[Okular-devel] [Bug 255704] New: okular causes system crash when zooming out in a PDF

Valentin Villenave valentin at villenave.net
Sat Oct 30 23:34:49 CEST 2010 

https://bugs.kde.org/show_bug.cgi?id=255704

           Summary: okular causes system crash when zooming out in a PDF
           Product: okular
           Version: 0.11.2
          Platform: Fedora RPMs
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: major
          Priority: NOR
         Component: PDF backend
        AssignedTo: okular-devel at kde.org
        ReportedBy: valentin at villenave.net


Created an attachment (id=53003)
 --> (http://bugs.kde.org/attachment.cgi?id=53003)
PDF file

Version:           0.11.2 (using KDE 4.5.2) 
OS:                Linux

Greetings,
I'm using 0.11.2 on Fedora 14 x86_64.  Sorry if this has been reported before,
but I couldn't find anything like it (252559 and 251564 are similar, but not
quite as annoying).

Reproducible: Always

Steps to Reproduce:
Open a single PDF document (system has just been rebooted and is perfectly
stable, no other application is running except for the KDE environment).  Zoom
in, pan, all goes smoothly.  Now zoom out (using the mouse wheel)...

Actual Results:  
... and the system immediately becomes unresponsive.  No tty switch, no Sysctrl
combo, no disk activity, nothing.  Hard reboot is the only option.

Expected Results:  
Well, it *shouldn't* make everything crash! :-)

Thanks for having a look, feel free to ask for more details!

- Launching okular with
   --graphicssystem raster
solves the problem (opengl doesn't work, I'm using the free ati driver anyway).

- The only PDF documents I tried are music scores generated with GNU LilyPond. 
As such, they include a *lot* of internal links.  (Which has never been a
problem in the past, with okular not with any PDF viewing application,
poppler-based or not).

- Attached is an example of a music score that reproduces the result here.  I
also tried to produce a valgrind log, but it isn't of much help since it
stopped writing anything as soon as the system crashed...  Here goes:

==1932== Memcheck, a memory error detector
==1932== Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward et al.
==1932== Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyright info
==1932== Command: okular opus_libre/out/ouverture.pdf
==1932== 
==1932== Conditional jump or move depends on uninitialised value(s)
==1932==    at 0x54109FB: __strcasecmp_l_ssse3 (in /lib64/libc-2.12.90.so)
==1932==    by 0x5302B79: bsearch (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FE136: _nl_expand_alias (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FC027: _nl_find_domain (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB78D: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FC37: strerror_r (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FB3D: strerror (in /lib64/libc-2.12.90.so)
==1932==    by 0x5A963F4: dlerror (in /lib64/libdl-2.12.90.so)
==1932==    by 0x34B534B8AA: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34B534C1FE: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34BA02C602: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB908: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932== 
==1932== Use of uninitialised value of size 8
==1932==    at 0x5412A44: __strcasecmp_l_ssse3 (in /lib64/libc-2.12.90.so)
==1932==    by 0x5302B79: bsearch (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FE136: _nl_expand_alias (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FC027: _nl_find_domain (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB78D: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FC37: strerror_r (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FB3D: strerror (in /lib64/libc-2.12.90.so)
==1932==    by 0x5A963F4: dlerror (in /lib64/libdl-2.12.90.so)
==1932==    by 0x34B534B8AA: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34B534C1FE: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34BA02C602: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB908: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932== 
==1932== Use of uninitialised value of size 8
==1932==    at 0x5412A48: __strcasecmp_l_ssse3 (in /lib64/libc-2.12.90.so)
==1932==    by 0x5302B79: bsearch (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FE136: _nl_expand_alias (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FC027: _nl_find_domain (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB78D: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FC37: strerror_r (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FB3D: strerror (in /lib64/libc-2.12.90.so)
==1932==    by 0x5A963F4: dlerror (in /lib64/libdl-2.12.90.so)
==1932==    by 0x34B534B8AA: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34B534C1FE: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34BA02C602: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB908: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932== 
==1932== Conditional jump or move depends on uninitialised value(s)
==1932==    at 0x535389B: __GI___strcasecmp_l (in /lib64/libc-2.12.90.so)
==1932==    by 0x52ECEE1: __gconv_open (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB206: _nl_find_msg (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB947: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FC37: strerror_r (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FB3D: strerror (in /lib64/libc-2.12.90.so)
==1932==    by 0x5A963F4: dlerror (in /lib64/libdl-2.12.90.so)
==1932==    by 0x34B534B8AA: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34B534C1FE: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34BA02C602: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB908: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBC067: QApplication::QApplication(int&, char**, bool,
int) (in /usr/lib64/libQtGui.so.4.7.0)
==1932== 
==1932== Use of uninitialised value of size 8
==1932==    at 0x53559D4: __GI___strcasecmp_l (in /lib64/libc-2.12.90.so)
==1932==    by 0x52ECEE1: __gconv_open (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB206: _nl_find_msg (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB947: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FC37: strerror_r (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FB3D: strerror (in /lib64/libc-2.12.90.so)
==1932==    by 0x5A963F4: dlerror (in /lib64/libdl-2.12.90.so)
==1932==    by 0x34B534B8AA: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34B534C1FE: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34BA02C602: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB908: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBC067: QApplication::QApplication(int&, char**, bool,
int) (in /usr/lib64/libQtGui.so.4.7.0)
==1932== 
==1932== Use of uninitialised value of size 8
==1932==    at 0x53559D8: __GI___strcasecmp_l (in /lib64/libc-2.12.90.so)
==1932==    by 0x52ECEE1: __gconv_open (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB206: _nl_find_msg (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB947: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FC37: strerror_r (in /lib64/libc-2.12.90.so)
==1932==    by 0x534FB3D: strerror (in /lib64/libc-2.12.90.so)
==1932==    by 0x5A963F4: dlerror (in /lib64/libdl-2.12.90.so)
==1932==    by 0x34B534B8AA: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34B534C1FE: ??? (in /usr/lib64/libQtCore.so.4.7.0)
==1932==    by 0x34BA02C602: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB908: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBC067: QApplication::QApplication(int&, char**, bool,
int) (in /usr/lib64/libQtGui.so.4.7.0)
==1932== 
==1932== Conditional jump or move depends on uninitialised value(s)
==1932==    at 0x535389B: __GI___strcasecmp_l (in /lib64/libc-2.12.90.so)
==1932==    by 0x52ECEE1: __gconv_open (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB206: _nl_find_msg (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB7B3: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x34B7DB435A: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DB4F8C: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD75F1: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD9E4D: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DDE1B1: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DDE220: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD6737: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DCDE3A: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932== 
==1932== Use of uninitialised value of size 8
==1932==    at 0x53559D4: __GI___strcasecmp_l (in /lib64/libc-2.12.90.so)
==1932==    by 0x52ECEE1: __gconv_open (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB206: _nl_find_msg (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB7B3: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x34B7DB435A: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DB4F8C: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD75F1: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD9E4D: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DDE1B1: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DDE220: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD6737: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DCDE3A: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932== 
==1932== Use of uninitialised value of size 8
==1932==    at 0x53559D8: __GI___strcasecmp_l (in /lib64/libc-2.12.90.so)
==1932==    by 0x52ECEE1: __gconv_open (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB206: _nl_find_msg (in /lib64/libc-2.12.90.so)
==1932==    by 0x52FB7B3: __dcigettext (in /lib64/libc-2.12.90.so)
==1932==    by 0x34B7DB435A: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DB4F8C: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD75F1: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD9E4D: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DDE1B1: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DDE220: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DD6737: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932==    by 0x34B7DCDE3A: ??? (in /usr/lib64/libkdecore.so.5.5.0)
==1932== 
okular(1932)/kdecore (KConfigSkeleton) KCoreConfigSkeleton::writeConfig:
okular(1932)/kdecore (KConfigSkeleton) KCoreConfigSkeleton::writeConfig:
==1932== Syscall param write(buf) points to uninitialised byte(s)
==1932==    at 0x4E3942D: ??? (in /lib64/libpthread-2.12.90.so)
==1932==    by 0x34B5808F2E: ??? (in /usr/lib64/libICE.so.6.3.0)
==1932==    by 0x34B580D707: _IceWrite (in /usr/lib64/libICE.so.6.3.0)
==1932==    by 0x34B580D7F3: IceFlush (in /usr/lib64/libICE.so.6.3.0)
==1932==    by 0x34BA01EFDC: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34BA01FC7F: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34BA033B8E: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34BA034528: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B4E0623B: _SmcProcessMessage (in /usr/lib64/libSM.so.6.0.0)
==1932==    by 0x34B5812153: IceProcessMessages (in /usr/lib64/libICE.so.6.3.0)
==1932==    by 0x34BA02253E: ??? (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B537002E: QMetaObject::activate(QObject*, QMetaObject
const*, int, void**) (in /usr/lib64/libQtCore.so.4.7.0)
==1932==  Address 0xca9127c is 12 bytes inside a block of size 1,024 alloc'd
==1932==    at 0x4C25481: calloc (vg_replace_malloc.c:418)
==1932==    by 0x34B5805CD8: IceOpenConnection (in /usr/lib64/libICE.so.6.3.0)
==1932==    by 0x34B4E0270A: SmcOpenConnection (in /usr/lib64/libSM.so.6.0.0)
==1932==    by 0x34BA022767: QSessionManager::QSessionManager(QApplication*,
QString&, QString&) (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB769: QApplicationPrivate::initialize() (in
/usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBB910: QApplicationPrivate::construct(_XDisplay*,
unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34B9FBC067: QApplication::QApplication(int&, char**, bool,
int) (in /usr/lib64/libQtGui.so.4.7.0)
==1932==    by 0x34BBA22BB6: KApplication::KApplication(bool) (in
/usr/lib64/libkdeui.so.5.5.0)
==1932==    by 0x408073: ??? (in /usr/bin/okular)
==1932==    by 0x52EBE7C: (below main) (in /lib64/libc-2.12.90.so)
==1932==

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

More information about the Okular-devel mailing list