Bug 96615 - Crash rotating an EPS file in Evince
Summary: Crash rotating an EPS file in Evince
Status: RESOLVED DUPLICATE of bug 76450
Alias: None
Product: pixman
Classification: Unclassified
Component: pixman (show other bugs)
Version: other
Hardware: Other All
: medium normal
Assignee: Oded Gabbay
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-06-21 14:20 UTC by Paul Menzel
Modified: 2016-09-29 17:49 UTC (History)
2 users (show)

See Also:
i915 platform:
i915 features:


Attachments
Test case crashing Evince (7.23 KB, image/x-eps)
2016-06-21 14:20 UTC, Paul Menzel
Details
R script to generate EPS files crashing Evince (435 bytes, text/plain)
2016-06-21 14:22 UTC, Paul Menzel
Details

Description Paul Menzel 2016-06-21 14:20:49 UTC
Created attachment 124639 [details]
Test case crashing Evince

With at least Pixman 0.32.4 and 0.34.0, Evince terminates due to a segmentation fault in libpixman, rotating an EPS file.

#0  0x00007ffff03010a6 in sse2_blt (src_bits=<optimized out>, dst_bits=<optimized out>, src_stride=<optimized out>, dst_stride=<optimized out>, src_bpp=<optimized out>, src_x=<optimized out>, src_y=0, dest_x=0, dest_y=0, width=803, height=<optimized out>, dst_bpp=<optimized out>, imp=<optimized out>) at /dev/shm/bee-root/pixman/pixman-0.34.0-0/source/pixman/pixman-sse2.c:4768
#1  0x00007ffff02c5033 in _pixman_implementation_blt (imp=0x6735b0, src_bits=0x7fffd8a49ea0, dst_bits=0x7fffcb8b3000, src_stride=1272, dst_stride=803, src_bpp=32, dst_bpp=32, src_x=0, src_y=0, dest_x=0, dest_y=0, width=803, height=1003) at /dev/shm/bee-root/pixman/pixman-0.34.0-0/source/pixman/pixman-implementation.c:250
#2  0x00007ffff0280941 in pixman_blt (src_bits=<optimized out>, dst_bits=<optimized out>, src_stride=<optimized out>, dst_stride=<optimized out>, src_bpp=<optimized out>, dst_bpp=<optimized out>, src_x=0, src_y=0, dest_x=0, dest_y=0, width=803, height=height@entry=1003) at /dev/shm/bee-root/pixman/pixman-0.34.0-0/source/pixman/pixman.c:741
#3  0x00007ffff495fd80 in draw_image_boxes (_dst=0xb3f930, image=0x7fffd8036460, boxes=0x7fffffffb380, dx=-1513, dy=-8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-xlib-render-compositor.c:329
#4  0x00007ffff494a73b in clip_and_composite_boxes (compositor=0x7ffff4bd7b00 <compositor>, compositor=0x7ffff4bd7b00 <compositor>, boxes=0x7fffffffb380, extents=0x7fffffffb600) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:1351
#5  0x00007ffff494a73b in clip_and_composite_boxes (compositor=compositor@entry=0x7ffff4bd7b00 <compositor>, extents=extents@entry=0x7fffffffb600, boxes=boxes@entry=0x7fffffffb380) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:1751
#6  0x00007ffff494b272 in _cairo_traps_compositor_paint (_compositor=0x7ffff4bd7b00 <compositor>, extents=0x7fffffffb600) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:2063
#7  0x00007ffff48eff79 in _cairo_compositor_paint (compositor=0x7ffff4bd7b00 <compositor>, surface=0xb3f930, op=<optimized out>, source=<optimized out>, clip=<optimized out>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-compositor.c:65
#8  0x00007ffff49381f1 in _cairo_surface_paint (surface=0xb3f930, op=CAIRO_OPERATOR_OVER, source=0x7fffffffb940, clip=0xc50aa0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-surface.c:2117
#9  0x00007ffff48f7b44 in _cairo_gstate_paint (gstate=0xc50900) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-gstate.c:1067
#10 0x00007ffff48eb007 in INT_cairo_paint (cr=0xb30df0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo.c:2003
#11 0x00007ffff797af53 in draw_surface (cr=cr@entry=0xb30df0, surface=surface@entry=0x7fffd8036460, x=1513, y=8, offset_x=offset_x@entry=0, offset_y=offset_y@entry=0, target_width=803, target_height=1271) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:6626
#12 0x00007ffff7984854 in ev_view_draw (page_ready=<synthetic pointer>, expose_area=0x7fffffffbb90, border=0x7fffffffbb70, page_area=0x7fffffffbba0, cr=0xb30df0, page=0, view=0xaaa120 [EvView]) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:6740
#13 0x00007ffff7984854 in ev_view_draw (widget=0xaaa120 [EvView], cr=<optimized out>) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:4566
#14 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffbde0, instance=instance@entry=0xaaa120, args=args@entry=0x7fffffffbed8, marshal_data=marshal_data@entry=0x7ffff7984380 <ev_view_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#15 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffbde0, instance=0xaaa120, args=0x7fffffffbed8, marshal_data=0x7ffff7984380 <ev_view_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#16 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffbde0, instance=0xaaa120, args=0x7fffffffbed8, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#17 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xaaa120, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffbed8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#18 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xaaa120, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#19 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xaaa120 [EvView], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb7e3f0 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#20 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb7e3f0 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0xaaa120 [EvView]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#21 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb7e3f0 [GdkX11Window], cr=cr@entry=0xb30df0, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#22 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0xaaa120 [EvView], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#23 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x8914a0 [GtkScrolledWindow], child=0xaaa120 [EvView], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#24 0x00007ffff5dee762 in gtk_container_draw (widget=0x8914a0 [GtkScrolledWindow], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#25 0x00007ffff5f16c46 in gtk_scrolled_window_draw (widget=0x8914a0 [GtkScrolledWindow], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkscrolledwindow.c:2232
#26 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffc420, instance=instance@entry=0x8914a0, args=args@entry=0x7fffffffc518, marshal_data=marshal_data@entry=0x7ffff5f16c00 <gtk_scrolled_window_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#27 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffc420, instance=0x8914a0, args=0x7fffffffc518, marshal_data=0x7ffff5f16c00 <gtk_scrolled_window_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#28 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffc420, instance=0x8914a0, args=0x7fffffffc518, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#29 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x8914a0, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffc518) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#30 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x8914a0, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#31 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x8914a0 [GtkScrolledWindow], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2bd20 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#32 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb2bd20 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0x8914a0 [GtkScrolledWindow]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#33 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb2bd20 [GdkX11Window], cr=cr@entry=0xb30df0, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#34 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0x8914a0 [GtkScrolledWindow], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#35 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0xa95190 [GtkOverlay], child=0x8914a0 [GtkScrolledWindow], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#36 0x00007ffff5dee762 in gtk_container_draw (widget=0xa95190 [GtkOverlay], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#37 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffc9a0, instance=instance@entry=0xa95190, args=args@entry=0x7fffffffca98, marshal_data=marshal_data@entry=0x7ffff5dee6e0 <gtk_container_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#38 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffc9a0, instance=0xa95190, args=0x7fffffffca98, marshal_data=0x7ffff5dee6e0 <gtk_container_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#39 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffc9a0, instance=0xa95190, args=0x7fffffffca98, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#40 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xa95190, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffca98) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#41 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xa95190, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#42 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xa95190 [GtkOverlay], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ba80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#43 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xb2ba80 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0xa95190 [GtkOverlay]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#44 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0xa95190 [GtkOverlay], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#45 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0xa72270 [GtkBox], child=0xa95190 [GtkOverlay], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#46 0x00007ffff5dee762 in gtk_container_draw (widget=0xa72270 [GtkBox], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#47 0x00007ffff5daad92 in gtk_box_draw (widget=0xa72270 [GtkBox], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkbox.c:447
#48 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffcec0, instance=instance@entry=0xa72270, args=args@entry=0x7fffffffcfb8, marshal_data=marshal_data@entry=0x7ffff5daad10 <gtk_box_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#49 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffcec0, instance=0xa72270, args=0x7fffffffcfb8, marshal_data=0x7ffff5daad10 <gtk_box_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#50 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffcec0, instance=0xa72270, args=0x7fffffffcfb8, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#51 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xa72270, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffcfb8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#52 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xa72270, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#53 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xa72270 [GtkBox], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ba80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#54 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xb2ba80 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0xa72270 [GtkBox]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#55 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0xa72270 [GtkBox], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#56 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x8f8f90 [GtkPaned], child=0xa72270 [GtkBox], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#57 0x00007ffff5dee762 in gtk_container_draw (widget=0x8f8f90 [GtkPaned], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#58 0x00007ffff5ed45f3 in gtk_paned_draw (widget=0x8f8f90 [GtkPaned], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkpaned.c:1756
#59 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffd3f0, instance=instance@entry=0x8f8f90, args=args@entry=0x7fffffffd4e8, marshal_data=marshal_data@entry=0x7ffff5ed4560 <gtk_paned_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#60 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffd3f0, instance=0x8f8f90, args=0x7fffffffd4e8, marshal_data=0x7ffff5ed4560 <gtk_paned_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#61 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffd3f0, instance=0x8f8f90, args=0x7fffffffd4e8, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#62 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x8f8f90, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffd4e8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#63 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x8f8f90, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#64 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x8f8f90 [GtkPaned], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ba80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#65 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb2ba80 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0x8f8f90 [GtkPaned]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#66 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb2ba80 [GdkX11Window], cr=cr@entry=0xb30df0, window_x=<optimized out>, window_y=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#67 0x00007ffff5fd6c22 in _gtk_widget_draw (widget=widget@entry=0x8f8f90 [GtkPaned], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7161
#68 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x6c1510 [GtkBox], child=0x8f8f90 [GtkPaned], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#69 0x00007ffff5dee762 in gtk_container_draw (widget=0x6c1510 [GtkBox], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#70 0x00007ffff5daad92 in gtk_box_draw (widget=0x6c1510 [GtkBox], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkbox.c:447
#71 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffd9a0, instance=instance@entry=0x6c1510, args=args@entry=0x7fffffffda98, marshal_data=marshal_data@entry=0x7ffff5daad10 <gtk_box_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#72 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffd9a0, instance=0x6c1510, args=0x7fffffffda98, marshal_data=0x7ffff5daad10 <gtk_box_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#73 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffd9a0, instance=0x6c1510, args=0x7fffffffda98, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#74 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x6c1510, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffda98) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#75 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x6c1510, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#76 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x6c1510 [GtkBox], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xa72930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#77 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xa72930 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0x6c1510 [GtkBox]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#78 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0x6c1510 [GtkBox], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#79 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x7ec6c0 [EvWindow], child=0x6c1510 [GtkBox], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#80 0x00007ffff5dee762 in gtk_container_draw (widget=0x7ec6c0 [EvWindow], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#81 0x00007ffff5fe11dd in gtk_window_draw (widget=0x7ec6c0 [EvWindow], cr=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwindow.c:9761
#82 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffdee0, instance=instance@entry=0x7ec6c0, args=args@entry=0x7fffffffdfd8, marshal_data=marshal_data@entry=0x7ffff5fe1180 <gtk_window_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#83 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffdee0, instance=0x7ec6c0, args=0x7fffffffdfd8, marshal_data=0x7ffff5fe1180 <gtk_window_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#84 0x00007ffff4687234 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffdee0, instance=0x7ec6c0, args=0x7fffffffdfd8, n_params=<optimized out>, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#85 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x7ec6c0, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffdfd8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#86 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x7ec6c0, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#87 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x7ec6c0 [EvWindow], cr=cr@entry=0xb30df0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xa72930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#88 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xa72930 [GdkX11Window], clip_to_size=1, cr=0xb30df0, widget=0x7ec6c0 [EvWindow]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#89 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xa72930 [GdkX11Window], cr=cr@entry=0xb30df0, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#90 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0x7ec6c0 [EvWindow], cr=cr@entry=0xb30df0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#91 0x00007ffff5fd6e3b in gtk_widget_send_expose (widget=widget@entry=0x7ec6c0 [EvWindow], event=event@entry=0x7fffffffe290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7613
#92 0x00007ffff5e9a53c in gtk_main_do_event (event=0x7fffffffe290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmain.c:1673
#93 0x00007ffff5a3038a in _gdk_window_process_updates_recurse_helper (window=0xa72930 [GdkX11Window], expose_region=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3556
#94 0x00007ffff5a312ff in gdk_window_process_updates_internal (window=0xa72930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3681
#95 0x00007ffff5a314b3 in gdk_window_process_updates_with_mode (window=<optimized out>, recurse_mode=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3882
#96 0x00007ffff4687234 in _g_closure_invoke_va (closure=0xb25d20, return_value=0x0, instance=0x6d9290, args=0x7fffffffe5b0, n_params=<optimized out>, param_types=0x0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#97 0x00007ffff46a03a8 in g_signal_emit_valist (instance=instance@entry=0x6d9290, signal_id=signal_id@entry=141, detail=detail@entry=0, var_args=var_args@entry=0x7fffffffe5b0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#98 0x00007ffff46a118a in g_signal_emit_by_name (instance=instance@entry=0x6d9290, detailed_signal=detailed_signal@entry=0x7ffff5a75a67 "paint") at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3401
#99 0x00007ffff5a2aa1a in gdk_frame_clock_paint_idle (data=0x6d9290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkframeclockidle.c:430
#100 0x00007ffff5a1a5f8 in gdk_threads_dispatch (data=0x830e80, data@entry=<error reading variable: value has been optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdk.c:719
#101 0x00007ffff4387c83 in g_timeout_dispatch (source=0xc4e330, callback=<optimized out>, user_data=<optimized out>) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:4545
#102 0x00007ffff438722d in g_main_context_dispatch (context=0x69bca0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3122
#103 0x00007ffff438722d in g_main_context_dispatch (context=context@entry=0x69bca0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3737
#104 0x00007ffff43875c8 in g_main_context_iterate (context=context@entry=0x69bca0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3808
#105 0x00007ffff438766c in g_main_context_iteration (context=0x69bca0, context@entry=0x0, may_block=may_block@entry=1) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3869
#106 0x00007ffff550158c in g_application_run (application=0x84c0f0 [EvApplication], argc=argc@entry=0, argv=argv@entry=0x0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gio/gapplication.c:2308
#107 0x000000000041f00e in main (argc=1, argv=0x7fffffffe9f8) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/shell/main.c:316
Comment 1 Paul Menzel 2016-06-21 14:22:57 UTC
Created attachment 124640 [details]
R script to generate EPS files crashing Evince

From the user reporting the crash.

> It seems to have something to do with the dimensions of the plot. If I leave
> it as the R defaults, everything is fine, but when I set the width and height
> the crash happens. I also attached the R script I used to generate the plot.
Comment 2 Siarhei Siamashka 2016-06-21 22:53:59 UTC
Could you please try to do a test similar to https://bugzilla.gnome.org/show_bug.cgi?id=755810#c11 ? Thanks.

This might be related to https://bugs.freedesktop.org/show_bug.cgi?id=76450
Comment 3 Paul Menzel 2016-06-22 08:02:04 UTC
Here is the Valgrind log.

```
> valgrind evince /dev/shm/crash-evince.eps
==22683== Memcheck, a memory error detector
==22683== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==22683== Using Valgrind-3.10.0 and LibVEX; rerun with -h for copyright info
==22683== Command: evince /dev/shm/crash-evince.eps
==22683== 
==22683== Invalid write of size 4
==22683==    at 0x80B7F4D: clip_and_composite_polygon (cairo-traps-compositor.c:1601)
==22683==    by 0x80B85B1: _cairo_traps_compositor_fill (cairo-traps-compositor.c:2268)
==22683==    by 0x805D206: _cairo_compositor_fill (cairo-compositor.c:203)
==22683==    by 0x80D20C7: _cairo_xlib_surface_fill (cairo-xlib-surface.c:1646)
==22683==    by 0x80A56A3: _cairo_surface_fill (cairo-surface.c:2341)
==22683==    by 0x806538B: _cairo_gstate_fill (cairo-gstate.c:1317)
==22683==    by 0x805E998: _cairo_default_context_fill (cairo-default-context.c:1055)
==22683==    by 0x8058184: cairo_fill (cairo.c:2205)
==22683==    by 0x67FE2E2: draw_shadow (gtkcssshadowvalue.c:641)
==22683==    by 0x67FF33F: _gtk_css_shadow_value_paint_box (gtkcssshadowvalue.c:700)
==22683==    by 0x67FD2C8: _gtk_css_shadows_value_paint_box (gtkcssshadowsvalue.c:296)
==22683==    by 0x68FD3A6: gtk_css_style_render_background (gtkrenderbackground.c:340)
==22683==  Address 0xffeffe838 is on thread 1's stack
==22683==  in frame #0, created by clip_and_composite_polygon (cairo-traps-compositor.c:1483)
==22683== 
==22683== Invalid read of size 4
==22683==    at 0x80B549E: composite_traps (cairo-traps-compositor.c:1098)
==22683==    by 0x80B7223: clip_and_composite (cairo-traps-compositor.c:1049)
==22683==    by 0x80B7F7E: clip_and_composite_polygon (cairo-traps-compositor.c:1602)
==22683==    by 0x80B85B1: _cairo_traps_compositor_fill (cairo-traps-compositor.c:2268)
==22683==    by 0x805D206: _cairo_compositor_fill (cairo-compositor.c:203)
==22683==    by 0x80D20C7: _cairo_xlib_surface_fill (cairo-xlib-surface.c:1646)
==22683==    by 0x80A56A3: _cairo_surface_fill (cairo-surface.c:2341)
==22683==    by 0x806538B: _cairo_gstate_fill (cairo-gstate.c:1317)
==22683==    by 0x805E998: _cairo_default_context_fill (cairo-default-context.c:1055)
==22683==    by 0x8058184: cairo_fill (cairo.c:2205)
==22683==    by 0x67FE2E2: draw_shadow (gtkcssshadowvalue.c:641)
==22683==    by 0x67FF33F: _gtk_css_shadow_value_paint_box (gtkcssshadowvalue.c:700)
==22683==  Address 0xffeffe838 is on thread 1's stack
==22683==  in frame #2, created by clip_and_composite_polygon (cairo-traps-compositor.c:1483)
==22683== 

(evince:22683): GLib-GObject-WARNING **: The property GtkSettings:gtk-menu-images is deprecated and shouldn't be used anymore. It will be removed in a future version.

(evince:22683): Gdk-CRITICAL **: gdk_pixbuf_get_from_surface: assertion 'width > 0 && height > 0' failed
==22683== Invalid read of size 16
==22683==    at 0xC785C30: _mm_loadu_si128 (emmintrin.h:684)
==22683==    by 0xC785C30: load_128_unaligned (pixman-sse2.c:373)
==22683==    by 0xC785C30: sse2_blt.part.10 (pixman-sse2.c:4765)
==22683==    by 0xC74C38A: _pixman_implementation_blt (pixman-implementation.c:250)
==22683==    by 0xC6FF6A1: pixman_blt (pixman.c:748)
==22683==    by 0x80CCD7F: draw_image_boxes (cairo-xlib-render-compositor.c:329)
==22683==    by 0x80B773A: upload_boxes (cairo-traps-compositor.c:1351)
==22683==    by 0x80B773A: clip_and_composite_boxes (cairo-traps-compositor.c:1751)
==22683==    by 0x80B8271: _cairo_traps_compositor_paint (cairo-traps-compositor.c:2063)
==22683==    by 0x805CF78: _cairo_compositor_paint (cairo-compositor.c:65)
==22683==    by 0x80A51F0: _cairo_surface_paint (cairo-surface.c:2117)
==22683==    by 0x8064B43: _cairo_gstate_paint (cairo-gstate.c:1067)
==22683==    by 0x8058006: cairo_paint (cairo.c:2003)
==22683==    by 0x509FF52: draw_surface (ev-view.c:6626)
==22683==    by 0x50A9853: draw_one_page (ev-view.c:6740)
==22683==    by 0x50A9853: ev_view_draw (ev-view.c:4566)
==22683==  Address 0x1f323a80 is 0 bytes after a block of size 52,476,480 alloc'd
==22683==    at 0x4C27ACD: malloc (vg_replace_malloc.c:296)
==22683==    by 0x157F6CF6: spectre_presize (spectre-device.c:75)
==22683==    by 0x15BF69C5: display_open (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15D62FD9: gs_opendevice (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0DE4A: display_set_callback (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0A01B: gs_main_init2aux (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0A430: gs_main_init2 (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0D057: gs_main_init_with_args (in /usr/lib/libgs.so.9.18)
==22683==    by 0x157F640B: spectre_gs_run (spectre-gs.c:190)
==22683==    by 0x157F7049: spectre_device_render (spectre-device.c:264)
==22683==    by 0x157F7539: spectre_page_render (spectre-page.c:164)
==22683==    by 0x155C2BA3: ps_document_render (ev-spectre.c:312)
==22683== 
==22683== Invalid read of size 16
==22683==    at 0xC785C40: _mm_loadu_si128 (emmintrin.h:684)
==22683==    by 0xC785C40: load_128_unaligned (pixman-sse2.c:373)
==22683==    by 0xC785C40: sse2_blt.part.10 (pixman-sse2.c:4766)
==22683==    by 0xC74C38A: _pixman_implementation_blt (pixman-implementation.c:250)
==22683==    by 0xC6FF6A1: pixman_blt (pixman.c:748)
==22683==    by 0x80CCD7F: draw_image_boxes (cairo-xlib-render-compositor.c:329)
==22683==    by 0x80B773A: upload_boxes (cairo-traps-compositor.c:1351)
==22683==    by 0x80B773A: clip_and_composite_boxes (cairo-traps-compositor.c:1751)
==22683==    by 0x80B8271: _cairo_traps_compositor_paint (cairo-traps-compositor.c:2063)
==22683==    by 0x805CF78: _cairo_compositor_paint (cairo-compositor.c:65)
==22683==    by 0x80A51F0: _cairo_surface_paint (cairo-surface.c:2117)
==22683==    by 0x8064B43: _cairo_gstate_paint (cairo-gstate.c:1067)
==22683==    by 0x8058006: cairo_paint (cairo.c:2003)
==22683==    by 0x509FF52: draw_surface (ev-view.c:6626)
==22683==    by 0x50A9853: draw_one_page (ev-view.c:6740)
==22683==    by 0x50A9853: ev_view_draw (ev-view.c:4566)
==22683==  Address 0x1f323a90 is 16 bytes after a block of size 52,476,480 alloc'd
==22683==    at 0x4C27ACD: malloc (vg_replace_malloc.c:296)
==22683==    by 0x157F6CF6: spectre_presize (spectre-device.c:75)
==22683==    by 0x15BF69C5: display_open (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15D62FD9: gs_opendevice (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0DE4A: display_set_callback (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0A01B: gs_main_init2aux (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0A430: gs_main_init2 (in /usr/lib/libgs.so.9.18)
==22683==    by 0x15E0D057: gs_main_init_with_args (in /usr/lib/libgs.so.9.18)
==22683==    by 0x157F640B: spectre_gs_run (spectre-gs.c:190)
==22683==    by 0x157F7049: spectre_device_render (spectre-device.c:264)
==22683==    by 0x157F7539: spectre_page_render (spectre-page.c:164)
==22683==    by 0x155C2BA3: ps_document_render (ev-spectre.c:312)
==22683== 
==22683== Invalid read of size 16
==22683==    at 0xC785C45: _mm_loadu_si128 (emmintrin.h:684)
==22683==    by 0xC785C45: load_128_unaligned (pixman-sse2.c:373)
==22683==    by 0xC785C45: sse2_blt.part.10 (pixman-sse2.c:4767)
==22683==    by 0xC74C38A: _pixman_implementation_blt (pixman-implementation.c:250)
==22683==    by 0xC6FF6A1: pixman_blt (pixman.c:748)
==22683==    by 0x80CCD7F: draw_image_boxes (cairo-xlib-render-compositor.c:329)
==22683==    by 0x80B773A: upload_boxes (cairo-traps-compositor.c:1351)
==22683==    by 0x80B773A: clip_and_composite_boxes (cairo-traps-compositor.c:1751)
==22683==    by 0x80B8271: _cairo_traps_compositor_paint (cairo-traps-compositor.c:2063)
==22683==    by 0x805CF78: _cairo_compositor_paint (cairo-compositor.c:65)
==22683==    by 0x80A51F0: _cairo_surface_paint (cairo-surface.c:2117)
==22683==    by 0x8064B43: _cairo_gstate_paint (cairo-gstate.c:1067)
==22683==    by 0x8058006: cairo_paint (cairo.c:2003)
==22683==    by 0x509FF52: draw_surface (ev-view.c:6626)
==22683==    by 0x50A9853: draw_one_page (ev-view.c:6740)
==22683==    by 0x50A9853: ev_view_draw (ev-view.c:4566)
==22683==  Address 0x1f323aa0 is 52,476,512 bytes inside a block of size 52,477,856 in arena "client"
==22683== 
==22683== Invalid read of size 16
==22683==    at 0xC785C4A: _mm_loadu_si128 (emmintrin.h:684)
==22683==    by 0xC785C4A: load_128_unaligned (pixman-sse2.c:373)
==22683==    by 0xC785C4A: sse2_blt.part.10 (pixman-sse2.c:4768)
==22683==    by 0xC74C38A: _pixman_implementation_blt (pixman-implementation.c:250)
==22683==    by 0xC6FF6A1: pixman_blt (pixman.c:748)
==22683==    by 0x80CCD7F: draw_image_boxes (cairo-xlib-render-compositor.c:329)
==22683==    by 0x80B773A: upload_boxes (cairo-traps-compositor.c:1351)
==22683==    by 0x80B773A: clip_and_composite_boxes (cairo-traps-compositor.c:1751)
==22683==    by 0x80B8271: _cairo_traps_compositor_paint (cairo-traps-compositor.c:2063)
==22683==    by 0x805CF78: _cairo_compositor_paint (cairo-compositor.c:65)
==22683==    by 0x80A51F0: _cairo_surface_paint (cairo-surface.c:2117)
==22683==    by 0x8064B43: _cairo_gstate_paint (cairo-gstate.c:1067)
==22683==    by 0x8058006: cairo_paint (cairo.c:2003)
==22683==    by 0x509FF52: draw_surface (ev-view.c:6626)
==22683==    by 0x50A9853: draw_one_page (ev-view.c:6740)
==22683==    by 0x50A9853: ev_view_draw (ev-view.c:4566)
==22683==  Address 0x1f323ab0 is 52,476,528 bytes inside a block of size 52,477,856 in arena "client"
==22683== 
==22683== 
==22683== Process terminating with default action of signal 11 (SIGSEGV)
==22683==  Access not within mapped region at address 0x1F324000
==22683==    at 0xC785C30: _mm_loadu_si128 (emmintrin.h:684)
==22683==    by 0xC785C30: load_128_unaligned (pixman-sse2.c:373)
==22683==    by 0xC785C30: sse2_blt.part.10 (pixman-sse2.c:4765)
==22683==    by 0xC74C38A: _pixman_implementation_blt (pixman-implementation.c:250)
==22683==    by 0xC6FF6A1: pixman_blt (pixman.c:748)
==22683==    by 0x80CCD7F: draw_image_boxes (cairo-xlib-render-compositor.c:329)
==22683==    by 0x80B773A: upload_boxes (cairo-traps-compositor.c:1351)
==22683==    by 0x80B773A: clip_and_composite_boxes (cairo-traps-compositor.c:1751)
==22683==    by 0x80B8271: _cairo_traps_compositor_paint (cairo-traps-compositor.c:2063)
==22683==    by 0x805CF78: _cairo_compositor_paint (cairo-compositor.c:65)
==22683==    by 0x80A51F0: _cairo_surface_paint (cairo-surface.c:2117)
==22683==    by 0x8064B43: _cairo_gstate_paint (cairo-gstate.c:1067)
==22683==    by 0x8058006: cairo_paint (cairo.c:2003)
==22683==    by 0x509FF52: draw_surface (ev-view.c:6626)
==22683==    by 0x50A9853: draw_one_page (ev-view.c:6740)
==22683==    by 0x50A9853: ev_view_draw (ev-view.c:4566)
==22683==  If you believe this happened as a result of a stack
==22683==  overflow in your program's main thread (unlikely but
==22683==  possible), you can try to increase the size of the
==22683==  main thread stack using the --main-stacksize= flag.
==22683==  The main thread stack size used in this run was 8388608.
==22683== 
==22683== HEAP SUMMARY:
==22683==     in use at exit: 60,031,538 bytes in 69,934 blocks
==22683==   total heap usage: 966,584 allocs, 896,650 frees, 2,541,213,347 bytes allocated
==22683== 
==22683== LEAK SUMMARY:
==22683==    definitely lost: 69,328 bytes in 17 blocks
==22683==    indirectly lost: 47,534 bytes in 2,112 blocks
==22683==      possibly lost: 339,104 bytes in 4,785 blocks
==22683==    still reachable: 59,049,172 bytes in 60,565 blocks
==22683==         suppressed: 0 bytes in 0 blocks
==22683== Rerun with --leak-check=full to see details of leaked memory
==22683== 
==22683== For counts of detected and suppressed errors, rerun with: -v
==22683== ERROR SUMMARY: 355 errors from 6 contexts (suppressed: 0 from 0)
Killed
```
Comment 4 Paul Menzel 2016-06-22 08:15:53 UTC
Here is the output with the breakpoints from https://bugzilla.gnome.org/show_bug.cgi?id=755810#c11.

Please note that this time, it did not crash right away after rotating, and I had to scroll and move around to make it crash.

(gdb) b spectre_presize
Function "spectre_presize" not defined.
Make breakpoint pending on future shared library load? (y or [n]) y
Breakpoint 1 (spectre_presize) pending.
(gdb) b cairo_image_surface_create_for_data
Function "cairo_image_surface_create_for_data" not defined.
Make breakpoint pending on future shared library load? (y or [n]) y
Breakpoint 2 (cairo_image_surface_create_for_data) pending.
(gdb) run /dev/shm/crash-evince.eps
Starting program: /usr/bin/evince /dev/shm/crash-evince.eps
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/libthread_db.so.1".
[New Thread 0x7fffed513700 (LWP 23005)]
[New Thread 0x7fffecd12700 (LWP 23006)]
[New Thread 0x7fffe7fff700 (LWP 23010)]
[New Thread 0x7fffe6fcc700 (LWP 23011)]
[New Thread 0x7fffe65c6700 (LWP 23012)]

(evince:23000): GLib-GObject-WARNING **: The property GtkSettings:gtk-menu-images is deprecated and shouldn't be used anymore. It will be removed in a future version.

(evince:23000): Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate widget with width -40 and height 16

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf3c60 "\a", <incomplete sequence \364>, format=CAIRO_FORMAT_A8, width=5, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) c
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbd3a00 "\006\215\347\347\215\006", format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) c
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf6a10 "", format=CAIRO_FORMAT_A8, width=5, height=10, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) c
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x0, format=CAIRO_FORMAT_A8, width=0, height=0, stride=0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf7aa0 "\377\377\377\372ߍ\027", format=CAIRO_FORMAT_A8, width=8, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf4e60 "\002m\326\365\327n\002", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbee7b0 "\030\270\304\344\367\276{", format=CAIRO_FORMAT_A8, width=7, height=8, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf4e60 "\377\377", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf7fb0 "\377\377X\323\371\316\064C\310\366\315\060\377\377B\vV\377\365A\nU\377\312\377\377", format=CAIRO_FORMAT_A8, width=12, height=7, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf4e60 "\017\214\334\366\343\224\f", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf4e60 "\377\377Y\324\367\313\060", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbee7b0 "", format=CAIRO_FORMAT_A8, width=5, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x0, format=CAIRO_FORMAT_A8, width=0, height=0, stride=0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf8130 "'\245\221", format=CAIRO_FORMAT_A8, width=10, height=9, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbd3310 "\377\377", format=CAIRO_FORMAT_A8, width=2, height=10, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf7fb0 "X\377\264", format=CAIRO_FORMAT_A8, width=12, height=7, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbee7b0 "\377\377P\315", <incomplete sequence \371>, format=CAIRO_FORMAT_A8, width=5, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbcc100 "", format=CAIRO_FORMAT_A8, width=7, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbee7b0 "\377\377\377\377\377\377", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf7ad0 "\377", format=CAIRO_FORMAT_A8, width=1, height=2, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbee7b0 "\b\220\351\345\206\004", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbf7e80 "7\317\366\320\067", format=CAIRO_FORMAT_A8, width=11, height=9, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.
[Switching to Thread 0x7fffe65c6700 (LWP 23012)]

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80cfdf8, width=566, height=357, raster=2272, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.
[Switching to Thread 0x7ffff7fae900 (LWP 23000)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc239a0 "\377\377\377\376\357\260\033", format=CAIRO_FORMAT_A8, width=8, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc239f0 "", format=CAIRO_FORMAT_A8, width=8, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23bc0 "", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbb4be0 "\377\377[\316\360\246\r", format=CAIRO_FORMAT_A8, width=7, height=10, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbb4be0 "\377\377", format=CAIRO_FORMAT_A8, width=7, height=10, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23bc0 "\027\234\344\372\361", <incomplete sequence \332>, format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23a40 "", format=CAIRO_FORMAT_A8, width=9, height=9, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23e00 "\r\231\351\320C", format=CAIRO_FORMAT_A8, width=5, height=6, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc1cfd0 "\377\004\234\371\377f\025", format=CAIRO_FORMAT_A8, width=4, height=6, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbfacd0 "", format=CAIRO_FORMAT_A8, width=5, height=6, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc1cfd0 "X\341\360\247\357\060\020wɶ_\016\n[\253̀\017)\356\245\357\345Z1", format=CAIRO_FORMAT_A8, width=4, height=6, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23e00 "\377", format=CAIRO_FORMAT_A8, width=5, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc1cfd0 "\377\377\377", format=CAIRO_FORMAT_A8, width=3, height=1, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xbfacd0 "\024\256\362\325\070", format=CAIRO_FORMAT_A8, width=5, height=6, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23d50 "\005\315\002", format=CAIRO_FORMAT_A8, width=7, height=6, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23d90 "\377", format=CAIRO_FORMAT_A8, width=1, height=9, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23d90 "\377~\344\351V", format=CAIRO_FORMAT_A8, width=5, height=6, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc1cfd0 "\377", format=CAIRO_FORMAT_A8, width=1, height=2, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc23e00 "\377\215\353\326\060", format=CAIRO_FORMAT_A8, width=5, height=8, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc1ddb0 "\377", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc2d290 "", format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc2afc0 "", format=CAIRO_FORMAT_A8, width=6, height=10, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc2d890 "\377", format=CAIRO_FORMAT_A8, width=1, height=10, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc2d290 "\377X\322\367\314\060", format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.
[Thread 0x7fffecd12700 (LWP 23006) exited]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc2afc0 "\001s\347\362\267", <incomplete sequence \374>, format=CAIRO_FORMAT_A8, width=6, height=10, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xc2d560 "\377", format=CAIRO_FORMAT_A8, width=9, height=2, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.
[Switching to Thread 0x7fffe65c6700 (LWP 23012)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffd832e400 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=566, height=357, stride=2272) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 1, spectre_presize (handle=0x7fffd802ce10, device=0x7fffd80cfd98, width=3804, height=2403, raster=15232, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.


Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffce160010 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=3804, height=2403, stride=15232) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 1, spectre_presize (handle=0x7fffd802ce10, device=0x7fffd80d0078, width=128, height=81, raster=512, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffd8330e30 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=128, height=81, stride=512) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.
[Switching to Thread 0x7ffff7fae900 (LWP 23000)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d2c90 "", format=CAIRO_FORMAT_A8, width=7, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xb2e440 "", format=CAIRO_FORMAT_A8, width=4, height=9, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xb2e440 "\377", format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xb2e440 "", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x83d580 "\377\377\372\344\227\034", format=CAIRO_FORMAT_A8, width=7, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8e93f0 "\377", format=CAIRO_FORMAT_A8, width=1, height=10, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0xb2ec50 "\f\203\333\367\345\237f", format=CAIRO_FORMAT_A8, width=7, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x83cf40 "\002w\335\357\250\020", format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8dbd10 "\377\377\376\350\223\t", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d9e80 "\377\377\377\377\377\377", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8cf1a0 "-\264\351\371\300`", format=CAIRO_FORMAT_A8, width=6, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8cf260 "\377X\326\372\377\211\022", format=CAIRO_FORMAT_A8, width=4, height=7, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8dbb60 "\377\377\376\357\244\022", format=CAIRO_FORMAT_A8, width=8, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d9e80 "\377", format=CAIRO_FORMAT_A8, width=6, height=10, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8cf1a0 <incomplete sequence \310>, format=CAIRO_FORMAT_A8, width=8, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8dbda0 "\377\231", format=CAIRO_FORMAT_A8, width=7, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d9a20 "-\330\006", format=CAIRO_FORMAT_A8, width=7, height=7, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x83bba0 "\377\377\377\377\377\377\377", format=CAIRO_FORMAT_A8, width=7, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x83bba0 "\377Q\327\354YN\333\346J", format=CAIRO_FORMAT_A8, width=9, height=7, stride=12) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8dbc90 "\377\377\377", format=CAIRO_FORMAT_A8, width=3, height=9, stride=4) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8dbbe0 "", format=CAIRO_FORMAT_A8, width=8, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.




[Switching to Thread 0x7fffe65c6700 (LWP 23012)]

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80dacf8, width=81, height=128, raster=352, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.
[Switching to Thread 0x7ffff7fae900 (LWP 23000)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d8880 "", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d8880 "[\305\367\350\246\032", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.
[Switching to Thread 0x7fffe65c6700 (LWP 23012)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffd834f430 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=128, height=81, stride=352) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

(evince:23000): Gdk-CRITICAL **: gdk_pixbuf_get_from_surface: assertion 'width > 0 && height > 0' failed

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80dadf8, width=4556, height=2877, raster=18240, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffc2f54010 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=2877, height=4556, stride=18240) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.
[Switching to Thread 0x7ffff7fae900 (LWP 23000)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d5180 "J\234\362\353\246\032", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x8d5180 "", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.
[Switching to Thread 0x7fffe65c6700 (LWP 23012)]

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80daff8, width=3796, height=2398, raster=15200, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.
[Switching to Thread 0x7ffff7fae900 (LWP 23000)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x83cc60 "\005\227\361\350\227\b", format=CAIRO_FORMAT_A8, width=6, height=9, stride=8) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.
[Switching to Thread 0x7fffe65c6700 (LWP 23012)]

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffce186010 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=2398, height=3796, stride=15200) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	in /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c
(gdb) 
Continuing.

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80daff8, width=2197, height=1388, raster=8800, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffcf8a2010 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=1388, height=2197, stride=8800) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80dafb8, width=1831, height=1156, raster=7328, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7ffff7fae900 (LWP 23000)]
bits_image_fetch_separable_convolution_affine (repeat_mode=PIXMAN_REPEAT_NONE, format=PIXMAN_x8r8g8b8, convert_pixel=<optimized out>, mask=0x0, buffer=<optimized out>, width=<optimized out>, line=<optimized out>, offset=<optimized out>, image=0xbba9b0) at /scratch/local/bee-root/pixman/pixman-0.32.4-1/source/pixman/pixman-fast-path.c:2813
2813	/scratch/local/bee-root/pixman/pixman-0.32.4-1/source/pixman/pixman-fast-path.c: No such file or directory.
(gdb) bt
#0  0x00007ffff02c02e0 in bits_image_fetch_separable_convolution_affine_none_x8r8g8b8 (repeat_mode=PIXMAN_REPEAT_NONE, format=PIXMAN_x8r8g8b8, convert_pixel=<optimized out>, mask=0x0, buffer=<optimized out>, width=<optimized out>, line=<optimized out>, offset=<optimized out>, image=0xbba9b0) at /scratch/local/bee-root/pixman/pixman-0.32.4-1/source/pixman/pixman-fast-path.c:2813
#1  0x00007ffff02c02e0 in bits_image_fetch_separable_convolution_affine_none_x8r8g8b8 (iter=0x7fffffff3e00, mask=0x0) at /scratch/local/bee-root/pixman/pixman-0.32.4-1/source/pixman/pixman-fast-path.c:3153
#2  0x00007ffff02c68d3 in general_composite_rect (imp=0x671d50, info=<optimized out>) at /scratch/local/bee-root/pixman/pixman-0.32.4-1/source/pixman/pixman-general.c:211
#3  0x00007ffff027b5a1 in pixman_image_composite32 (op=op@entry=PIXMAN_OP_SRC, src=src@entry=0xbba9b0, mask=mask@entry=0x0, dest=dest@entry=0xb47b20, src_x=0, src_y=0, mask_x=0, mask_y=0, dest_x=0, dest_y=0, width=804, height=1003) at /scratch/local/bee-root/pixman/pixman-0.32.4-1/source/pixman/pixman.c:707
#4  0x00007ffff48fac1e in composite_boxes (_dst=<optimized out>, op=CAIRO_OPERATOR_SOURCE, abstract_src=<optimized out>, abstract_mask=<optimized out>, src_x=0, src_y=0, mask_x=0, mask_y=0, dst_x=0, dst_y=0, boxes=0x7fffffffa630, extents=0x7fffffffa8ec) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-compositor.c:538
#5  0x00007ffff4934d0e in clip_and_composite_boxes (boxes=0x7fffffffa630, extents=0x7fffffffa8b0, compositor=0x7ffff4bd6800 <spans>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-spans-compositor.c:683
#6  0x00007ffff4934d0e in clip_and_composite_boxes (compositor=compositor@entry=0x7ffff4bd6800 <spans>, extents=extents@entry=0x7fffffffa8b0, boxes=boxes@entry=0x7fffffffa630) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-spans-compositor.c:882
#7  0x00007ffff493510e in clip_and_composite_boxes (compositor=0x7ffff4bd6800 <spans>, extents=0x7fffffffa8b0, boxes=0x7fffffffa630) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-spans-compositor.c:901
#8  0x00007ffff49351f6 in _cairo_spans_compositor_paint (_compositor=0x7ffff4bd6800 <spans>, extents=0x7fffffffa8b0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-spans-compositor.c:983
#9  0x00007ffff48eff79 in _cairo_compositor_paint (compositor=0x7ffff4bd6800 <spans>, surface=0xba7040, op=<optimized out>, source=<optimized out>, clip=<optimized out>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-compositor.c:65
#10 0x00007ffff49381f1 in _cairo_surface_paint (surface=0xba7040, op=CAIRO_OPERATOR_SOURCE, source=0x7fffffffac20, clip=0x0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-surface.c:2117
#11 0x00007ffff493cb8f in _cairo_surface_offset_paint (target=target@entry=0xba7040, x=<optimized out>, y=<optimized out>, op=op@entry=CAIRO_OPERATOR_SOURCE, source=0x7fffffffac20, source@entry=0x7fffffffb680, clip=clip@entry=0x0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-surface-offset.c:85
#12 0x00007ffff496293a in render_pattern (dst=dst@entry=0x8ee200, pattern=pattern@entry=0x7fffffffb680, is_mask=is_mask@entry=0, extents=0x7fffffffb63c, src_x=0x7fffffffaf6c, src_y=0x7fffffffaf70) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-xlib-source.c:305
#13 0x00007ffff49636d8 in _cairo_xlib_source_create_for_pattern (_dst=0x8ee200, pattern=0x7fffffffb680, is_mask=0, extents=<optimized out>, sample=<optimized out>, src_x=0x7fffffffaf6c, src_y=0x7fffffffaf70) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-xlib-source.c:1165
#14 0x00007ffff494a84b in clip_and_composite_boxes (boxes=0x7fffffffb380, extents=0x7fffffffb600, compositor=0x7ffff4bd7b00 <compositor>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:1292
#15 0x00007ffff494a84b in clip_and_composite_boxes (compositor=compositor@entry=0x7ffff4bd7b00 <compositor>, extents=extents@entry=0x7fffffffb600, boxes=boxes@entry=0x7fffffffb380) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:1792
#16 0x00007ffff494b272 in _cairo_traps_compositor_paint (_compositor=0x7ffff4bd7b00 <compositor>, extents=0x7fffffffb600) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:2063
#17 0x00007ffff48eff79 in _cairo_compositor_paint (compositor=0x7ffff4bd7b00 <compositor>, surface=0x8ee200, op=<optimized out>, source=<optimized out>, clip=<optimized out>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-compositor.c:65
#18 0x00007ffff49381f1 in _cairo_surface_paint (surface=0x8ee200, op=CAIRO_OPERATOR_OVER, source=0x7fffffffb940, clip=0x8e9230) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-surface.c:2117
#19 0x00007ffff48f7b44 in _cairo_gstate_paint (gstate=0xb34b60) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-gstate.c:1067
#20 0x00007ffff48eb007 in INT_cairo_paint (cr=0xb31510) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo.c:2003
#21 0x00007ffff797af53 in draw_surface (cr=cr@entry=0xb31510, surface=surface@entry=0x7fffd802e590, x=1513, y=8, offset_x=offset_x@entry=0, offset_y=offset_y@entry=0, target_width=803, target_height=1271) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:6626
#22 0x00007ffff7984854 in ev_view_draw (page_ready=<synthetic pointer>, expose_area=0x7fffffffbb90, border=0x7fffffffbb70, page_area=0x7fffffffbba0, cr=0xb31510, page=0, view=0xaac120 [EvView]) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:6740
#23 0x00007ffff7984854 in ev_view_draw (widget=0xaac120 [EvView], cr=<optimized out>) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:4566
#24 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffbde0, instance=instance@entry=0xaac120, args=args@entry=0x7fffffffbed8, marshal_data=marshal_data@entry=0x7ffff7984380 <ev_view_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#25 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffbde0, instance=0xaac120, args=0x7fffffffbed8, marshal_data=0x7ffff7984380 <ev_view_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#26 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffbde0, instance=0xaac120, args=0x7fffffffbed8, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#27 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xaac120, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffbed8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#28 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xaac120, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#29 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xaac120 [EvView], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb7f3f0 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#30 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb7f3f0 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0xaac120 [EvView]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#31 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb7f3f0 [GdkX11Window], cr=cr@entry=0xb31510, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#32 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0xaac120 [EvView], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#33 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x8914a0 [GtkScrolledWindow], child=0xaac120 [EvView], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#34 0x00007ffff5dee762 in gtk_container_draw (widget=0x8914a0 [GtkScrolledWindow], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#35 0x00007ffff5f16c46 in gtk_scrolled_window_draw (widget=0x8914a0 [GtkScrolledWindow], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkscrolledwindow.c:2232
#36 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffc420, instance=instance@entry=0x8914a0, args=args@entry=0x7fffffffc518, marshal_data=marshal_data@entry=0x7ffff5f16c00 <gtk_scrolled_window_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#37 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffc420, instance=0x8914a0, args=0x7fffffffc518, marshal_data=0x7ffff5f16c00 <gtk_scrolled_window_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#38 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffc420, instance=0x8914a0, args=0x7fffffffc518, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#39 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x8914a0, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffc518) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#40 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x8914a0, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#41 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x8914a0 [GtkScrolledWindow], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2cd20 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#42 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb2cd20 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0x8914a0 [GtkScrolledWindow]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#43 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb2cd20 [GdkX11Window], cr=cr@entry=0xb31510, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#44 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0x8914a0 [GtkScrolledWindow], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#45 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0xaa4190 [GtkOverlay], child=0x8914a0 [GtkScrolledWindow], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#46 0x00007ffff5dee762 in gtk_container_draw (widget=0xaa4190 [GtkOverlay], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#47 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffc9a0, instance=instance@entry=0xaa4190, args=args@entry=0x7fffffffca98, marshal_data=marshal_data@entry=0x7ffff5dee6e0 <gtk_container_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#48 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffc9a0, instance=0xaa4190, args=0x7fffffffca98, marshal_data=0x7ffff5dee6e0 <gtk_container_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#49 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffc9a0, instance=0xaa4190, args=0x7fffffffca98, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#50 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xaa4190, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffca98) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#51 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xaa4190, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#52 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xaa4190 [GtkOverlay], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ca80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#53 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xb2ca80 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0xaa4190 [GtkOverlay]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#54 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0xaa4190 [GtkOverlay], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#55 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0xa73270 [GtkBox], child=0xaa4190 [GtkOverlay], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#56 0x00007ffff5dee762 in gtk_container_draw (widget=0xa73270 [GtkBox], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#57 0x00007ffff5daad92 in gtk_box_draw (widget=0xa73270 [GtkBox], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkbox.c:447
#58 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffcec0, instance=instance@entry=0xa73270, args=args@entry=0x7fffffffcfb8, marshal_data=marshal_data@entry=0x7ffff5daad10 <gtk_box_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#59 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffcec0, instance=0xa73270, args=0x7fffffffcfb8, marshal_data=0x7ffff5daad10 <gtk_box_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#60 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffcec0, instance=0xa73270, args=0x7fffffffcfb8, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#61 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xa73270, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffcfb8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#62 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xa73270, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#63 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xa73270 [GtkBox], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ca80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#64 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xb2ca80 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0xa73270 [GtkBox]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#65 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0xa73270 [GtkBox], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#66 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x8f8f90 [GtkPaned], child=0xa73270 [GtkBox], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#67 0x00007ffff5dee762 in gtk_container_draw (widget=0x8f8f90 [GtkPaned], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#68 0x00007ffff5ed45f3 in gtk_paned_draw (widget=0x8f8f90 [GtkPaned], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkpaned.c:1756
#69 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffd3f0, instance=instance@entry=0x8f8f90, args=args@entry=0x7fffffffd4e8, marshal_data=marshal_data@entry=0x7ffff5ed4560 <gtk_paned_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#70 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffd3f0, instance=0x8f8f90, args=0x7fffffffd4e8, marshal_data=0x7ffff5ed4560 <gtk_paned_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#71 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffd3f0, instance=0x8f8f90, args=0x7fffffffd4e8, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#72 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x8f8f90, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffd4e8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#73 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x8f8f90, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#74 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x8f8f90 [GtkPaned], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ca80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#75 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb2ca80 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0x8f8f90 [GtkPaned]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#76 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb2ca80 [GdkX11Window], cr=cr@entry=0xb31510, window_x=<optimized out>, window_y=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#77 0x00007ffff5fd6c22 in _gtk_widget_draw (widget=widget@entry=0x8f8f90 [GtkPaned], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7161
#78 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x6c1510 [GtkBox], child=0x8f8f90 [GtkPaned], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#79 0x00007ffff5dee762 in gtk_container_draw (widget=0x6c1510 [GtkBox], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#80 0x00007ffff5daad92 in gtk_box_draw (widget=0x6c1510 [GtkBox], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkbox.c:447
#81 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffd9a0, instance=instance@entry=0x6c1510, args=args@entry=0x7fffffffda98, marshal_data=marshal_data@entry=0x7ffff5daad10 <gtk_box_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#82 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffd9a0, instance=0x6c1510, args=0x7fffffffda98, marshal_data=0x7ffff5daad10 <gtk_box_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#83 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffd9a0, instance=0x6c1510, args=0x7fffffffda98, n_params=1, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#84 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x6c1510, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffda98) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#85 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x6c1510, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#86 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x6c1510 [GtkBox], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xa73930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#87 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xa73930 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0x6c1510 [GtkBox]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#88 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0x6c1510 [GtkBox], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#89 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x7ec6c0 [EvWindow], child=0x6c1510 [GtkBox], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#90 0x00007ffff5dee762 in gtk_container_draw (widget=0x7ec6c0 [EvWindow], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#91 0x00007ffff5fe11dd in gtk_window_draw (widget=0x7ec6c0 [EvWindow], cr=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwindow.c:9761
#92 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x680520, return_value=return_value@entry=0x7fffffffdee0, instance=instance@entry=0x7ec6c0, args=args@entry=0x7fffffffdfd8, marshal_data=marshal_data@entry=0x7ffff5fe1180 <gtk_window_draw>, n_params=n_params@entry=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#93 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x680520, return_value=0x7fffffffdee0, instance=0x7ec6c0, args=0x7fffffffdfd8, marshal_data=0x7ffff5fe1180 <gtk_window_draw>, n_params=1, param_types=0x680590) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#94 0x00007ffff4687234 in _g_closure_invoke_va (closure=0x680520, return_value=0x7fffffffdee0, instance=0x7ec6c0, args=0x7fffffffdfd8, n_params=<optimized out>, param_types=0x680590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#95 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x7ec6c0, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffdfd8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#96 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x7ec6c0, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#97 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x7ec6c0 [EvWindow], cr=cr@entry=0xb31510, clip_to_size=clip_to_size@entry=1, window=window@entry=0xa73930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#98 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xa73930 [GdkX11Window], clip_to_size=1, cr=0xb31510, widget=0x7ec6c0 [EvWindow]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#99 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xa73930 [GdkX11Window], cr=cr@entry=0xb31510, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#100 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0x7ec6c0 [EvWindow], cr=cr@entry=0xb31510) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#101 0x00007ffff5fd6e3b in gtk_widget_send_expose (widget=widget@entry=0x7ec6c0 [EvWindow], event=event@entry=0x7fffffffe290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7613
#102 0x00007ffff5e9a53c in gtk_main_do_event (event=0x7fffffffe290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmain.c:1673
#103 0x00007ffff5a3038a in _gdk_window_process_updates_recurse_helper (window=0xa73930 [GdkX11Window], expose_region=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3556
#104 0x00007ffff5a312ff in gdk_window_process_updates_internal (window=0xa73930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3681
#105 0x00007ffff5a314b3 in gdk_window_process_updates_with_mode (window=<optimized out>, recurse_mode=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3882
#106 0x00007ffff4687234 in _g_closure_invoke_va (closure=0xb261f0, return_value=0x0, instance=0x6d9290, args=0x7fffffffe5b0, n_params=<optimized out>, param_types=0x0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#107 0x00007ffff46a03a8 in g_signal_emit_valist (instance=instance@entry=0x6d9290, signal_id=signal_id@entry=141, detail=detail@entry=0, var_args=var_args@entry=0x7fffffffe5b0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#108 0x00007ffff46a118a in g_signal_emit_by_name (instance=instance@entry=0x6d9290, detailed_signal=detailed_signal@entry=0x7ffff5a75a67 "paint") at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3401
#109 0x00007ffff5a2aa1a in gdk_frame_clock_paint_idle (data=0x6d9290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkframeclockidle.c:430
#110 0x00007ffff5a1a5f8 in gdk_threads_dispatch (data=0x802000, data@entry=<error reading variable: value has been optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdk.c:719
#111 0x00007ffff4387c83 in g_timeout_dispatch (source=0x83a760, callback=<optimized out>, user_data=<optimized out>) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:4545
#112 0x00007ffff438722d in g_main_context_dispatch (context=0x69bca0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3122
#113 0x00007ffff438722d in g_main_context_dispatch (context=context@entry=0x69bca0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3737
#114 0x00007ffff43875c8 in g_main_context_iterate (context=context@entry=0x69bca0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3808
#115 0x00007ffff438766c in g_main_context_iteration (context=0x69bca0, context@entry=0x0, may_block=may_block@entry=1) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3869
#116 0x00007ffff550158c in g_application_run (application=0x84c0f0 [EvApplication], argc=argc@entry=0, argv=argv@entry=0x0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gio/gapplication.c:2308
#117 0x000000000041f00e in main (argc=1, argv=0x7fffffffe9f8) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/shell/main.c:316
Comment 5 Paul Menzel 2016-06-22 10:04:46 UTC
The crash also happens when the optimizations MMX and SSE2 are disabled during `./configure`.

(gdb) set env LD_LIBRARY_PATH=/dev/shm/pixman/pixman/.libs
(gdb) run /dev/shm/crash-evince.eps
[…]


(evince:1469): GLib-GObject-WARNING **: The property GtkSettings:gtk-menu-images is deprecated and shouldn't be used anymore. It will be removed in a future version.

(evince:1469): Gtk-WARNING **: gtk_widget_size_allocate(): attempt to allocate widget with width -40 and height 16

(evince:1469): Gdk-CRITICAL **: gdk_pixbuf_get_from_surface: assertion 'width > 0 && height > 0' failed

Program received signal SIGSEGV, Segmentation fault.
__memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:36
36	../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S: No such file or directory.
(gdb) bt
#0  0x00007ffff38edcde in __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:36
#1  0x00007ffff02a93e2 in fast_composite_src_memcpy (imp=0x672570, info=0x7fffffffab20) at pixman-fast-path.c:1178
#2  0x00007ffff010362b in pixman_image_composite32 (op=PIXMAN_OP_SRC, src=0x7fffd802de80, mask=0x0, dest=0xc4e3d0, src_x=0, src_y=0, mask_x=mask_x@entry=0, mask_y=mask_y@entry=0, dest_x=dest_x@entry=0, dest_y=dest_y@entry=0, width=width@entry=1156, height=height@entry=1204) at pixman.c:700
#3  0x00007ffff496735e in _cairo_xlib_surface_draw_image (surface=surface@entry=0xc4e090, image=<optimized out>, src_x=0, src_y=0, width=1156, height=1204, dst_x=dst_x@entry=0, dst_y=dst_y@entry=0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-xlib-surface.c:1149
#4  0x00007ffff49639d1 in _cairo_xlib_source_create_for_pattern (src_y=0x7fffffffaf50, src_x=0x7fffffffaf4c, sample=<optimized out>, extents=<optimized out>, is_mask=0, pattern=0x7fffffffb660, dst=0xc4bb80) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-xlib-source.c:1025
#5  0x00007ffff49639d1 in _cairo_xlib_source_create_for_pattern (_dst=0xc4bb80, pattern=0x7fffffffb660, is_mask=0, extents=<optimized out>, sample=<optimized out>, src_x=0x7fffffffaf4c, src_y=0x7fffffffaf50) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-xlib-source.c:1152
#6  0x00007ffff494a84b in clip_and_composite_boxes (boxes=0x7fffffffb360, extents=0x7fffffffb5e0, compositor=0x7ffff4bd7b00 <compositor>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:1292
#7  0x00007ffff494a84b in clip_and_composite_boxes (compositor=compositor@entry=0x7ffff4bd7b00 <compositor>, extents=extents@entry=0x7fffffffb5e0, boxes=boxes@entry=0x7fffffffb360) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:1792
#8  0x00007ffff494b272 in _cairo_traps_compositor_paint (_compositor=0x7ffff4bd7b00 <compositor>, extents=0x7fffffffb5e0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-traps-compositor.c:2063
#9  0x00007ffff48eff79 in _cairo_compositor_paint (compositor=0x7ffff4bd7b00 <compositor>, surface=0xc4bb80, op=<optimized out>, source=<optimized out>, clip=<optimized out>) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-compositor.c:65
#10 0x00007ffff49381f1 in _cairo_surface_paint (surface=0xc4bb80, op=CAIRO_OPERATOR_OVER, source=0x7fffffffb920, clip=0xc4b850) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-surface.c:2117
#11 0x00007ffff48f7b44 in _cairo_gstate_paint (gstate=0xc4dd50) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-gstate.c:1067
#12 0x00007ffff48eb007 in INT_cairo_paint (cr=0xb305e0) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo.c:2003
#13 0x00007ffff797af53 in draw_surface (cr=cr@entry=0xb305e0, surface=surface@entry=0x7fffd802eae0, x=1432, y=8, offset_x=offset_x@entry=0, offset_y=offset_y@entry=0, target_width=964, target_height=1526) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:6626
#14 0x00007ffff7984854 in ev_view_draw (page_ready=<synthetic pointer>, expose_area=0x7fffffffbb70, border=0x7fffffffbb50, page_area=0x7fffffffbb80, cr=0xb305e0, page=0, view=0xaaa120 [EvView]) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:6740
#15 0x00007ffff7984854 in ev_view_draw (widget=0xaaa120 [EvView], cr=<optimized out>) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/libview/ev-view.c:4566
#16 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffbdc0, instance=instance@entry=0xaaa120, args=args@entry=0x7fffffffbeb8, marshal_data=marshal_data@entry=0x7ffff7984380 <ev_view_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#17 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffbdc0, instance=0xaaa120, args=0x7fffffffbeb8, marshal_data=0x7ffff7984380 <ev_view_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#18 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffbdc0, instance=0xaaa120, args=0x7fffffffbeb8, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#19 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xaaa120, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffbeb8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#20 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xaaa120, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#21 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xaaa120 [EvView], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb7e3f0 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#22 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb7e3f0 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0xaaa120 [EvView]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#23 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb7e3f0 [GdkX11Window], cr=cr@entry=0xb305e0, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#24 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0xaaa120 [EvView], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#25 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x6974b0 [GtkScrolledWindow], child=0xaaa120 [EvView], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#26 0x00007ffff5dee762 in gtk_container_draw (widget=0x6974b0 [GtkScrolledWindow], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#27 0x00007ffff5f16c46 in gtk_scrolled_window_draw (widget=0x6974b0 [GtkScrolledWindow], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkscrolledwindow.c:2232
#28 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffc400, instance=instance@entry=0x6974b0, args=args@entry=0x7fffffffc4f8, marshal_data=marshal_data@entry=0x7ffff5f16c00 <gtk_scrolled_window_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#29 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffc400, instance=0x6974b0, args=0x7fffffffc4f8, marshal_data=0x7ffff5f16c00 <gtk_scrolled_window_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#30 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffc400, instance=0x6974b0, args=0x7fffffffc4f8, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#31 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x6974b0, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffc4f8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#32 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x6974b0, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#33 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x6974b0 [GtkScrolledWindow], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2bd20 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#34 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb2bd20 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0x6974b0 [GtkScrolledWindow]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#35 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb2bd20 [GdkX11Window], cr=cr@entry=0xb305e0, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#36 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0x6974b0 [GtkScrolledWindow], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#37 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0xaa3190 [GtkOverlay], child=0x6974b0 [GtkScrolledWindow], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#38 0x00007ffff5dee762 in gtk_container_draw (widget=0xaa3190 [GtkOverlay], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#39 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffc980, instance=instance@entry=0xaa3190, args=args@entry=0x7fffffffca78, marshal_data=marshal_data@entry=0x7ffff5dee6e0 <gtk_container_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#40 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffc980, instance=0xaa3190, args=0x7fffffffca78, marshal_data=0x7ffff5dee6e0 <gtk_container_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#41 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffc980, instance=0xaa3190, args=0x7fffffffca78, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#42 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xaa3190, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffca78) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#43 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xaa3190, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#44 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xaa3190 [GtkOverlay], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ba80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#45 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xb2ba80 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0xaa3190 [GtkOverlay]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#46 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0xaa3190 [GtkOverlay], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#47 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0xa72270 [GtkBox], child=0xaa3190 [GtkOverlay], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#48 0x00007ffff5dee762 in gtk_container_draw (widget=0xa72270 [GtkBox], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#49 0x00007ffff5daad92 in gtk_box_draw (widget=0xa72270 [GtkBox], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkbox.c:447
#50 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffcea0, instance=instance@entry=0xa72270, args=args@entry=0x7fffffffcf98, marshal_data=marshal_data@entry=0x7ffff5daad10 <gtk_box_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#51 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffcea0, instance=0xa72270, args=0x7fffffffcf98, marshal_data=0x7ffff5daad10 <gtk_box_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#52 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffcea0, instance=0xa72270, args=0x7fffffffcf98, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#53 0x00007ffff469fe6b in g_signal_emit_valist (instance=0xa72270, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffcf98) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#54 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0xa72270, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#55 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0xa72270 [GtkBox], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ba80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#56 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xb2ba80 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0xa72270 [GtkBox]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#57 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0xa72270 [GtkBox], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#58 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x8f6f90 [GtkPaned], child=0xa72270 [GtkBox], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#59 0x00007ffff5dee762 in gtk_container_draw (widget=0x8f6f90 [GtkPaned], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#60 0x00007ffff5ed45f3 in gtk_paned_draw (widget=0x8f6f90 [GtkPaned], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkpaned.c:1756
#61 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffd3d0, instance=instance@entry=0x8f6f90, args=args@entry=0x7fffffffd4c8, marshal_data=marshal_data@entry=0x7ffff5ed4560 <gtk_paned_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#62 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffd3d0, instance=0x8f6f90, args=0x7fffffffd4c8, marshal_data=0x7ffff5ed4560 <gtk_paned_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#63 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffd3d0, instance=0x8f6f90, args=0x7fffffffd4c8, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#64 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x8f6f90, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffd4c8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#65 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x8f6f90, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#66 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x8f6f90 [GtkPaned], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xb2ba80 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#67 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xb2ba80 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0x8f6f90 [GtkPaned]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#68 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xb2ba80 [GdkX11Window], cr=cr@entry=0xb305e0, window_x=<optimized out>, window_y=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#69 0x00007ffff5fd6c22 in _gtk_widget_draw (widget=widget@entry=0x8f6f90 [GtkPaned], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7161
#70 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x6c0510 [GtkBox], child=0x8f6f90 [GtkPaned], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#71 0x00007ffff5dee762 in gtk_container_draw (widget=0x6c0510 [GtkBox], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#72 0x00007ffff5daad92 in gtk_box_draw (widget=0x6c0510 [GtkBox], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkbox.c:447
#73 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffd980, instance=instance@entry=0x6c0510, args=args@entry=0x7fffffffda78, marshal_data=marshal_data@entry=0x7ffff5daad10 <gtk_box_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#74 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffd980, instance=0x6c0510, args=0x7fffffffda78, marshal_data=0x7ffff5daad10 <gtk_box_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#75 0x00007ffff4687182 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffd980, instance=0x6c0510, args=0x7fffffffda78, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#76 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x6c0510, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffda78) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#77 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x6c0510, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#78 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x6c0510 [GtkBox], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xa72930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#79 0x00007ffff5fd6c5b in _gtk_widget_draw (window=0xa72930 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0x6c0510 [GtkBox]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7151
#80 0x00007ffff5fd6c5b in _gtk_widget_draw (widget=widget@entry=0x6c0510 [GtkBox], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7142
#81 0x00007ffff5dee69d in gtk_container_propagate_draw (container=container@entry=0x7e7ec0 [EvWindow], child=0x6c0510 [GtkBox], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3704
#82 0x00007ffff5dee762 in gtk_container_draw (widget=0x7e7ec0 [EvWindow], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkcontainer.c:3539
#83 0x00007ffff5fe11dd in gtk_window_draw (widget=0x7e7ec0 [EvWindow], cr=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwindow.c:9761
#84 0x00007ffff5e9b47a in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x67f4e0, return_value=return_value@entry=0x7fffffffdec0, instance=instance@entry=0x7e7ec0, args=args@entry=0x7fffffffdfb8, marshal_data=marshal_data@entry=0x7ffff5fe1180 <gtk_window_draw>, n_params=n_params@entry=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmarshalers.c:130
#85 0x00007ffff5fc7107 in gtk_widget_draw_marshallerv (closure=0x67f4e0, return_value=0x7fffffffdec0, instance=0x7e7ec0, args=0x7fffffffdfb8, marshal_data=0x7ffff5fe1180 <gtk_window_draw>, n_params=1, param_types=0x67f550) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:1097
#86 0x00007ffff4687234 in _g_closure_invoke_va (closure=0x67f4e0, return_value=0x7fffffffdec0, instance=0x7e7ec0, args=0x7fffffffdfb8, n_params=<optimized out>, param_types=0x67f550) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#87 0x00007ffff469fe6b in g_signal_emit_valist (instance=0x7e7ec0, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fffffffdfb8) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#88 0x00007ffff46a0c92 in g_signal_emit (instance=instance@entry=0x7e7ec0, signal_id=<optimized out>, detail=detail@entry=0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3361
#89 0x00007ffff5fd5205 in _gtk_widget_draw_internal (widget=widget@entry=0x7e7ec0 [EvWindow], cr=cr@entry=0xb305e0, clip_to_size=clip_to_size@entry=1, window=window@entry=0xa72930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6964
#90 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=0xa72930 [GdkX11Window], clip_to_size=1, cr=0xb305e0, widget=0x7e7ec0 [EvWindow]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:6942
#91 0x00007ffff5fd689f in _gtk_widget_draw_windows (window=window@entry=0xa72930 [GdkX11Window], cr=cr@entry=0xb305e0, window_x=window_x@entry=0, window_y=window_y@entry=0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7065
#92 0x00007ffff5fd6b31 in _gtk_widget_draw (widget=widget@entry=0x7e7ec0 [EvWindow], cr=cr@entry=0xb305e0) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7136
#93 0x00007ffff5fd6e3b in gtk_widget_send_expose (widget=widget@entry=0x7e7ec0 [EvWindow], event=event@entry=0x7fffffffe270) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkwidget.c:7613
#94 0x00007ffff5e9a53c in gtk_main_do_event (event=0x7fffffffe270) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gtk/gtkmain.c:1673
#95 0x00007ffff5a3038a in _gdk_window_process_updates_recurse_helper (window=0xa72930 [GdkX11Window], expose_region=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3556
#96 0x00007ffff5a312ff in gdk_window_process_updates_internal (window=0xa72930 [GdkX11Window]) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3681
#97 0x00007ffff5a314b3 in gdk_window_process_updates_with_mode (window=<optimized out>, recurse_mode=<optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkwindow.c:3882
#98 0x00007ffff4687234 in _g_closure_invoke_va (closure=0xb25230, return_value=0x0, instance=0x6d8290, args=0x7fffffffe590, n_params=<optimized out>, param_types=0x0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gclosure.c:831
#99 0x00007ffff46a03a8 in g_signal_emit_valist (instance=instance@entry=0x6d8290, signal_id=signal_id@entry=141, detail=detail@entry=0, var_args=var_args@entry=0x7fffffffe590) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3214
#100 0x00007ffff46a118a in g_signal_emit_by_name (instance=instance@entry=0x6d8290, detailed_signal=detailed_signal@entry=0x7ffff5a75a67 "paint") at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gobject/gsignal.c:3401
#101 0x00007ffff5a2aa1a in gdk_frame_clock_paint_idle (data=0x6d8290) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdkframeclockidle.c:430
#102 0x00007ffff5a1a5f8 in gdk_threads_dispatch (data=0x82ee80, data@entry=<error reading variable: value has been optimized out>) at /scratch/local/bee-root/gtk3/gtk3-3.16.6-0/source/gdk/gdk.c:719
#103 0x00007ffff4387c83 in g_timeout_dispatch (source=0xb2fa90, callback=<optimized out>, user_data=<optimized out>) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:4545
#104 0x00007ffff438722d in g_main_context_dispatch (context=0x69ac60) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3122
#105 0x00007ffff438722d in g_main_context_dispatch (context=context@entry=0x69ac60) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3737
#106 0x00007ffff43875c8 in g_main_context_iterate (context=context@entry=0x69ac60, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3808
#107 0x00007ffff438766c in g_main_context_iteration (context=0x69ac60, context@entry=0x0, may_block=may_block@entry=1) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/glib/gmain.c:3869
#108 0x00007ffff550158c in g_application_run (application=0x7ba0f0 [EvApplication], argc=argc@entry=0, argv=argv@entry=0x0) at /scratch/local/bee-root/glib2/glib2-2.44.1-0/source/gio/gapplication.c:2308
#109 0x000000000041f00e in main (argc=1, argv=0x7fffffffe9d8) at /dev/shm/bee-root/evince/evince-3.20.0-0/source/shell/main.c:316
Comment 6 Siarhei Siamashka 2016-06-22 12:06:17 UTC
Thanks, looks like it is all the same old problem. Pixman and is receiving an incorrect data buffer because somebody upper in the call chain confuses image width and hight.

Reporting this against pixman is similar to reporting segfaults in the 'memcpy' function to the glibc bugtracker whenever some buggy application uses it wrong.

If Evince with libspectre is not maintained properly and can't resolve this problem, then maybe it's a good idea to replace Evince with something else? For example, I'm using Okular.
Comment 7 Paul Menzel 2016-06-22 12:12:12 UTC
(In reply to Siarhei Siamashka from comment #6)
> Thanks, looks like it is all the same old problem. Pixman and is receiving
> an incorrect data buffer because somebody upper in the call chain confuses
> image width and hight.

That might indeed be the case as this only happens when rotating the EPS.

Could you point out again, what code in the backtrace shows that misbehavior? Because I haven’t seen it yet.

> Reporting this against pixman is similar to reporting segfaults in the
> 'memcpy' function to the glibc bugtracker whenever some buggy application
> uses it wrong.

Understood. Sorry for the noise and thank you for your help.

Could you please resolve this ticket as I do not know if *NOTOURBUG* or *INVALID* is the correct tag.
Comment 8 Siarhei Siamashka 2016-06-22 12:49:00 UTC
(In reply to Paul Menzel from comment #7)
> (In reply to Siarhei Siamashka from comment #6)
> Could you point out again, what code in the backtrace shows that
> misbehavior? Because I haven’t seen it yet.

You can see that pixman is trying to access data outside of the buffer allocated by 'spectre_presize'. The buffer size is:

==22683==  Address 0x1f323a80 is 0 bytes after a block of size 52,476,480 alloc'd

Then you can trace the life of each buffer allocated by this function. And see how the buffer layout is interpreted. That's where the gdb breakpoints are handy. I'm not sure of your log is showing it clearly enough, but we can see that width and height is getting swapped. For example

Breakpoint 1, spectre_presize (handle=0x7fffd802ce60, device=0x7fffd80dadf8, width=4556, height=2877, raster=18240, format=6359172) at /scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c:67
67	/scratch/local/beeroot-root/libspectre/libspectre-0.2.6-0/source/libspectre/spectre-device.c: No such file or directory.
(gdb) 
Continuing.

Breakpoint 2, INT_cairo_image_surface_create_for_data (data=0x7fffc2f54010 "\377\377\377", format=CAIRO_FORMAT_RGB24, width=2877, height=4556, stride=18240) at /scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c:510
510	/scratch/local/bee-root/cairo/cairo-1.14.2-0/source/src/cairo-image-surface.c: No such file or directory.
(gdb) 


And now some simple arithmetics. The image 2877x4556 with 32-bit RGBA format needs (2877 * 4556 * 4) = 52430448 bytes if tightly packed. And (18240 * 4556) = 83101440 bytes if we take the stride into account, which is larger than width. Now compare these numbers with the size allocated by 'spectre_presize' function from the valgrind log (52,476,480 alloc'd).


To sum it up. The width and height are getting swapped while the same buffer is getting reused. But because the 'stride' is larger than 'width' (there are some gaps between scanlines), it is necessary to have a larger buffer.
Comment 9 Siarhei Siamashka 2016-06-22 13:46:33 UTC
(In reply to Paul Menzel from comment #7)
> > Reporting this against pixman is similar to reporting segfaults in the
> > 'memcpy' function to the glibc bugtracker whenever some buggy application
> > uses it wrong.
> 
> Understood. Sorry for the noise and thank you for your help.
> 
> Could you please resolve this ticket as I do not know if *NOTOURBUG* or
> *INVALID* is the correct tag.

I'm not sure what would be the best way to handle it. We keep getting spammed about Evince issues and it's likely not the last bugreport of this kind. This will only end when the real bug is fixed in the appropriate component.
Comment 10 Siarhei Siamashka 2016-09-29 17:49:29 UTC
Apparently this bug is now fixed in libspectre 0.2.8 and tested in https://bugzilla.gnome.org/show_bug.cgi?id=755810#c17

*** This bug has been marked as a duplicate of bug 76450 ***


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.