Public bug reported:

One of my SVG files caused a crash in RSVG which crashes Nautilus. I
have boiled this down to a minimal test case (attached). It seems RSVG
crashes when any feBlend filter is applied outside and above the
viewport. When it crosses onto the viewport, or is left, right or below
of the viewport, no crash occurs.

I'm running Jaunty x86_64.

(gdb) backtrace
#0  0x00007f6f3f4cc00d in rsvg_filter_blend (mode=normal, in=<value optimized 
out>, in2=0x16c90a0, output=<value optimized out>, boundarys={x0 = 324, y0 = 
-44, x1 = 386, y1 = -44}, channelmap=0x16d5dc0) at rsvg-filter.c:829
#1  0x00007f6f3f4d4302 in rsvg_filter_primitive_blend_render (self=0x16dab80, 
ctx=0x16d5d10) at rsvg-filter.c:858
#2  0x00007f6f3f4cf0e3 in rsvg_filter_render (self=0x16da470, source=0x16c90a0, 
bg=<value optimized out>, context=<value optimized out>, bounds=<value 
optimized out>, channelmap=0x7f6f3f4e98dc "2103") at rsvg-filter.c:83
#3  0x00007f6f3f4e313d in rsvg_cairo_pop_discrete_layer (ctx=0x16d1490) at 
rsvg-cairo-draw.c:989
#4  0x00007f6f3f4e519b in rsvg_cairo_render_path (ctx=0x16d1490, 
bpath_def=0x16db8b0) at rsvg-cairo-draw.c:638
#5  0x00007f6f3f4dfd71 in rsvg_render_path (ctx=0x16d1490, d=<value optimized 
out>) at rsvg-base.c:1836
#6  0x00007f6f3f4d8fce in rsvg_node_draw (self=0x16dc8c0, ctx=0x16d1490, 
dominate=0) at rsvg-structure.c:68
#7  0x00007f6f3f4d94e3 in _rsvg_node_draw_children (self=0x16d87b0, 
ctx=0x16d1490, dominate=0) at rsvg-structure.c:86
#8  0x00007f6f3f4d8fce in rsvg_node_draw (self=0x16d87b0, ctx=0x16d1490, 
dominate=0) at rsvg-structure.c:68
#9  0x00007f6f3f4d93d3 in rsvg_node_svg_draw (self=0x16d8ac0, ctx=0x16d1490, 
dominate=<value optimized out>) at rsvg-structure.c:326
#10 0x00007f6f3f4d8fce in rsvg_node_draw (self=0x16d8ac0, ctx=0x16d1490, 
dominate=0) at rsvg-structure.c:68
#11 0x00007f6f3f4e5dac in rsvg_handle_render_cairo_sub (handle=0x16d4800, 
cr=0x16d1000, id=<value optimized out>) at rsvg-cairo-render.c:231
#12 0x0000000000402289 in main (argc=1, argv=0x7fff47b14ed8) at 
rsvg-convert.c:317

** Affects: librsvg (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Crash where feBlend filter above viewport
https://bugs.launchpad.net/bugs/377896
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to librsvg in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to