Bug 366341

Application: gwenview (15.12.3)

Qt Version: 5.5.1
Operating System: Linux 4.4.0-31-generic x86_64
Distribution: Ubuntu 16.04 LTS

-- Information about the crash:
- What I was doing when the application crashed:
Open a PNG image, press "space" to go to the next image, crash. The next image is not shown, the crash happens at the moment of the switch. Happens more often if Gwenview window is maximized and the image is at 100%, in that sense could be related to 357548 and 366262. But, this behavior occurs also if no 100%-zoom was applied.

- System and Files:
System is a kubuntu 16.04 LTS, gwenview is Version 15.12.3 
Using 
KDE Frameworks 5.18.0 
Qt 5.5.1 (built against 5.5.1)
The xcb windowing system

PNG files have been made using gnuplot "set term png size 900,1600" and can unfortunately not be attached since they contain NDA material. PNG files are in a sshfs mounted directory, if that is of interest.

The crash can be reproduced sometimes.

-- Backtrace:
Application: Gwenview (gwenview), signal: Segmentation fault
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f61012349c0 (LWP 2557))]

Thread 2 (Thread 0x7f60fefd8700 (LWP 2558)):
#0  0x00007f610fb89e8d in poll () at ../sysdeps/unix/syscall-template.S:84
#1  0x00007f6108a7ec62 in _xcb_conn_wait (__timeout=-1, __nfds=1, __fds=0x7f60fefd7b00) at /usr/include/x86_64-linux-gnu/bits/poll2.h:46
#2  0x00007f6108a7ec62 in _xcb_conn_wait (c=c@entry=0x2448a80, cond=cond@entry=0x2448ac0, vector=vector@entry=0x0, count=count@entry=0x0) at ../../src/xcb_conn.c:459
#3  0x00007f6108a808d7 in xcb_wait_for_event (c=0x2448a80) at ../../src/xcb_in.c:693
#4  0x00007f6100d03629 in QXcbEventReader::run() (this=0x24525d0) at qxcbconnection.cpp:1253
#5  0x00007f611027f84e in QThreadPrivate::start(void*) (arg=0x24525d0) at thread/qthread_unix.cpp:331
#6  0x00007f610b0916fa in start_thread (arg=0x7f60fefd8700) at pthread_create.c:333
#7  0x00007f610fb95b5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7f61012349c0 (LWP 2557)):
[KCrash Handler]
#6  0x00007f610ef3ed60 in Unroll3BytesSkip1SwapSwapFirst (info=0x2d43e80, wIn=0x7ffc1516fc00, accum=0x32c9000 <error: Cannot access memory at address 0x32c9000>, Stride=1512525) at cmspack.c:296
#7  0x00007f610ef45bab in PrecalculatedXFORM (p=0x2d43e80, in=<optimized out>, out=<optimized out>, Size=1512525, Stride=1512525) at cmsxform.c:319
#8  0x00007f6114283c99 in Gwenview::RasterImageView::updateFromScaler(int, int, QImage const&) (this=0x2de2290, zoomedImageLeft=-387, zoomedImageTop=349, image=...) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/documentview/rasterimageview.cpp:322
#9  0x00007f611048ee4f in QMetaObject::activate(QObject*, int, int, void**) (a=0x7ffc1516fe70, r=0x2de2290, this=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobject_impl.h:124
#10 0x00007f611048ee4f in QMetaObject::activate(QObject*, int, int, void**) (sender=sender@entry=0x2f1a4a0, signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7ffc1516fe70) at kernel/qobject.cpp:3698
#11 0x00007f611048f7d7 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (sender=sender@entry=0x2f1a4a0, m=m@entry=0x7f611452b800 <Gwenview::ImageScaler::staticMetaObject>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7ffc1516fe70) at kernel/qobject.cpp:3578
#12 0x00007f61142e7581 in Gwenview::ImageScaler::scaledRect(int, int, QImage const&) (this=this@entry=0x2f1a4a0, _t1=-387, _t2=349, _t3=...) at /build/gwenview-iJ9mAT/gwenview-15.12.3/obj-x86_64-linux-gnu/lib/moc_imagescaler.cpp:135
#13 0x00007f61142a4947 in Gwenview::ImageScaler::scaleRect(QRect const&) (this=this@entry=0x2f1a4a0, rect=...) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/imagescaler.cpp:132
#14 0x00007f61142a50e7 in Gwenview::ImageScaler::doScale() (this=0x2f1a4a0) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/imagescaler.cpp:122
#15 0x00007f61142a51a5 in Gwenview::ImageScaler::setDestinationRegion(QRegion const&) (this=<optimized out>, region=...) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/imagescaler.cpp:102
#16 0x00007f6114282474 in Gwenview::RasterImageView::updateBuffer(QRegion const&) (this=0x2d48540) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/documentview/rasterimageview.cpp:151
#17 0x00007f6114282474 in Gwenview::RasterImageView::updateBuffer(QRegion const&) (this=<optimized out>, region=...) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/documentview/rasterimageview.cpp:443
#18 0x00007f61142825e3 in Gwenview::RasterImageView::onZoomChanged() (this=0x2de2290) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/documentview/rasterimageview.cpp:434
#19 0x00007f61142746b5 in Gwenview::AbstractImageView::setZoom(double, QPointF const&, Gwenview::AbstractImageView::UpdateType) (this=0x2de2290, zoom=<optimized out>, _center=..., updateType=<optimized out>) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/documentview/abstractimageview.cpp:220
#20 0x00007f611427ab1f in Gwenview::DocumentView::zoomActualSize() (this=0x2a43c50) at /build/gwenview-iJ9mAT/gwenview-15.12.3/lib/documentview/documentview.cpp:497
#21 0x00007f61142eaf2d in Gwenview::DocumentView::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) (_o=_o@entry=0x2a43c50, _c=_c@entry=QMetaObject::InvokeMetaMethod, _id=_id@entry=25, _a=_a@entry=0x7ffc15170340) at /build/gwenview-iJ9mAT/gwenview-15.12.3/obj-x86_64-linux-gnu/lib/moc_documentview.cpp:235
#22 0x00007f611048efca in QMetaObject::activate(QObject*, int, int, void**) (sender=sender@entry=0x26d4b00, signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=1, argv=argv@entry=0x7ffc15170340) at kernel/qobject.cpp:3713
#23 0x00007f611048f7d7 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (sender=sender@entry=0x26d4b00, m=m@entry=0x7f6111c24f00 <QAction::staticMetaObject>, local_signal_index=local_signal_index@entry=1, argv=argv@entry=0x7ffc15170340) at kernel/qobject.cpp:3578
#24 0x00007f6111719412 in QAction::triggered(bool) (this=this@entry=0x26d4b00, _t1=false) at .moc/moc_qaction.cpp:365
#25 0x00007f611171b898 in QAction::activate(QAction::ActionEvent) (this=0x26d4b00, event=<optimized out>) at kernel/qaction.cpp:1162
#26 0x00007f6111821560 in QAbstractButtonPrivate::click() (this=0x2698c30) at widgets/qabstractbutton.cpp:516
#27 0x00007f6111821694 in QAbstractButton::mouseReleaseEvent(QMouseEvent*) (this=0x26b88b0, e=0x7ffc15170850) at widgets/qabstractbutton.cpp:1132
#28 0x00007f61118e615a in QToolButton::mouseReleaseEvent(QMouseEvent*) (this=<optimized out>, e=<optimized out>) at widgets/qtoolbutton.cpp:609
#29 0x00007f6111765f88 in QWidget::event(QEvent*) (this=0x26b88b0, event=0x7ffc15170850) at kernel/qwidget.cpp:9044
#30 0x00007f61118223f1 in QAbstractButton::event(QEvent*) (this=this@entry=0x26b88b0, e=e@entry=0x7ffc15170850) at widgets/qabstractbutton.cpp:1089
#31 0x00007f61118e6239 in QToolButton::event(QEvent*) (this=0x26b88b0, event=0x7ffc15170850) at widgets/qtoolbutton.cpp:970
#32 0x00007f611172305c in QApplicationPrivate::notify_helper(QObject*, QEvent*) (this=this@entry=0x243acc0, receiver=receiver@entry=0x26b88b0, e=e@entry=0x7ffc15170850) at kernel/qapplication.cpp:3716
#33 0x00007f6111728c19 in QApplication::notify(QObject*, QEvent*) (this=<optimized out>, receiver=0x26b88b0, e=0x7ffc15170850) at kernel/qapplication.cpp:3276
#34 0x00007f611046062b in QCoreApplication::notifyInternal(QObject*, QEvent*) (this=0x7ffc151710f0, receiver=receiver@entry=0x26b88b0, event=event@entry=0x7ffc15170850) at kernel/qcoreapplication.cpp:965
#35 0x00007f6111727b32 in QApplicationPrivate::sendMouseEvent(QWidget*, QMouseEvent*, QWidget*, QWidget*, QWidget**, QPointer<QWidget>&, bool) (event=0x7ffc15170850, receiver=0x26b88b0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:227
#36 0x00007f6111727b32 in QApplicationPrivate::sendMouseEvent(QWidget*, QMouseEvent*, QWidget*, QWidget*, QWidget**, QPointer<QWidget>&, bool) (receiver=receiver@entry=0x26b88b0, event=event@entry=0x7ffc15170850, alienWidget=alienWidget@entry=0x26b88b0, nativeWidget=0x2503db0, buttonDown=buttonDown@entry=0x7f6111c53b20 <qt_button_down>, lastMouseReceiver=..., spontaneous=true) at kernel/qapplication.cpp:2770
#37 0x00007f611178057b in QWidgetWindow::handleMouseEvent(QMouseEvent*) (this=this@entry=0x28a8bc0, event=event@entry=0x7ffc15170c60) at kernel/qwidgetwindow.cpp:555
#38 0x00007f6111782b3b in QWidgetWindow::event(QEvent*) (this=0x28a8bc0, event=0x7ffc15170c60) at kernel/qwidgetwindow.cpp:210
#39 0x00007f611172305c in QApplicationPrivate::notify_helper(QObject*, QEvent*) (this=this@entry=0x243acc0, receiver=receiver@entry=0x28a8bc0, e=e@entry=0x7ffc15170c60) at kernel/qapplication.cpp:3716
#40 0x00007f6111728516 in QApplication::notify(QObject*, QEvent*) (this=0x7ffc151710f0, receiver=0x28a8bc0, e=0x7ffc15170c60) at kernel/qapplication.cpp:3499
#41 0x00007f611046062b in QCoreApplication::notifyInternal(QObject*, QEvent*) (this=0x7ffc151710f0, receiver=receiver@entry=0x28a8bc0, event=event@entry=0x7ffc15170c60) at kernel/qcoreapplication.cpp:965
#42 0x00007f61107a2521 in QGuiApplicationPrivate::processMouseEvent(QWindowSystemInterfacePrivate::MouseEvent*) (event=0x7ffc15170c60, receiver=0x28a8bc0) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:227
#43 0x00007f61107a2521 in QGuiApplicationPrivate::processMouseEvent(QWindowSystemInterfacePrivate::MouseEvent*) (e=0x29f3460) at kernel/qguiapplication.cpp:1804
#44 0x00007f61107a41e5 in QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) (e=e@entry=0x29f3460) at kernel/qguiapplication.cpp:1596
#45 0x00007f6110787f38 in QWindowSystemInterface::sendWindowSystemEvents(QFlags<QEventLoop::ProcessEventsFlag>) (flags=...) at kernel/qwindowsysteminterface.cpp:625
#46 0x00007f6100d35070 in userEventSourceDispatch(GSource*, GSourceFunc, gpointer) (source=<optimized out>) at eventdispatchers/qeventdispatcher_glib.cpp:70
#47 0x00007f610ab701a7 in g_main_context_dispatch (context=0x7f60f80016f0) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3154
#48 0x00007f610ab701a7 in g_main_context_dispatch (context=context@entry=0x7f60f80016f0) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3769
#49 0x00007f610ab70400 in g_main_context_iterate (context=context@entry=0x7f60f80016f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3840
#50 0x00007f610ab704ac in g_main_context_iteration (context=0x7f60f80016f0, may_block=may_block@entry=1) at /build/glib2.0-7IO_Yw/glib2.0-2.48.1/./glib/gmain.c:3901
#51 0x00007f61104b6a7f in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) (this=0x2477bb0, flags=...) at kernel/qeventdispatcher_glib.cpp:418
#52 0x00007f611045ddea in QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) (this=this@entry=0x7ffc15170fe0, flags=..., flags@entry=...) at kernel/qeventloop.cpp:204
#53 0x00007f6110465e8c in QCoreApplication::exec() () at kernel/qcoreapplication.cpp:1229
#54 0x00007f6110799c3c in QGuiApplication::exec() () at kernel/qguiapplication.cpp:1542
#55 0x00007f611171f495 in QApplication::exec() () at kernel/qapplication.cpp:2976
#56 0x000000000044ba70 in main(int, char**) (argc=2, argv=<optimized out>) at /build/gwenview-iJ9mAT/gwenview-15.12.3/app/main.cpp:166

Possible duplicates by query: bug 366262, bug 357548.

Reported using DrKonqi