[cairo-bugs] [Bug 10165] New: Cairo crashes on complex multipath curve

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=10165

           Summary: Cairo crashes on complex multipath curve
           Product: cairo
           Version: 1.3.9
          Platform: x86 (IA32)
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: high
         Component: xlib backend
        AssignedTo: cworth at cworth.org
        ReportedBy: igor.e.novikov at gmail.com
         QAContact: cairo-bugs at cairographics.org


Complex multipath curve results Cairo crash without any error message.
Application just disappeares. Sample curve you can find on following link:

http://sk1.sf.net/screenshots/cairo/cairo_test.svg

This bug is reproduced on sK1 app. sK1 has two renderers: Xlib based and Cairo
based. Test curve doesn't crash Xlib-based renderer as for wireframe and for
normal view:

http://sk1.sf.net/screenshots/cairo/sk2_cairo_wireframe.png

Cairo-based renderer works well for wireframe mode:

http://sk1.sf.net/screenshots/cairo/sk2_cairo_wireframe.png

but for normal view it is crashed. Simple tracing shows that that problem cause
is cairo_fill() function call. Tolerance increasing using cairo_set_tolerance()
slightly improve situation, but if number of paths in this curve will be
increased, Cairo crashes anyway.

We use x11-backend for direct painting on canvas. The testcase was specially
created to reproduce problem avoiding any additional factors. Usually we got
such failure on text converted to curve:

http://sk1.sf.net/screenshots/for_lor.png

To produce this screen the text on canvas was splitted on separate lines. Even
two text lines combined in one curve results Cairo crash. For non complex
curves which have not multipath content Cairo works fine:

http://sk1.sf.net/screenshots/cairo/sk1_cairo_car1.png
http://sk1.sf.net/screenshots/cairo/sk1_cairo_car2.png

This drawing is a bitmap vectorization result (traced in CorelTRACE). Initial
ai file size is ~9Mb.

If you will have any additional questions please dotn't hesitate to contact us.


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.