<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Segfault when loading a PDF with a transformed image (1.14.0)" href="https://bugs.freedesktop.org/show_bug.cgi?id=85151#c3">Comment # 3</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Segfault when loading a PDF with a transformed image (1.14.0)" href="https://bugs.freedesktop.org/show_bug.cgi?id=85151">bug 85151</a> from <a class="email" href="mailto:sixtysix@inwind.it" title="Massimo <sixtysix@inwind.it>"> Massimo</a> <pre>Created <a href="attachment.cgi?id=108052" name="attach_108052" title="proposed patch">attachment 108052</a> <a href="attachment.cgi?id=108052&action=edit" title="proposed patch">[details]</a> <a href='page.cgi?id=splinter.html&bug=85151&attachment=108052'>[review]</a> proposed patch I reproduced the crash with test2.pdf and an evince built from git sources $git --git-dir=evince/.git describe HEAD --long 3.14.1-0-gf1cda92 $git --git-dir=poppler/.git describe HEAD --long poppler-0.26.4-59-g745f124 $git --git-dir=cairo/.git describe HEAD --long 1.14.0-7-g51892e9 at 50% zoom. Comparing my alternative solution to <a class="bz_bug_link bz_status_NEW " title="NEW - cairo-tor-scan-converter is off by half of a subrow." href="show_bug.cgi?id=84396">bug 84396</a> with that in master I recall that I noticed that full_row should be used only when there is no intersection in the current row and in the top half of the successive subrow, otherwise redundant (negative) spans are possibly generated when sub_row is called for the next row and I observed a similar crash and backtrace. The attached patch fixes the crash with test2.pdf, but I did not reproduce it with test.pdf.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>