Bug 245928

Thanks for the bug report! Could you attach the PDF file here (if it's not too large)? That could be very helpful.

Created attachment 49548 [details]
sample pdf that causes the crash for me

Thanks for the quick reply! 
I can reproduce this with many different pdfs, so I don't think there is anything special about a particular pdf, but I attached a sample pdf above...

Here's another slightly different stack trace (I had installed fedora updates and new debuginfo packages in the meantime), perhaps this one is more useful?

Application: dolphin (1.5)
KDE Platform Version: 4.4.95 (KDE 4.4.95 (KDE 4.5 >= 20100723))
Qt Version: 4.7.0
Operating System: Linux 2.6.33.6-147.fc13.i686 i686
Distribution: "Fedora release 13 (Goddard)"

Application: Dolphin (dolphin), signal: Segmentation fault
__pthread_mutex_lock (mutex=0x8596174) at pthread_mutex_lock.c:127
127	  ++mutex->__data.__nusers;
[Current thread is 1 (Thread 0xb7788780 (LWP 2459))]

Thread 3 (Thread 0xb3a45b70 (LWP 2587)):
[KCrash Handler]
#7  0x03f3a27b in Strigi::AnalysisResult::addText (this=0xb2ec2014, text=0x8ed4ae4 ' ' <repeats 93 times>, "=", length=94) at /usr/src/debug/strigi-0.7.2/src/streamanalyzer/analysisresult.cpp:261
#8  0x03f6ea81 in PdfEndAnalyzer::handle (this=0x8e847c8, s=' ' <repeats 93 times>, "=") at /usr/src/debug/strigi-0.7.2/src/streamanalyzer/endanalyzers/pdfendanalyzer.cpp:51
#9  0x03f7fd66 in PdfParser::parseOperator (this=0xb3a44c4c) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:300
#10 0x03f801a8 in PdfParser::parseContentStreamObject (this=0xb3a44c4c) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:481
#11 0x03f80258 in PdfParser::parseContentStream (this=0xb3a44c4c, s=0xb3a44cec) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:517
#12 0x03f8036f in PdfParser::handleSubStream (this=0x8e847d8, s=0xb3a44cec, type="", offset=0, numberofobjects=0) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:675
#13 0x03f8067f in PdfParser::handleSubStream (this=0x8e847d8, s=0xb3a44dd0, type="", offset=0, numberofobjects=0, hasfilter=true, filter="FlateDecode")
    at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:649
#14 0x03f80e8f in PdfParser::parseDictionaryOrStream (this=0x8e847d8) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:379
#15 0x03f8111d in PdfParser::parseObjectStreamObject (this=0x8e847d8, nestDepth=0) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:442
#16 0x03f813ba in PdfParser::parseObjectStreamObjectDef (this=0x8e847d8) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:566
#17 0x03f814f8 in PdfParser::parse (this=0x8e847d8, stream=0x8e85098) at /usr/src/debug/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:600
#18 0x03f6eb9d in PdfEndAnalyzer::analyze (this=0x8e847c8, as=..., in=0x8e85098) at /usr/src/debug/strigi-0.7.2/src/streamanalyzer/endanalyzers/pdfendanalyzer.cpp:62
#19 0x03f5889a in Strigi::StreamAnalyzerPrivate::analyze (this=0x8e360e8, idx=..., input=0x8e85098) at /usr/src/debug/strigi-0.7.2/src/streamanalyzer/streamanalyzer.cpp:421
#20 0x00673a17 in KFileMetaInfoPrivate::init (this=0x8cfda60, stream=..., url=..., mtime=1265897894, w=...) at /usr/src/debug/kdelibs-4.4.95/kio/kio/kfilemetainfo.cpp:210
#21 0x00674d1a in KFileMetaInfo::KFileMetaInfo (this=0xb3a45240, path=..., w=...) at /usr/src/debug/kdelibs-4.4.95/kio/kio/kfilemetainfo.cpp:237
#22 0x00759adf in KLoadFileMetaDataThread::run (this=0x8e44ef8) at /usr/src/debug/kdelibs-4.4.95/kio/kfile/kloadfilemetadatathread.cpp:124
#23 0x026d08aa in QThreadPrivate::start (arg=0x8e44ef8) at thread/qthread_unix.cpp:266
#24 0x0015f919 in start_thread (arg=0xb3a45b70) at pthread_create.c:301
#25 0x06f0ccbe in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 2 (Thread 0xb2ec2b70 (LWP 2588)):
#0  0x009a6416 in __kernel_vsyscall ()
#1  0x06f05091 in select () at ../sysdeps/unix/syscall-template.S:82
#2  0x027ed7e2 in qt_safe_select (nfds=13, fdread=0xb2ec19ac, fdwrite=0xb2ec192c, fdexcept=0x0, orig_timeout=0x0) at kernel/qcore_unix.cpp:82
#3  0x027a130f in select_msecs (nfds=13, fdread=0xb2ec19ac, fdwrite=0xb2ec192c, timeout=-1) at io/qprocess_unix.cpp:885
#4  0x027a1aff in QProcessPrivate::waitForFinished (this=0x8f29798, msecs=-1) at io/qprocess_unix.cpp:1101
#5  0x0276017f in QProcess::waitForFinished (this=0xb2ec1ac4, msecs=-1) at io/qprocess.cpp:1698
#6  0x02765de2 in QProcess::execute (program=..., arguments=...) at io/qprocess.cpp:2092
#7  0x00fd85a8 in KToolInvocation::startKdeinit () at /usr/src/debug/kdelibs-4.4.95/kdecore/kernel/ktoolinvocation.cpp:387
#8  0x00fd8779 in KToolInvocation::klauncher () at /usr/src/debug/kdelibs-4.4.95/kdecore/kernel/ktoolinvocation.cpp:63
#9  0x01088738 in KSycocaPrivate::checkDatabase (this=0x8f21f28, ifNotFound=...) at /usr/src/debug/kdelibs-4.4.95/kdecore/sycoca/ksycoca.cpp:428
#10 0x01089323 in KSycoca::findFactory (this=0x8f14568, id=KST_KServiceTypeFactory) at /usr/src/debug/kdelibs-4.4.95/kdecore/sycoca/ksycoca.cpp:456
#11 0x0108cc4c in KSycocaFactory::KSycocaFactory (this=0x8eb4e90, factory_id=KST_KServiceTypeFactory) at /usr/src/debug/kdelibs-4.4.95/kdecore/sycoca/ksycocafactory.cpp:53
#12 0x0100400b in KServiceTypeFactory::KServiceTypeFactory (this=0x8eb4e90) at /usr/src/debug/kdelibs-4.4.95/kdecore/services/kservicetypefactory.cpp:31
#13 0x010045ec in self () at /usr/src/debug/kdelibs-4.4.95/kdecore/sycoca/ksycocafactory.h:200
#14 KServiceTypeFactory::self () at /usr/src/debug/kdelibs-4.4.95/kdecore/services/kservicetypefactory.cpp:65
#15 0x010080f0 in KServiceTypeTrader::defaultOffers (this=0x88b00f8, serviceType=..., constraint=...) at /usr/src/debug/kdelibs-4.4.95/kdecore/services/kservicetypetrader.cpp:116
#16 0x0100856d in KServiceTypeTrader::query (this=0x88b00f8, serviceType=..., constraint=...) at /usr/src/debug/kdelibs-4.4.95/kdecore/services/kservicetypetrader.cpp:141
#17 0x0067b1c4 in KFileWriterProvider::loadPlugin (this=0x8cd6538, key=...) at /usr/src/debug/kdelibs-4.4.95/kio/kio/kfilewriteplugin.cpp:52
#18 0x00673716 in KFileMetaInfoPrivate::initWriters (this=0x8eaacb0, file=...) at /usr/src/debug/kdelibs-4.4.95/kio/kio/kfilemetainfo.cpp:220
#19 0x00674e83 in KFileMetaInfo::KFileMetaInfo (this=0xb2ec2240, path=..., w=...) at /usr/src/debug/kdelibs-4.4.95/kio/kio/kfilemetainfo.cpp:239
#20 0x00759adf in KLoadFileMetaDataThread::run (this=0x8eb5060) at /usr/src/debug/kdelibs-4.4.95/kio/kfile/kloadfilemetadatathread.cpp:124
#21 0x026d08aa in QThreadPrivate::start (arg=0x8eb5060) at thread/qthread_unix.cpp:266
#22 0x0015f919 in start_thread (arg=0xb2ec2b70) at pthread_create.c:301
#23 0x06f0ccbe in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:133

Thread 1 (Thread 0xb7788780 (LWP 2459)):
#0  __pthread_mutex_lock (mutex=0x8596174) at pthread_mutex_lock.c:127
#1  0x05a1013c in ?? () from /usr/lib/libxcb.so.1
#2  0x05a11d52 in xcb_wait_for_reply () from /usr/lib/libxcb.so.1
#3  0x0393fff6 in _XReply (dpy=0x85a0618, rep=0xbfd648d0, extra=0, discard=0) at xcb_io.c:461
#4  0x0391c52a in XGetImage (dpy=0x85a0618, d=27280398, x=0, y=0, width=128, height=128, plane_mask=4294967295, format=2) at GetImage.c:77
#5  0x02d27549 in QX11PixmapData::toImage (this=0x8df61d0) at image/qpixmap_x11.cpp:1498
#6  0x02d0e8cc in QPixmap::toImage (this=0xbfd64da4) at image/qpixmap.cpp:487
#7  0x00c27778 in KIconEffect::apply (this=0xbfd64dbc, pixmap=..., effect=1, value=1, col=..., col2=..., trans=true) at /usr/src/debug/kdelibs-4.4.95/kdeui/icons/kiconeffect.cpp:287
#8  0x00c27ab6 in KIconEffect::apply (this=0xbfd64dbc, pixmap=..., group=0, state=2) at /usr/src/debug/kdelibs-4.4.95/kdeui/icons/kiconeffect.cpp:259
#9  0x008b05fd in InformationPanelContent::markOutdatedPreview (this=0x875f790) at /usr/src/debug/kdebase-4.4.95/apps/dolphin/src/panels/information/informationpanelcontent.cpp:335
#10 0x008b26a3 in InformationPanelContent::qt_metacall (this=0x875f790, _c=QMetaObject::InvokeMetaMethod, _id=<value optimized out>, _a=0xbfd64ebc)
    at /usr/src/debug/kdebase-4.4.95/i686-redhat-linux-gnu/apps/dolphin/src/informationpanelcontent.moc:87
#11 0x027cabab in QMetaObject::metacall (object=0x875f790, cl=QMetaObject::InvokeMetaMethod, idx=31, argv=0xbfd64ebc) at kernel/qmetaobject.cpp:237
#12 0x027dcf7d in QMetaObject::activate (sender=0x875f928, m=0x28f7a44, local_signal_index=0, argv=0x0) at kernel/qobject.cpp:3272
#13 0x02825d78 in QTimer::timeout (this=0x875f928) at .moc/release-shared/moc_qtimer.cpp:134
#14 0x027e165e in QTimer::timerEvent (this=0x875f928, e=0xbfd653f0) at kernel/qtimer.cpp:271
#15 0x027d7804 in QObject::event (this=0x875f928, e=0xbfd653f0) at kernel/qobject.cpp:1175
#16 0x02c2bdfc in QApplicationPrivate::notify_helper (this=0x8589be0, receiver=0x875f928, e=0xbfd653f0) at kernel/qapplication.cpp:4389
#17 0x02c323a6 in QApplication::notify (this=0xbfd65760, receiver=0x875f928, e=0xbfd653f0) at kernel/qapplication.cpp:3791
#18 0x00c7a00b in KApplication::notify (this=0xbfd65760, receiver=0x875f928, event=0xbfd653f0) at /usr/src/debug/kdelibs-4.4.95/kdeui/kernel/kapplication.cpp:309
#19 0x027c57c3 in QCoreApplication::notifyInternal (this=0xbfd65760, receiver=0x875f928, event=0xbfd653f0) at kernel/qcoreapplication.cpp:732
#20 0x027f2e1e in sendEvent (this=0x8590184) at kernel/qcoreapplication.h:215
#21 QTimerInfoList::activateTimers (this=0x8590184) at kernel/qeventdispatcher_unix.cpp:602
#22 0x027f0598 in timerSourceDispatch (source=0x85901c0) at kernel/qeventdispatcher_glib.cpp:184
#23 idleTimerSourceDispatch (source=0x85901c0) at kernel/qeventdispatcher_glib.cpp:231
#24 0x063ae525 in g_main_dispatch (context=0x858c318) at gmain.c:1960
#25 IA__g_main_context_dispatch (context=0x858c318) at gmain.c:2513
#26 0x063b2268 in g_main_context_iterate (context=0x162490, block=1, dispatch=1, self=0x8589e58) at gmain.c:2591
#27 0x063b2449 in IA__g_main_context_iteration (context=0x858c318, may_block=1) at gmain.c:2654
#28 0x027f0246 in QEventDispatcherGlib::processEvents (this=0x8584190, flags=...) at kernel/qeventdispatcher_glib.cpp:412
#29 0x02cdbce6 in QGuiEventDispatcherGlib::processEvents (this=0x8584190, flags=...) at kernel/qguieventdispatcher_glib.cpp:204
#30 0x027c433a in QEventLoop::processEvents (this=0xbfd656b4, flags=...) at kernel/qeventloop.cpp:149
#31 0x027c469a in QEventLoop::exec (this=0xbfd656b4, flags=...) at kernel/qeventloop.cpp:201
#32 0x027c95f7 in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1009
#33 0x02c2add8 in QApplication::exec () at kernel/qapplication.cpp:3665
#34 0x008adbf3 in kdemain (argc=5, argv=0xbfd65954) at /usr/src/debug/kdebase-4.4.95/apps/dolphin/src/main.cpp:98
#35 0x0804872c in main (argc=5, argv=0xbfd65954) at /usr/src/debug/kdebase-4.4.95/i686-redhat-linux-gnu/apps/dolphin/src/dolphin_dummy.cpp:3

Reported using DrKonqi

Thanks for the file! Crash confirmed in trunk.

Created attachment 49573 [details]
Valgrind log

Here's a log of the crash. There's an error message between the Valgrind messages:

EventThroughAnalyzer has left the stream in a bad state.

@Jos: We're getting quite many Strigi-related crashes at the moment - maybe they are all due to the same issue (which we can reproduce now). I think it would be good if this could be sorted out soon (4.5 is going to be released soon, and we'll see lots of crashes if this bug is not fixed before that).

*** Bug 246140 has been marked as a duplicate of this bug. ***

*** Bug 244852 has been marked as a duplicate of this bug. ***

*** Bug 244959 has been marked as a duplicate of this bug. ***

This issue is probably related to bug 232054 which has been fixed recently.

*** Bug 246611 has been marked as a duplicate of this bug. ***

*** Bug 246615 has been marked as a duplicate of this bug. ***

Created attachment 49926 [details]
New crash information added by DrKonqi

dolphin (1.5) on KDE Platform 4.4.92 (KDE 4.4.92 (KDE 4.5 RC2)) using Qt 4.7.0

- What I was doing when the application crashed:
While hovering over some icons dolphin crashed

-- Backtrace (Reduced):
#8  0x06d1f90e in Strigi::StreamAnalyzerPrivate::analyze (this=0xa080138, idx=<value optimized out>, input=0xa114910) at /build/buildd/strigi-0.7.2/src/streamanalyzer/streamanalyzer.cpp:477
#9  0x06cfcae8 in Strigi::AnalysisResult::indexChild (this=0xb3d9a094, name=..., mt=1271094502, file=0xb3d99e28) at /build/buildd/strigi-0.7.2/src/streamanalyzer/analysisresult.cpp:250
#10 0x06d36ee0 in PdfEndAnalyzer::handle (this=0xa0e5310, s=0xb3d99e28) at /build/buildd/strigi-0.7.2/src/streamanalyzer/endanalyzers/pdfendanalyzer.cpp:45
#11 0x06d48a8f in PdfParser::handleSubStream (this=0xa0e5320, s=0xb3d99e28, type=..., offset=0, numberofobjects=0) at /build/buildd/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:681
#12 0x06d48da1 in PdfParser::handleSubStream (this=0xa0e5320, s=0xb3d99e28, type=..., offset=0, numberofobjects=0, hasfilter=true, filter=...)
    at /build/buildd/strigi-0.7.2/src/streams/pdf/pdfparser.cpp:655

Seems to be resolved in the current version (current 4.5 build for Fedora 13), at least I can't reproduce it anymore.

Thanks for checking! When providing a patch shortly before the KDE SC 4.5.0 release, I tested it also with some PDFs where I also had crashes before. But I wanted to wait until the fix has also been confirmed by people using an official KDE SC 4.5.0 release :-)

*** Bug 244275 has been marked as a duplicate of this bug. ***