Bugzilla – Bug 50852
Rendering specific SVG file at certain sizes causes a segmentation fault
Last modified: 2012-06-08 09:27:26 UTC
Created attachment 62751 [details]
SVG file causing cairo to segfault
There is a bug report  in Arch Linux from a user who is seeing xfce4-panel segfaults when using the Faenza icon theme and specifically the icon for the Geany application.
I have attached a modified geany.svg which is reduced to a single path. Converting it to the PNG format using rsvg results in a segmentation fault.
$ rsvg-convert geany.svg -o geany.png -w 40
$ rsvg-convert geany.svg -o geany.png -w 10 (this size works correctly)
$ rsvg-convert geany.svg -o geany.png -w 16
cairo is compiled with gcc 4.7; maybe this matters.
Created attachment 62752 [details]
I'm also attaching a gdb backtrace using a debug build of cairo. The fault occurs at cairo-tor-scan-converter.c:1361 when trying to dereference right->next which is NULL.
Created attachment 62757 [details]
Premiliary test case
Created attachment 62758 [details]
Author: Chris Wilson <firstname.lastname@example.org>
Date: Fri Jun 8 17:22:41 2012 +0100
polygon-reduce: Reduce broken stopped-edge continuation
This is hopefully a lesser used path and the attempted optimisation to
continue a stopped edge with a colinear stopped edge highly unlikely and
lost in the noise of the general inefficiency of the routine. As it was
broken, rather than attempt to rectify the "optimisation" remove it.
Reported-by: Evangelos Foutras <email@example.com>
Signed-off-by: Chris Wilson <firstname.lastname@example.org>