Inkscape crashes when image x is NaN

Bug #1735733 reported by Philipp Hagemeister
18
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Inkscape
Fix Released
Medium
Unassigned

Bug Description

When opening the file https://phihag.de/2017/inkscape-crash.svg , which is simply

<?xml version="1.0"?>
<svg xmlns="http://www.w3.org/2000/svg">
  <image height="1" width="1" x="NaN"/>
</svg>

Inkscape 0.92.2 (5c3e80d, 2017-08-06) from debian sid crashes with the following backtrace:

#0 0x00007fffed890a70 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1 0x00007fffed89219a in __GI_abort () at abort.c:89
#2 0x00007fffedc91b85 in __gnu_cxx::__verbose_terminate_handler() () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#3 0x00007fffedc8f956 in () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#4 0x00007fffedc8f9a1 in () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#5 0x00007fffedc8fbe4 in () at /usr/lib/x86_64-linux-gnu/libstdc++.so.6
#6 0x00007ffff77378a9 in Geom::Path::do_append(Geom::Curve*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#7 0x00007ffff6edf0d1 in SPCurve::lineto(Geom::Point const&) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#8 0x00007ffff6edf1da in SPCurve::new_from_rect(Geom::Rect const&, bool) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#9 0x00007ffff75b670b in SPImage::set(unsigned int, char const*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#10 0x00007ffff75b639c in SPImage::build(SPDocument*, Inkscape::XML::Node*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#11 0x00007ffff75dfd43 in SPObject::invoke_build(SPDocument*, Inkscape::XML::Node*, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#12 0x00007ffff75e1c2c in SPObject::build(SPDocument*, Inkscape::XML::Node*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#13 0x00007ffff75ee856 in SPRoot::build(SPDocument*, Inkscape::XML::Node*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#14 0x00007ffff75dfd43 in SPObject::invoke_build(SPDocument*, Inkscape::XML::Node*, unsigned int) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#15 0x00007ffff74c8b88 in SPDocument::createDoc(Inkscape::XML::Document*, char const*, char const*, char const*, unsigned int, SPDocument*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#16 0x00007ffff74c9993 in SPDocument::createNewDoc(char const*, unsigned int, bool, SPDocument*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#17 0x00007ffff6f41c58 in Inkscape::Extension::Input::open(char const*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#18 0x00007ffff6f44b09 in Inkscape::Extension::open(Inkscape::Extension::Extension*, char const*) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#19 0x00007ffff74d5dd8 in sp_file_open(Glib::ustring const&, Inkscape::Extension::Extension*, bool, bool) () at /usr/bin/../lib/inkscape/libinkscape_base.so
#20 0x000055555555cc0f in sp_main_gui(int, char const**) ()
#21 0x00007fffed87d561 in __libc_start_main (main=0x55555555a860 <main>, argc=2, argv=0x7fffffffe4e8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe4d8) at ../csu/libc-start.c:297
#22 0x000055555555adca in _start ()

Revision history for this message
Alvin Penner (apenner) wrote :

confirmed on Windows 10, Inkscape 0.92.2 (5c3e80d, 2017-08-06)

DOS error message is:

C:\Program Files (x86)\Inkscape>inkscape
terminate called after throwing an instance of 'Geom::ContinuityError'
  what(): lib2geom exception: Non-contiguous path (../src/2geom/path.cpp:1043)

Emergency save activated!
Emergency save completed. Inkscape will close now.
If you can reproduce this crash, please file a bug at www.inkscape.org
with a detailed description of the steps leading to the crash, so we can fix it.
**
ERROR:../src/sp-namedview.cpp:1080:SPNamedView* sp_document_namedview(SPDocument*, const gchar*): assertion failed: (nv != NULL)

Changed in inkscape:
status: New → Confirmed
Revision history for this message
Qantas94Heavy (qantas94heavy) wrote :
Changed in inkscape:
status: Confirmed → Fix Released
Revision history for this message
Qantas94Heavy (qantas94heavy) wrote :
Changed in inkscape:
milestone: none → 0.92.4
importance: Undecided → Medium
tbnorth (terry-n-brown)
tags: added: bug-migration
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.