Hey guys: steps to reproduce: (1) open document (2) strg+shift+p (3) esc (4) strg+shift+p => crash Happens on all pdfs I tested (around 20 different sources) I can send PDFs for reproduction if someone has a problem with it. I have also strace logs (the end of one is included at the end) and can make additional logs if it is helpful. strace end: write(5, "\1\0\0\0\0\0\0\0", 8) = 8 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base="&\0\2\0W\1\0\0", iov_len=8}], 1) = 8 futex(0x7ffd8a0456a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 futex(0x5650fa4a85e8, FUTEX_WAKE_PRIVATE, 1) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335, ...}) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335, ...}) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2335, ...}) = 0 mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f197922b000 mprotect(0x7f197922c000, 8388608, PROT_READ|PROT_WRITE) = 0 clone(child_stack=0x7f1979a2aef0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0x7f1979a2b9d0, tls=0x7f1979a2b700, child_tidptr=0x7f1979a2b9d0) = 6148 futex(0x5650faa8f9b0, FUTEX_WAKE_PRIVATE, 1) = 1 brk(0x5650fd040000) = 0x5650fd040000 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base="7\0\5\0\336\0\340\7\330\0\340\7\0\0\1\0\0\0\0\0;\3\5\0\336\0\340\7\0\0\0\0"..., iov_len=112}], 1) = 112 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base=";\3\5\0\336\0\340\7\0\0\0\0\0\0\0\0\200\7\24\4\202\3\n\0\330\0\340\7\336\0\340\7"..., iov_len=76}], 1) = 76 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base=";\3\5\0\336\0\340\7\0\0\0\0\0\0\24\4\200\7$\0\202\3\n\0\330\0\340\7\336\0\340\7"..., iov_len=76}], 1) = 76 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base="\24\0\6\0\333\0\340\7y\1\0\0\6\0\0\0\0\0\0\0\4\0\0\0", iov_len=24}], 1) = 24 futex(0x7ffd8a046468, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 futex(0x5650fa4a85e8, FUTEX_WAKE_PRIVATE, 1) = 0 futex(0x7ffd8a04646c, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 futex(0x5650fa4a85e8, FUTEX_WAKE_PRIVATE, 1) = 0 shmget(IPC_PRIVATE, 360096, IPC_CREAT|0600) = 3112977 shmat(3112977, NULL, 0) = 0x7f19aa583000 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base="\202\1\4\0\337\0\340\7\21\200/\0\0\0\0\0+\0\1\0", iov_len=20}], 1) = 20 futex(0x5650fa4a85e8, FUTEX_WAKE_PRIVATE, 1) = 1 futex(0x5650fa4a85e8, FUTEX_WAKE_PRIVATE, 1) = 0 shmctl(3112977, IPC_RMID, NULL) = 0 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base="7\0\5\0\340\0\340\7\333\0\340\7\0\0\1\0\0\0\0\0;\3\5\0\340\0\340\7\0\0\0\0"..., iov_len=112}], 1) = 112 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{iov_base=";\3\5\0\340\0\340\7\0\0\0\0\0\0\0\0k\1\370\0\202\3\n\0\333\0\340\7\340\0\340\7"..., iov_len=76}], 1) = 76 futex(0x5650fa4a85e8, FUTEX_WAKE_PRIVATE, 1) = 1 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 write(5, "\1\0\0\0\0\0\0\0", 8) = 8 read(30, "\1\0\0\0\0\0\0\0", 8) = 8 getpid() = 6117 getpid() = 6117 getpid() = 6117 write(17, "\1\0\0\0\0\0\0\0", 8) = -1 EBADF (Bad file descriptor) write(2, "Invalid write to eventfd: Ung\303\274l"..., 54Invalid write to eventfd: Ungültiger Dateideskriptor ) = 54 write(2, "Code should not be reached at pu"..., 89Code should not be reached at pulsecore/fdsem.c:199, function pa_fdsem_post(). Aborting. ) = 89 rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], [], 8) = 0 getpid() = 6117 gettid() = 6117 tgkill(6117, 6117, SIGABRT) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=6117, si_uid=1000} --- +++ killed by SIGABRT (core dumped) +++
*** This bug has been marked as a duplicate of bug 393478 ***