Bug 158549

Summary:	crashes when trying to open enixma online magazine
Product:	[Applications] kpdf	Reporter:	Erdener <erdener>
Component:	general	Assignee:	Albert Astals Cid <aacid>
Status:	RESOLVED WORKSFORME
Severity:	crash
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	unspecified
OS:	Linux
Latest Commit:		Version Fixed In:

Description Erdener 2008-02-28 22:07:32 UTC

Version:           0.5.9 (using KDE 3.5.9)
Installed from:    Unlisted Binary Package
OS:                Linux

Enixma magazine is a online linux magazine. When i try to open; it says "the document will be opened via presentation mode" (i don't know the certain English words, i use it in Turkish, this is a bad translation.) After then, i see the first page and kpdf crashes. 

When i try to run from console:
$ kpdf enixma0802.pdf
*** glibc detected *** free(): invalid next size (fast): 0x0820f2d8 ***
KCrash: Application 'kpdf' crashing...
QSocketNotifier: invalid socket 12 and type 'Read', disabling...

Here is the document that i try to open: http://www.enixma.org/indir.php?id=170802

Comment 1 Albert Astals Cid 2008-02-28 22:50:45 UTC

Can not reproduce but again i get the 

==7414== Invalid read of size 1
==7414==    at 0xDFCF02E: SplashXPathScanner::clipAALine(SplashBitmap*, int*, int*, int) (SplashXPathScanner.cc:424)
==7414==    by 0xDFC1BBB: SplashClip::clipAALine(SplashBitmap*, int*, int*, int) (SplashClip.cc:380)
==7414==    by 0xDFC0C21: Splash::drawAAPixel(SplashPipe*, int, int) (Splash.cc:640)
==7414==    by 0xDFBB9C6: Splash::drawImage(int (*)(void*, unsigned char*, unsigned char*), void*, SplashColorMode, int, int, int, double*) (Splash.cc:2680)
==7414==    by 0xDF6165D: SplashOutputDev::drawSoftMaskedImage(GfxState*, Object*, Stream*, int, int, GfxImageColorMap*, Stream*, int, int, GfxImageColorMap*) (SplashOutputDev.cc:2422)
==7414==    by 0xDEF2DDE: Gfx::doImage(Object*, Stream*, int) (Gfx.cc:3656)
==7414==    by 0xDEFE3EC: Gfx::opXObject(Object*, int) (Gfx.cc:3330)
==7414==    by 0xDEFAF37: Gfx::execOp(Object*, Object*, int) (Gfx.cc:690)
==7414==    by 0xDEFB0AC: Gfx::go(int) (Gfx.cc:581)
==7414==    by 0xDEFB4EE: Gfx::display(Object*, int) (Gfx.cc:553)
==7414==    by 0xDF43986: Page::displaySlice(OutputDev*, double, double, int, int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:434)
==7414==    by 0xDF43C2E: Page::display(OutputDev*, double, double, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:383)
==7414==  Address 0x10CD6BD0 is 0 bytes after a block of size 2,560 alloc'd
==7414==    at 0x4C21C16: malloc (vg_replace_malloc.c:149)
==7414==    by 0xDF9C91D: gmalloc (gmem.cc:97)
==7414==    by 0xDFC1615: SplashBitmap::SplashBitmap(int, int, int, SplashColorMode, int, int) (SplashBitmap.cc:47)
==7414==    by 0xDFBEC66: Splash::Splash(SplashBitmap*, int, SplashScreenParams*) (Splash.cc:781)
==7414==    by 0xDF666B9: SplashOutputDev::startPage(int, GfxState*) (SplashOutputDev.cc:741)
==7414==    by 0xDF032B0: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, double, double, PDFRectangle*, PDFRectangle*, int, int (*)(void*), void*) (Gfx.cc:457)
==7414==    by 0xDF43930: Page::displaySlice(OutputDev*, double, double, int, int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:430)
==7414==    by 0xDF43C2E: Page::display(OutputDev*, double, double, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:383)
==7414==    by 0xDF40ADF: PDFDoc::displayPage(OutputDev*, int, double, double, int, int, int, int, int (*)(void*), void*) (PDFDoc.cc:350)
==7414==    by 0xDFF4A29: PDFGenerator::generatePixmap(PixmapRequest*) (generator_pdf.cpp:319)
==7414==    by 0xDFE44BD: KPDFDocument::sendGeneratorRequest() (document.cpp:1169)
==7414==    by 0xDFE4BAD: KPDFDocument::requestDone(PixmapRequest*) (document.cpp:1141)
==7414==
==7414== Invalid write of size 1
==7414==    at 0xDFCF048: SplashXPathScanner::clipAALine(SplashBitmap*, int*, int*, int) (SplashXPathScanner.cc:424)
==7414==    by 0xDFC1BBB: SplashClip::clipAALine(SplashBitmap*, int*, int*, int) (SplashClip.cc:380)
==7414==    by 0xDFC0C21: Splash::drawAAPixel(SplashPipe*, int, int) (Splash.cc:640)
==7414==    by 0xDFBB9C6: Splash::drawImage(int (*)(void*, unsigned char*, unsigned char*), void*, SplashColorMode, int, int, int, double*) (Splash.cc:2680)
==7414==    by 0xDF6165D: SplashOutputDev::drawSoftMaskedImage(GfxState*, Object*, Stream*, int, int, GfxImageColorMap*, Stream*, int, int, GfxImageColorMap*) (SplashOutputDev.cc:2422)
==7414==    by 0xDEF2DDE: Gfx::doImage(Object*, Stream*, int) (Gfx.cc:3656)
==7414==    by 0xDEFE3EC: Gfx::opXObject(Object*, int) (Gfx.cc:3330)
==7414==    by 0xDEFAF37: Gfx::execOp(Object*, Object*, int) (Gfx.cc:690)
==7414==    by 0xDEFB0AC: Gfx::go(int) (Gfx.cc:581)
==7414==    by 0xDEFB4EE: Gfx::display(Object*, int) (Gfx.cc:553)
==7414==    by 0xDF43986: Page::displaySlice(OutputDev*, double, double, int, int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:434)
==7414==    by 0xDF43C2E: Page::display(OutputDev*, double, double, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:383)
==7414==  Address 0x10CD6BD0 is 0 bytes after a block of size 2,560 alloc'd
==7414==    at 0x4C21C16: malloc (vg_replace_malloc.c:149)
==7414==    by 0xDF9C91D: gmalloc (gmem.cc:97)
==7414==    by 0xDFC1615: SplashBitmap::SplashBitmap(int, int, int, SplashColorMode, int, int) (SplashBitmap.cc:47)
==7414==    by 0xDFBEC66: Splash::Splash(SplashBitmap*, int, SplashScreenParams*) (Splash.cc:781)
==7414==    by 0xDF666B9: SplashOutputDev::startPage(int, GfxState*) (SplashOutputDev.cc:741)
==7414==    by 0xDF032B0: Gfx::Gfx(XRef*, OutputDev*, int, Dict*, double, double, PDFRectangle*, PDFRectangle*, int, int (*)(void*), void*) (Gfx.cc:457)
==7414==    by 0xDF43930: Page::displaySlice(OutputDev*, double, double, int, int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:430)
==7414==    by 0xDF43C2E: Page::display(OutputDev*, double, double, int, int, int, int, Catalog*, int (*)(void*), void*) (Page.cc:383)
==7414==    by 0xDF40ADF: PDFDoc::displayPage(OutputDev*, int, double, double, int, int, int, int, int (*)(void*), void*) (PDFDoc.cc:350)
==7414==    by 0xDFF4A29: PDFGenerator::generatePixmap(PixmapRequest*) (generator_pdf.cpp:319)
==7414==    by 0xDFE44BD: KPDFDocument::sendGeneratorRequest() (document.cpp:1169)
==7414==    by 0xDFE4BAD: KPDFDocument::requestDone(PixmapRequest*) (document.cpp:1141)

valgrind warnings, will investigate further when i have more time

Comment 2 Albert Astals Cid 2009-08-27 00:34:41 UTC

As far as i remember i fixed this bug somewhen so i'm closing this bug as worksforme.

Anyway KPDF is not developed anymore, so if you have a pdf that crashes in Okular (KPDF successor) please open a new bug report against it.