[Tuxpaint-devel] floating point exception with certain (wrong?) svg

[Pere P. i C. <pe...@fo...>]

Hi all!

Last week I've discovered the openclipart collection www.openclipart.org
it is packaged at least for debian and ubuntu.

At least one of the svg that comes with the debian package  is able to
crash tuxpaint, it is not attached as it crashes evolution as well, so
maybe it is not a tuxpaint-specific problem but I had mostly of this
email writed when evolution crashed, so I send anyway.

You can download from
http://fornol.no-ip.org/linux/tuxpaint/stamps/perspectival_house_01.svg
or if you have openclipart-svg installed, you can find it
at /usr/[local]/share/openclipart/svg/buildings/perspectival_house_01.svg

Inkscape and sodipodi displays it, gimp is unable to open it and
Imagemagick displays it but complainins the following 
display: unable to open image `pattern3182': No such file or directory.

 Resaving it under inkscape or sodipodi does not arrange it, repainting
it and saving lets tuxpaint not crashing.

Plain bash error is "floating point exception".

valgrind --tool=memcheck --num-callers=50 --leak-check=yes tuxpaint
--nosound --640x480 says this just after the crash:

==10858== 
==10858== Process terminating with default action of signal 8 (SIGFPE)
==10858==  Integer divide by zero at address 0x630A8F35
==10858==    at 0x42365C7: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x4233DAB: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x42252E5: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41E9793: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41F3B4A: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41F71D7: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41F61F3: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41F6CBE: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41F7100: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41F4717: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41E7282: (within /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41DFE7B: cairo_fill_preserve
(in /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41DFEA1: cairo_fill (in /usr/lib/libcairo.so.2.11.5)
==10858==    by 0x41D2181: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41CCBBD: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41C1F4A: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41C491D: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41C4B79: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41C491D: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41C5419: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41C491D: (within /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41D2A3D: rsvg_handle_render_cairo_sub
(in /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x41D2B6B: rsvg_handle_render_cairo
(in /usr/lib/librsvg-2.so.2.18.2)
==10858==    by 0x8055944: load_svg (tuxpaint.c:16390)
==10858==    by 0x8055B1B: do_loadimage (tuxpaint.c:7902)
==10858==    by 0x8060737: get_stamp_thumb (tuxpaint.c:5747)
==10858==    by 0x80611A4: draw_stamps (tuxpaint.c:8609)
==10858==    by 0x8065389: mainloop (tuxpaint.c:2792)
==10858==    by 0x8068C76: main (tuxpaint.c:1774)
==10858== 
==10858== ERROR SUMMARY: 640 errors from 47 contexts (suppressed: 0 from
0)
==10858== malloc/free: in use at exit: 18,850,450 bytes in 15,945
blocks.
==10858== malloc/free: 260,564 allocs, 244,619 frees, 152,723,859 bytes
allocated.
==10858== For counts of detected errors, rerun with: -v
==10858== searching for pointers to 15,945 not-freed blocks.
==10858== checked 27,989,464 bytes.
==10858== 
==10858== 

If you want the full valgrind output, just say it.

Hope this helps
Pere