Inkscape crashes (SEGV) editing a path with pattern fill

Bug #770236 reported by Bob Dowling
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Inkscape
Confirmed
Undecided
Unassigned

Bug Description

My recipe for a crash:

Create document 1000px × 1000px.
[Ctrl]+[Shift]+[F] Fill and stroke toolbox
[Ctrl]+[Shift]+[A] Alignment toolbox
[Ctrl]+[I] load image - 810px × 540px.
Align to centre of page.
[F1] Select image
[Alt]+[I] Object to pattern
[Del] Delete object
[F4] Create rectangle
Set dimensions to be 810px × 540px in toolbar.
Align to centre of page.
[F1] Select rectangle.
[Ctrl]+[Shift]+[C] Convert to path
Set fill to be pattern.
[F2] Node selection.
Click pointer on left edge of path to select both top left and bottom left nodes.
Drag rightwards.
Path bends.
Inkscape crashes.

Core dump available on request.

Backtrace from gdb:

rjd4@legendre:~/Pictures/Inkscape$ gdb /usr/bin/inkscape
GNU gdb (GDB) 7.1-ubuntu
Copyright (C) 2010 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/inkscape...(no debugging symbols found)...done.
(gdb) run
Starting program: /usr/bin/inkscape
[Thread debugging using libthread_db enabled]
[New Thread 0xb6c1fb70 (LWP 4585)]
[New Thread 0xb641eb70 (LWP 4586)]
[Thread 0xb6c1fb70 (LWP 4585) exited]
[Thread 0xb641eb70 (LWP 4586) exited]

** (inkscape:4574): CRITICAL **: virtual const gchar* Inkscape::XML::SimpleNode::attribute(const gchar*) const: assertion `name != NULL' failed

** (inkscape:4574): CRITICAL **: virtual void Inkscape::XML::SimpleNode::setAttribute(const gchar*, const gchar*, bool): assertion `name && *name' failed

** (inkscape:4574): CRITICAL **: void sp_canvas_end_forced_full_redraws(SPCanvas*): assertion `canvas != NULL' failed

Program received signal SIGSEGV, Segmentation fault.
0x08092d65 in ?? ()
(gdb) bt
#0 0x08092d65 in ?? ()
#1 0x08093487 in ?? ()
#2 0x08528083 in ?? ()
#3 0x080ce5a2 in ?? ()
#4 0x08523f2d in ?? ()
#5 0x080943c1 in ?? ()
#6 0x0824894f in ?? ()
#7 0x00ea1252 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#8 0x00eb599d in ?? () from /usr/lib/libgobject-2.0.so.0
#9 0x00eb6c33 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#10 0x00a949de in gtk_signal_emit () from /usr/lib/libgtk-x11-2.0.so.0
#11 0x085774a6 in ?? ()
#12 0x08577507 in ?? ()
#13 0x08248be8 in ?? ()
#14 0x00e9f8b9 in ?? () from /usr/lib/libgobject-2.0.so.0
#15 0x00ea1252 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#16 0x00eb55e6 in ?? () from /usr/lib/libgobject-2.0.so.0
#17 0x00eb6c33 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#18 0x00a949de in gtk_signal_emit () from /usr/lib/libgtk-x11-2.0.so.0
#19 0x081c16f7 in ?? ()
#20 0x081c3387 in ?? ()
#21 0x008fe424 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#22 0x00e9f8b9 in ?? () from /usr/lib/libgobject-2.0.so.0
#23 0x00ea1252 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#24 0x00eb55e6 in ?? () from /usr/lib/libgobject-2.0.so.0
#25 0x00eb6c33 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#26 0x00eb7256 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#27 0x00a2b636 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#28 0x008f6a5d in gtk_propagate_event () from /usr/lib/libgtk-x11-2.0.so.0
#29 0x008f7e07 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#30 0x00bec39a in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#31 0x00f245e5 in g_main_context_dispatch () from /lib/libglib-2.0.so.0
#32 0x00f282d8 in ?? () from /lib/libglib-2.0.so.0
#33 0x00f28817 in g_main_loop_run () from /lib/libglib-2.0.so.0
#34 0x008f83c9 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#35 0x003063a7 in Gtk::Main::run_impl() () from /usr/lib/libgtkmm-2.4.so.1
#36 0x003061a2 in Gtk::Main::run() () from /usr/lib/libgtkmm-2.4.so.1
#37 0x08088d6b in ?? ()
#38 0x0816551a in ?? ()
#39 0x080881f2 in ?? ()
#40 0x01a7abd6 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#41 0x080872a1 in ?? ()
(gdb)

I have attached an SVG file with the pattern in the path, prior to trying to edit the path.

Revision history for this message
Bob Dowling (rjd4) wrote :
Revision history for this message
Bob Dowling (rjd4) wrote :

Rats! I forgot the version information. My apologies:

Ubuntu 10.04 LTS
Inkscape 0.47 r22583 (4 April 2010)

Revision history for this message
su_v (suv-lp) wrote :

Please attach the source image for the bitmap pattern:
  /home/rjd4/Pictures/Inkscape/flickr-ski-050.jpg
for testing with current stable versions (0.48.1).

Most likely a duplicate of
Bug #463602 “crash when node-editing pattern-filled object”
<https://bugs.launchpad.net/inkscape/+bug/463602>
(fixed in Inkscape 0.48.0)

tags: added: crash node-editing pattern
Changed in inkscape:
status: New → Incomplete
Revision history for this message
Bob Dowling (rjd4) wrote :

Original image attached

Revision history for this message
su_v (suv-lp) wrote :

Reproduced with Inkscape 0.47 on OS X 10.5.8 (i386):
Console messages:
(inkscape-bin:45697): CRITICAL **: virtual const gchar* Inkscape::XML::SimpleNode::attribute(const gchar*) const: assertion `name != NULL' failed
(inkscape-bin:45697): CRITICAL **: virtual void Inkscape::XML::SimpleNode::setAttribute(const gchar*, const gchar*, bool): assertion `name && *name' failed

Not reproduced with Inkscape 0.48.0, 0.48.1 and 0.48+devel r10191.

Linking as duplicate to bug #463602. Please add a comment here and revert the duplicate status if you don't agree and think these are different issues or if the crash still occurs with the current stable release (0.48.1).

Changed in inkscape:
status: Incomplete → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.