Bug 533992

Summary: [abrt] crash detected in evince-2.28.1-5.fc12
Product: [Fedora] Fedora Reporter: cnsturgeon2000
Component: popplerAssignee: Marek Kašík <mkasik>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: amcnabb, andrewl123456, behdad, billy, ccecchi, cje, daniel-fedoauth, dimi, dlesage, eloranta, hcamp, herzi, jnovy, johannes.postler, kenjiown, linuxnow, manuelrrojas, marco.guazzone, mkasik, mothlight, pikachu.2014, r_brakchi, rdieter, renich, rui.gouveia, sb, valery.khromov, xushaohua, zhudonghai
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard: abrt_hash:b9ae937df6f8ee694478cf04c1669393597e6e37
Fixed In Version: poppler-0.12.3-8.fc12 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-02-09 05:05:42 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
patch actualizing FcConfig before its use none

Description cnsturgeon2000 2009-11-10 00:09:48 UTC
abrt detected a crash.

Attached file: backtrace
cmdline: evince file:///tmp/pdfdownload/pdfdownload-20091009/PowerPointPosters.pdf
component: evince
executable: /usr/bin/evince
kernel: 2.6.31.5-122.fc12.x86_64
package: evince-2.28.1-5.fc12
rating: 4
reason: Process was terminated by signal 11

Comment 1 cnsturgeon2000 2009-11-10 00:09:50 UTC
Created attachment 368312 [details]
File: backtrace

Comment 3 Matthias Clasen 2010-01-05 03:19:01 UTC
*** Bug 546276 has been marked as a duplicate of this bug. ***

Comment 4 Matthias Clasen 2010-01-05 03:19:15 UTC
*** Bug 546999 has been marked as a duplicate of this bug. ***

Comment 5 Matthias Clasen 2010-01-05 03:19:25 UTC
*** Bug 547357 has been marked as a duplicate of this bug. ***

Comment 6 Matthias Clasen 2010-01-05 03:28:05 UTC
*** Bug 538813 has been marked as a duplicate of this bug. ***

Comment 7 Matthias Clasen 2010-01-05 03:28:32 UTC
*** Bug 539376 has been marked as a duplicate of this bug. ***

Comment 8 Matthias Clasen 2010-01-05 03:29:08 UTC
*** Bug 540812 has been marked as a duplicate of this bug. ***

Comment 9 Matthias Clasen 2010-01-05 03:30:09 UTC
*** Bug 540940 has been marked as a duplicate of this bug. ***

Comment 10 Matthias Clasen 2010-01-05 03:30:41 UTC
*** Bug 541007 has been marked as a duplicate of this bug. ***

Comment 11 Matthias Clasen 2010-01-05 03:31:23 UTC
*** Bug 541517 has been marked as a duplicate of this bug. ***

Comment 12 Matthias Clasen 2010-01-05 03:31:50 UTC
*** Bug 541606 has been marked as a duplicate of this bug. ***

Comment 13 Matthias Clasen 2010-01-05 03:32:03 UTC
*** Bug 542126 has been marked as a duplicate of this bug. ***

Comment 14 Matthias Clasen 2010-01-05 03:32:17 UTC
*** Bug 542480 has been marked as a duplicate of this bug. ***

Comment 15 Matthias Clasen 2010-01-05 03:32:34 UTC
*** Bug 543024 has been marked as a duplicate of this bug. ***

Comment 16 Matthias Clasen 2010-01-05 03:32:44 UTC
*** Bug 543776 has been marked as a duplicate of this bug. ***

Comment 17 Matthias Clasen 2010-01-05 03:32:57 UTC
*** Bug 544709 has been marked as a duplicate of this bug. ***

Comment 18 Matthias Clasen 2010-01-05 03:33:11 UTC
*** Bug 545017 has been marked as a duplicate of this bug. ***

Comment 19 Matthias Clasen 2010-01-05 03:33:25 UTC
*** Bug 545206 has been marked as a duplicate of this bug. ***

Comment 20 Matthias Clasen 2010-01-05 03:33:39 UTC
*** Bug 545635 has been marked as a duplicate of this bug. ***

Comment 21 Matthias Clasen 2010-01-05 03:33:50 UTC
*** Bug 545651 has been marked as a duplicate of this bug. ***

Comment 22 Matthias Clasen 2010-01-05 03:34:03 UTC
*** Bug 548976 has been marked as a duplicate of this bug. ***

Comment 23 Matthias Clasen 2010-01-05 03:34:11 UTC
*** Bug 551399 has been marked as a duplicate of this bug. ***

Comment 24 Matthias Clasen 2010-01-05 03:34:19 UTC
*** Bug 552069 has been marked as a duplicate of this bug. ***

Comment 25 Matthias Clasen 2010-01-07 14:47:04 UTC
*** Bug 553117 has been marked as a duplicate of this bug. ***

Comment 26 Marek Kašík 2010-01-21 09:05:50 UTC
*** Bug 557246 has been marked as a duplicate of this bug. ***

Comment 27 Marek Kašík 2010-01-21 11:04:37 UTC
*** Bug 557401 has been marked as a duplicate of this bug. ***

Comment 28 Marek Kašík 2010-01-27 16:25:24 UTC
Finally I have a good reproducer.

How to reproduce:

0) download some old cjkuni font rpms and some new cjkuni font rpms
   download pdfs mentioned in duplicate #551399 (Infrastructure-Planning-Commission-Guide-to-its-role-and-operation-081009.pdf) and in #540940 (http://www.t-home.de/dlp/agb/36171.pdf )

1) evince Infrastructure-Planning-Commission-Guide-to-its-role-and-operation-081009.pdf

2) rpm -U --force old/cjkuni*rpm
   rpm -U --force new/cjkuni*rpm

3) open 36171.pdf in evince

4) SIGSEGV

The reason for this is that gtk2 actualizes fontconfig's structure FcConfig and poppler has an old pointer to it. It has to be somehow actualized before using it in poppler.

This can be performed by adding "FCcfg = FcConfigGetCurrent()" before use of FCcfg, which returns the new pointer (in the case of a change) or the original pointer (if there was no change).

Marek

Comment 29 Marek Kašík 2010-01-27 16:27:37 UTC
Created attachment 387124 [details]
patch actualizing FcConfig before its use

Comment 30 Marek Kašík 2010-01-27 16:30:58 UTC
Take a notice of how new duplicates corresponds to dates of updates of font packages :) (the most important clue)

Marek

Comment 31 Behdad Esfahbod 2010-01-29 23:45:31 UTC
Marek, can you post this on upstream poppler list?  I'll follow up there then.

Comment 32 Marek Kašík 2010-02-03 16:12:15 UTC
*** Bug 561105 has been marked as a duplicate of this bug. ***

Comment 33 Marek Kašík 2010-02-08 09:11:08 UTC
*** Bug 561746 has been marked as a duplicate of this bug. ***

Comment 34 Fedora Update System 2010-02-09 05:05:22 UTC
poppler-data-0.4.0-1.fc12, poppler-0.12.3-8.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 35 Marek Kašík 2010-02-12 23:25:34 UTC
Hi Behdad,

I created upstream bug for this. You can find it here: https://bugs.freedesktop.org/show_bug.cgi?id=26544.
I had some problems with reproducing it with new evince (2.29.x and newer - it treats each PDF as separate process now).

Regards

Marek

Comment 36 Marek Kašík 2010-03-23 12:12:56 UTC
*** Bug 566243 has been marked as a duplicate of this bug. ***

Comment 37 Marek Kašík 2010-03-24 16:39:21 UTC
*** Bug 551132 has been marked as a duplicate of this bug. ***

Comment 38 Marek Kašík 2010-03-24 16:39:30 UTC
*** Bug 544886 has been marked as a duplicate of this bug. ***

Comment 39 Marek Kašík 2010-03-24 16:39:36 UTC
*** Bug 543516 has been marked as a duplicate of this bug. ***

Comment 40 Marek Kašík 2010-03-24 16:39:46 UTC
*** Bug 543106 has been marked as a duplicate of this bug. ***

Comment 41 Marek Kašík 2010-03-24 16:39:54 UTC
*** Bug 541460 has been marked as a duplicate of this bug. ***

Comment 42 Marek Kašík 2010-03-24 16:40:01 UTC
*** Bug 539736 has been marked as a duplicate of this bug. ***

Comment 43 Marek Kašík 2010-03-24 16:40:15 UTC
*** Bug 539225 has been marked as a duplicate of this bug. ***