.constprop.0 at ../gtk/gtkentry.c:6894
 #31 update_im_cursor_location at ../gtk/gtkentry.c:6260
 #32 gtk_entry_recompute at ../gtk/gtkentry.c:6291
 #33 g_cclosure_marshal_VOID__OBJECTv at ../gobject/gmarshal.c:1910
 #34 _g_closure_invoke_va at ../gobject/gclosure.c:895
 #37 do_screen_change at ../gtk/gtkwidget.c:9969
 #38 gtk_widget_propagate_hierarchy_changed_recurse at ../gtk/gtkwidget.c:10000
 #39 gtk_box_forall at ../gtk/gtkbox.c:2678
 #40 gtk_widget_propagate_hierarchy_changed_recurse at ../gtk/gtkwidget.c:10003
 #41 hdy_header_bar_forall at ../src/hdy-header-bar.c:1816
 #42 gtk_widget_propagate_hierarchy_changed_recurse at ../gtk/gtkwidget.c:10003
 #44 gtk_box_forall at ../gtk/gtkbox.c:2678
 #45 gtk_widget_propagate_hierarchy_changed_recurse at ../gtk/gtkwidget.c:10003
 #46 hdy_stackable_box_forall.isra.0 at ../src/hdy-stackable-box.c:2348
 #47 gtk_widget_propagate_hierarchy_changed_recurse at ../gtk/gtkwidget.c:10003
 #48 _gtk_widget_propagate_hierarchy_changed at ../gtk/gtkwidget.c:10041
 #49 gtk_widget_unparent at ../gtk/gtkwidget.c:4717
 #50 gtk_bin_remove at ../gtk/gtkbin.c:151
 #51 hdy_window_mixin_destroy at ../src/hdy-window-mixin.c:473
 #52 hdy_application_window_destroy at ../src/hdy-application-window.c:78
 #54 signal_emit_unlocked_R.isra.0 at ../gobject/gsignal.c:3920
 #57 gtk_widget_dispose at ../gtk/gtkwidget.c:12166
 #58 gtk_window_dispose at ../gtk/gtkwindow.c:3191
 #59 gtk_application_window_dispose at ../gtk/gtkapplicationwindow.c:804
 #61 gtk_main_do_event at ../gtk/gtkmain.c:1837
 #63 _gdk_event_emit at ../gdk/gdkevents.c:73
 #68 g_main_context_iterate.isra.0 at ../glib/gmain.c:4276
 #69 g_main_context_iteration at ../glib/gmain.c:4343
 #70 g_application_run at ../gio/gapplication.c:2573

Comment 1 Kamil Páral 2023-03-10 16:35:53 UTC
Created attachment 1949621 [details]
File: proc_pid_status

Comment 2 Kamil Páral 2023-03-10 16:35:55 UTC
Created attachment 1949622 [details]
File: maps

Comment 3 Kamil Páral 2023-03-10 16:35:57 UTC
Created attachment 1949623 [details]
File: limits

Comment 4 Kamil Páral 2023-03-10 16:35:59 UTC
Created attachment 1949624 [details]
File: environ

Comment 5 Kamil Páral 2023-03-10 16:36:00 UTC
Created attachment 1949625 [details]
File: open_fds

Comment 6 Kamil Páral 2023-03-10 16:36:02 UTC
Created attachment 1949626 [details]
File: mountinfo

Comment 7 Kamil Páral 2023-03-10 16:36:04 UTC
Created attachment 1949627 [details]
File: os_info

Comment 8 Kamil Páral 2023-03-10 16:36:06 UTC
Created attachment 1949628 [details]
File: cpuinfo

Comment 9 Kamil Páral 2023-03-10 16:36:08 UTC
Created attachment 1949629 [details]
File: core_backtrace

Comment 10 Kamil Páral 2023-03-10 16:36:10 UTC
Created attachment 1949630 [details]
File: dso_list

Comment 11 Kamil Páral 2023-03-10 16:36:12 UTC
Created attachment 1949631 [details]
File: var_log_messages

Comment 12 Kamil Páral 2023-03-10 16:36:15 UTC
Created attachment 1949632 [details]
File: backtrace

Comment 13 Kamil Páral 2023-03-10 17:09:14 UTC
This only seems to happen with a particular PDF file, which contains my personal details, so I don't really want to share it publicly. But I can send it to a developer privately, if it helps to fix the issue.

The terminal output differs quite a lot between executions:

$ evince 2021_01.pdf 
munmap_chunk(): invalid pointer
Aborted (core dumped)

$ evince 2021_01.pdf 

$ evince 2021_01.pdf 
double free or corruption (out)
Aborted (core dumped)

$ evince 2021_01.pdf 
Segmentation fault (core dumped)

$ evince 2021_01.pdf 
munmap_chunk(): invalid pointer
Aborted (core dumped)

Comment 14 Kamil Páral 2023-03-14 08:44:57 UTC

*** This bug has been marked as a duplicate of bug 2178016 ***