Bug 33063

Summary: Evince crashes on selecting pdf form elements
Product: poppler Reporter: Michael Crouch <creidieki>
Component: generalAssignee: poppler-bugs <poppler-bugs>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: medium    
Version: unspecified   
Hardware: Other   
OS: All   
Whiteboard:
i915 platform: i915 features:
Attachments: pdf file which crashes on form selection

Description Michael Crouch 2011-01-13 08:14:23 UTC
(Originally reported as https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/700852 )

Evince consistently crashes when clicking on either of the "Suspended" or "Dismissed" radio buttons on the attached pdf form.

When started from the terminal, evince will display the message:
"Error (0): Call to Object where the object was type 4, not the expected type 6"

This pdf actually also crashes on okular, with the same message (!), so maybe it's a back-end thing? It works fine on acroread.

The messages that I was able to get from gdb were:

Core was generated by `evince StudentAppeal-2010.pdf'.
Program terminated with signal 6, Aborted.
#0 0x00007faf0cffbba5 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
 in ../nptl/sysdeps/unix/sysv/linux/raise.c
(gdb) bt
#0 0x00007faf0cffbba5 in raise (sig=<value optimized out>) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1 0x00007faf0cfff6b0 in abort () at abort.c:92
#2 0x00007faef3c9be6e in Object::getArray (this=<value optimized out>) at Object.h:202
#3 0x00007faef3c950c6 in AnnotWidget::generateFieldAppearance (this=0x7faefc1557f0) at Annot.cc:3780
#4 0x00007faef3c95247 in AnnotWidget::draw (this=0x7faefc1557f0, gfx=0x7faefc08ffc0, printing=<value optimized out>) at Annot.cc:3995
#5 0x00007faef3d02f2d in Page::displaySlice (this=<value optimized out>, out=<value optimized out>, hDPI=<value optimized out>, vDPI=<value optimized out>,
    rotate=<value optimized out>, useMediaBox=<value optimized out>, crop=<value optimized out>, sliceX=<value optimized out>, sliceY=-1, sliceW=-1, sliceH=-1,
    printing=0, catalog=0x7faf13a9c8d0, abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0) at Page.cc:492
#6 0x00007faf00246bc7 in _poppler_page_render (page=0x7faf13a70880, cairo=0x7faf0f57e8a0, printing=0) at poppler-page.cc:336
#7 0x00007faf004a3b48 in pdf_page_render (document=<value optimized out>, rc=0x7faefc004950) at /build/buildd/evince-2.32.0/./backend/pdf/ev-poppler.cc:373
#8 pdf_document_render (document=<value optimized out>, rc=0x7faefc004950) at /build/buildd/evince-2.32.0/./backend/pdf/ev-poppler.cc:407
#9 0x00007faf11474428 in ev_job_render_run (job=0x7faf13ab1be0) at /build/buildd/evince-2.32.0/./libview/ev-jobs.c:574
#10 0x00007faf114750a0 in ev_job_thread (data=<value optimized out>) at /build/buildd/evince-2.32.0/./libview/ev-job-scheduler.c:183
#11 ev_job_thread_proxy (data=<value optimized out>) at /build/buildd/evince-2.32.0/./libview/ev-job-scheduler.c:213
#12 0x00007faf0da6c7e4 in g_thread_create_proxy (data=0x7faf13a56830) at /build/buildd/glib2.0-2.26.1/glib/gthread.c:1897
#13 0x00007faf0d352971 in start_thread (arg=<value optimized out>) at pthread_create.c:304
#14 0x00007faf0d0ae92d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#15 0x0000000000000000 in ?? ()
Comment 1 Michael Crouch 2011-01-13 08:14:57 UTC
Created attachment 41967 [details]
pdf file which crashes on form selection
Comment 2 Albert Astals Cid 2011-01-13 11:30:24 UTC
Carlos, should line 3797 of Annot.cc be obj3.getArray() instead obj1.getArray()?
Comment 3 Albert Astals Cid 2011-01-21 00:45:46 UTC
Will be fixed in poppler 0.16.1

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.