Created attachment 871197 [details]
File: backtrace

Created attachment 871198 [details]
File: cgroup

Created attachment 871199 [details]
File: core_backtrace

Created attachment 871200 [details]
File: dso_list

Created attachment 871201 [details]
File: environ

Created attachment 871202 [details]
File: limits

Created attachment 871203 [details]
File: maps

Created attachment 871204 [details]
File: open_fds

Created attachment 871205 [details]
File: proc_pid_status

Created attachment 871206 [details]
File: var_log_messages

Hi, James,

is it possible to provide the pdf? Does it happend for every page or just for a page with images or just for one certain page with image? What command do you use for opening the pdf? Just "emacs <file.pdf>"?

Regards
Jan

I think this is the PDF, but it happened a while ago so I'm not entirely certain: http://jamesnz.fedorapeople.org/A6_answers.pdf

It only happened that one time, I've never seen the bug since.
I opened it from Emacs with C-x C-f, and I also set auto-revert-mode on that buffer so the PDF would refresh while I edited the LaTeX source. I did set the auto revert interval to 1 second, and I remember that I attempted to scroll up soon after I made a change to the PDF (I used auctex, if that helps).

Thank you very much, James. Emacs crashed for me too. 

Here are the steps to reproduce it:
1) run emacs &
2) C-x C-f to open A6_answers.pdf
3) M-x global-auto-revert-mode
4) set auto-revert-interval to 1 second
5) run touch A6_answers.pdf
6) wait for auto-revert, once you see in lower bar (DocView:pdf/ps->png), press PgDown

Current stable release is emacs-24.3-16.fc20.x86_64. For which I am unable to reproduce this issue. Tracing it in emacs-24.3-13.fc20.x86_64 I found a source of SIGBUS signal in ImageMagick library, which has been updated in emacs-24.3-15.fc20.x86_64.

If "yum update emacs" does not update to emacs-24.3-16.fc20.x86_64, lunch "yum clean metadata" and then again "yum update emacs".

Yep, that seems to have fixed it. Thanks :)

ABRT is directing me to this bug after a crash in emacs-24.3-25.fc20.x86_64.  I was opening a .py (Python code) file.  Not sure how to get ABRT to open a separate bug, or if this one should be reopened.

Hi Christofer,

Open a new bug for sure. ABRT can be wrong as a lot of backtraces ends up with the same emacs_abort call.

Is your issue reproducible? List of steps to reproduce would be best. Has it occured just once?

Kind Regards
Jan

Hi,

Emacs has been crashing on me due to docview + auto-revert-mode . 
Ways to reproduce:
- Create some org file. Export to PDF
- Open the generated PDF with docview
- Turn on auto-revert-mode for the pdf
- Go back to the org file, repeat Export to PDF a few times


Expected Result: auto-revert reloads the file and docview redisplays it correctly

What Happens: Emacs crashes with SIGBUS on __memmove_avx_unaligned_erms (ReadOnePNGImage -> png_read_row -> png_read_IDAT_data -> png_crc_finish -> png_crc_error -> png_get_data -> ReadBlob -> memcpy -> __memmove_avx_unaligned_erms )

Extra Info:
It was crashing VERY often when I had doc-view-resolution set to 300. After I decreased it to 150, it has survived after several changes to the PDF.

Emacs: emacs-25.2-2.fc25
ImageMagick: ImageMagick-6.9.3.0-6.fc25

Backtrace:
#0  0x00007fffec0f4594 in __memmove_avx_unaligned_erms () at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:299
#1  0x00007ffff2e57f2d in memcpy (__len=4, __src=<optimized out>, __dest=0x7ffffffe86b0) at /usr/include/bits/string3.h:53
#2  0x00007ffff2e57f2d in ReadBlob (image=0xa4b5000, length=length@entry=4, data=data@entry=0x7ffffffe86b0 "lQ7g.") at magick/blob.c:2974
#3  0x00007fffd31c4ede in png_get_data (png_ptr=0xa4c5000, data=0x7ffffffe86b0 "lQ7g.", length=4) at coders/png.c:1345
#4  0x00007ffff76dc48d in png_crc_error (png_ptr=png_ptr@entry=0xa4c5000) at pngrutil.c:272
#5  0x00007ffff76dc57f in png_crc_finish (png_ptr=0xa4c5000, skip=<optimized out>) at pngrutil.c:226
#6  0x00007ffff76e08da in png_read_IDAT_data (png_ptr=png_ptr@entry=0xa4c5000, output=0xa4c601f "\004", avail_out=5460) at pngrutil.c:4028
#7  0x00007ffff76d3510 in png_read_row (png_ptr=0xa4c5000, row=row@entry=0xa4cf000 '\377' <repeats 200 times>..., dsp_row=dsp_row@entry=0x0) at pngread.c:537
#8  0x00007fffd31d97df in ReadOnePNGImage (mng_info=mng_info@entry=0xa4bf000, image_info=image_info@entry=0xa4af000, exception=exception@entry=0x23ad400) at coders/png.c:3125
#9  0x00007fffd31da18e in ReadPNGImage (image_info=0xa4af000, exception=0x23ad400) at coders/png.c:3939
#10 0x00007ffff2e8f828 in ReadImage (image_info=image_info@entry=0xa4aa000, exception=0x23ad400) at magick/constitute.c:547
#11 0x00007ffff336799a in MagickReadImage (wand=wand@entry=0xa49d000, filename=filename@entry=0xa49b5e8 "/tmp/docview1000/Exercicios_Struct.pdf-d05325ab9e7ecd976b0d68a06df445c1/page-1.png")
    at wand/magick-image.c:8749
#12 0x00000000005db5d5 in imagemagick_load_image (f=0x11f6db0, img=0x2840100, contents=0x0, size=0, filename=0xa49b5e8 "/tmp/docview1000/Exercicios_Struct.pdf-d05325ab9e7ecd976b0d68a06df445c1/page-1.png") at ../../src/image.c:8538
#13 0x00000000005e3a15 in lookup_image (f=0x11f6db0, spec=80018467) at ../../src/image.c:1746
#14 0x000000000043c8c7 in handle_single_display_spec (it=it@entry=0x7fffffff78a0, spec=<optimized out>, object=object@entry=142102533, overlay=overlay@entry=79725185, position=position@entry=0x7fffffff79d8, bufpos=bufpos@entry=1, display_replaced=0, frame_window_p=true) at ../../src/xdisp.c:5236
#15 0x000000000043d09c in handle_display_spec (it=it@entry=0x7fffffff78a0, spec=<optimized out>, object=object@entry=142102533, overlay=79725185, position=position@entry=0x7fffffff79d8, bufpos=bufpos@entry=1, frame_window_p=true) at ../../src/xdisp.c:4745
#16 0x000000000043d372 in handle_display_prop (it=0x7fffffff78a0) at ../../src/xdisp.c:4664
#17 0x000000000044058a in handle_stop (it=it@entry=0x7fffffff78a0) at ../../src/xdisp.c:3371
#18 0x00000000004407c0 in reseat (it=0x7fffffff78a0, pos=..., force_p=<optimized out>) at ../../src/xdisp.c:6539
#19 0x0000000000448857 in start_display (it=it@entry=0x7fffffff78a0, w=w@entry=0x88dc000, pos=...) at ../../src/xdisp.c:3002
#20 0x00000000004519b6 in try_window (window=143507461, pos=..., flags=1) at ../../src/xdisp.c:17245
#21 0x0000000000465b6e in redisplay_window (window=143507461, just_this_one_p=just_this_one_p@entry=false) at ../../src/xdisp.c:16700
#22 0x0000000000468c4b in redisplay_window_0 (window=window@entry=143507461) at ../../src/xdisp.c:14491
#23 0x0000000000564d6e in internal_condition_case_1 (bfun=0x468c20 <redisplay_window_0>, arg=143507461, handlers=<optimized out>, hfun=0x42d7f0 <redisplay_window_error>)
    at ../../src/eval.c:1339
#24 0x000000000043273d in redisplay_windows (window=143507461) at ../../src/xdisp.c:14471
#25 0x0000000000432755 in redisplay_windows (window=143453237) at ../../src/xdisp.c:14465
#26 0x0000000000455549 in redisplay_internal () at ../../src/xdisp.c:14031
#27 0x000000000045742a in redisplay_preserve_echo_area (from_where=from_where@entry=13) at ../../src/xdisp.c:14324
#28 0x00000000005ab01d in wait_reading_process_output (time_limit=time_limit@entry=37, nsecs=nsecs@entry=0, read_kbd=-1, do_display=do_display@entry=true, wait_for_cell=wait_for_cell@entry=0, wait_proc=wait_proc@entry=0x0, just_wait_proc=0) at ../../src/process.c:4668
#29 0x00000000004233d3 in sit_for (timeout=<optimized out>, reading=reading@entry=true, display_option=display_option@entry=1) at ../../src/dispnew.c:5762
#30 0x00000000004fdc29 in read_char (commandflag=commandflag@entry=1, map=map@entry=55683411, prev_event=0, used_mouse_menu=used_mouse_menu@entry=0x7fffffffd29b, end_time=end_time@entry=0x0) at ../../src/keyboard.c:2719
#31 0x00000000004fe78d in read_key_sequence (keybuf=keybuf@entry=0x7fffffffd390, prompt=prompt@entry=0, dont_downcase_last=dont_downcase_last@entry=false, can_return_switch_frame=can_return_---Type <return> to continue, or q <return> to quit---
switch_frame@entry=true, fix_current_buffer=fix_current_buffer@entry=true, prevent_redisplay=prevent_redisplay@entry=false, bufsize=30) at ../../src/keyboard.c:9068
#32 0x00000000005003c4 in command_loop_1 () at ../../src/keyboard.c:1370
#33 0x0000000000564ce2 in internal_condition_case (bfun=bfun@entry=0x5001a0 <command_loop_1>, handlers=handlers@entry=19200, hfun=hfun@entry=0x4f6a20 <cmd_error>) at ../../src/eval.c:1315
#34 0x00000000004f1e54 in command_loop_2 (ignore=ignore@entry=0) at ../../src/keyboard.c:1112
#35 0x0000000000564c83 in internal_catch (tag=tag@entry=46464, func=func@entry=0x4f1e30 <command_loop_2>, arg=arg@entry=0) at ../../src/eval.c:1080
#36 0x00000000004f1e10 in command_loop () at ../../src/keyboard.c:1091
#37 0x00000000004f6617 in recursive_edit_1 () at ../../src/keyboard.c:697
#38 0x00000000004f6968 in Frecursive_edit () at ../../src/keyboard.c:768
#39 0x000000000041a232 in main (argc=5, argv=0x7fffffffd718) at ../../src/emacs.c:1629