Bug 13322

Created attachment 12652 [details]
file that causes segfault when viewed in xpdf

Upstream bug (in libfontconfig): https://bugs.freedesktop.org/show_bug.cgi?id=13321

I can't reproduce the crash with evince. 

Here's another PDF which gives this crash (I'll give a link instead of attaching it, because it is quite large): http://vanveelen.xs4all.nl/documenten/gramcord.pdf

Here's my stack backtrace:

Program received signal SIGSEGV, Segmentation fault.
0xb7628558 in IA__FcConfigSubstituteWithPat (config=0x3ff00000, p=0x81551c8, 
    p_pat=0x0, kind=FcMatchPattern) at fccfg.c:1296
1296    fccfg.c: No such file or directory.
        in fccfg.c
Current language:  auto; currently c
(gdb) bt
#0  0xb7628558 in IA__FcConfigSubstituteWithPat (config=0x3ff00000, 
    p=0x81551c8, p_pat=0x0, kind=FcMatchPattern) at fccfg.c:1296
#1  0xb7628be5 in IA__FcConfigSubstitute (config=0x3ff00000, p=0x81551c8, 
    kind=FcMatchPattern) at fccfg.c:1512
#2  0xb7e4e1cb in GlobalParams::getDisplayFont (this=0x8089008, font=0x811fbb0)
    at GlobalParams.cc:1089
#3  0xb7e02e6b in SplashOutputDev::doUpdateFont (this=0x80e3ca0, 
    state=0x812d5f0) at SplashOutputDev.cc:999
#4  0xb7e0312c in SplashOutputDev::drawChar (this=0x80e3ca0, state=0x812d5f0, 
    x=<value optimized out>, y=<value optimized out>, dx=7.1999999999999993, 
    dy=0, originX=0, originY=0, code=49, nBytes=1, u=0xbfd419fc, uLen=1)
    at SplashOutputDev.cc:1277
#5  0xb7e27d0b in Gfx::doShowText (this=0x8119218, s=0x8139190) at Gfx.cc:3290
#6  0xb7e28adf in Gfx::opMoveShowText (this=0x8119218, args=0xbfd41b24, 
    numArgs=1) at Gfx.cc:3097
#7  0xb7e255d1 in Gfx::execOp (this=0x8119218, cmd=0xbfd41cb0, 
    args=0xbfd41b24, numArgs=<value optimized out>) at Gfx.cc:726
#8  0xb7e2579a in Gfx::go (this=0x8119218, topLevel=1) at Gfx.cc:594
#9  0xb7e25d23 in Gfx::display (this=0x8119218, obj=0xbfd41d8c, topLevel=1)
    at Gfx.cc:557
#10 0xb7e6b8d6 in Page::displaySlice (this=0x8106d18, out=0x80e3ca0, 
    hDPI=81.235154394299286, vDPI=81.235154394299286, rotate=0, useMediaBox=0, 
    crop=1, sliceX=0, sliceY=0, sliceW=671, sliceH=950, printing=0, 
    catalog=0x80ff248, abortCheckCbk=0, abortCheckCbkData=0x0, 
    annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:406
#11 0xb7e6ddc7 in PDFDoc::displayPageSlice (this=0x80fe828, out=0x80e3ca0, 
    page=1, hDPI=81.235154394299286, vDPI=81.235154394299286, rotate=0, 
    useMediaBox=0, crop=1, printing=0, sliceX=0, sliceY=0, sliceW=671, 
    sliceH=950, abortCheckCbk=0, abortCheckCbkData=0x0, 
    annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at PDFDoc.cc:396
#12 0x0805d65c in PDFCore::needTile (this=0x80e3660, page=0x8119118, x=0, y=0)
    at PDFCore.cc:835
#13 0x0805ffd7 in PDFCore::update (this=0x80e3660, topPageA=1, scrollXA=0, 
    scrollYA=0, zoomA=-1, rotateA=0, force=1, addToHist=1) at PDFCore.cc:658
#14 0x08064267 in XPDFCore::update (this=0x80e3660, topPageA=1, scrollXA=0, 
    scrollYA=0, zoomA=-1, rotateA=0, force=1, addToHist=1) at XPDFCore.cc:285
#15 0x0805b500 in PDFCore::displayPage (this=0x8154e60, topPageA=1, zoomA=-1, 
    rotateA=0, scrollToTop=1, addToHist=1) at PDFCore.cc:292
#16 0x0806fd20 in XPDFViewer (this=0x80c20c0, appA=0x8096650, 
    fileName=0x80c2098, pageA=1, destName=0x0, fullScreen=0, 
    ownerPassword=0x0, userPassword=0x0) at XPDFViewer.cc:297
#17 0x080618ce in XPDFApp::open (this=0x8096650, fileName=0x80c2098, page=1, 
    ownerPassword=0x0, userPassword=0x0) at XPDFApp.cc:228
#18 0x08072208 in main (argc=Cannot access memory at address 0x1
) at xpdf.cc:311
#19 0xb794c838 in __libc_start_main () from /lib/libc.so.6
#20 0x080518e1 in _start ()

This is fontconfig 2.4.2, compiled on Gentoo.

works here on fontconfig 2.4.2 too, not gentoo though

gentoo developer acknowledged it's a gentoo problem

OK, can you provide the bug number on http://bugs.gentoo.org/ ? (Or privately bring me into contact with the gentoo developer you mention?)

no, sorry i can not point you to gentoo bugtracker. gentoo developer nick is genstef

For reference, the Gentoo bug for this is
http://bugs.gentoo.org/show_bug.cgi?id=199827 . It has been fixed in the most recent release.