Another crash, from QIPGrayscaleImage::copyInternal2()

What steps will reproduce the problem?
1. Start yagf.
2. Click "open image" button.
3. Choose the image file attached.

What is the expected output? What do you see instead?
Core dump.

What version of the product are you using? On what operating system?
yagf 0.9.4.3, OpenBSD-CURRENT.

Please provide any additional information below.

(gdb) bt
#0  memcpy () at /usr/src/lib/libc/arch/i386/string/bcopy.S:82
#1  0x152c2e17 in QIPGrayscaleImage::copyInternal2 (this=0xcfbf733c, 
r=@0x7ae83b5c, 
    s=0x7aa32000 "\031\031\027\026\026\024\021\023\024\023\023\023\023\024\025\026\025\024\024\026\027\030\031\030\030\030\032\033\032\032\
027\024\027\027\026\026\031\033\030\032\031\032\032\034\036\034\031\026\030\027\
031\030\030\031\032\031\032\032\033\033\031\027\026\032\026
\027\027\032\032\034\036\037\037!! \036\035\035\035 \037\036\034\037 
\037\036\036\035\035\037 !! \037\037\037\036\034\035\036  \035\037\037
  \037 ! \036\035\034\035\032\031\033\032\031\031\031\031\030\030\031\025\025\024\024\031\026\027\030\031\032\032\032\027\031\030\030\032\0
32\032\032\031\031\031\031\031\031\033\033\033\032\031\032\034\034\034\033\027\0
27\033\035\035\033\034\034\033\032\033\035\032\027\027\030\
027\027\025\027\027\031\027\025\026\027\026\031\033\034\034\036\034\024\017"...,
 d=0x7d585000 ' <repeats 200 times>...)
    at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/core/qipgrayscaleimage.cpp:370
#2  0x152c617f in QtConcurrent::VoidStoredConstMemberFunctionPointerCall3<void, 
QIPGrayscaleImage, IntRect&, IntRect, unsigned char*, unsig
ned char*, unsigned char*, unsigned char*>::runFunctor (this=0x7ae83b40) at 
qtconcurrentstoredfunctioncall.h:857
#3  0x152c6445 in QtConcurrent::RunFunctionTask<void>::run (this=0x7ae83b40) at 
qtconcurrentrunbase.h:134
#4  0x0a774ae7 in QThreadPoolPrivate::stealRunnable () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#5  0x0a76b3ab in QFutureInterfaceBase::waitForFinished () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#6  0x152c7589 in QFuture<void>::waitForFinished (this=0xcfbf71fc) at 
qfuture.h:245
#7  0x152c3479 in QIPGrayscaleImage::copy (this=0xcfbf733c, x1=13, x2=427, 
y1=12, y2=262)
    at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/core/qipgrayscaleimage.cpp:359
#8  0x152b09b7 in ImageProcessor::crop (this=0xcfbf7334) at 
/usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/core/imageprocessor.cpp:51
#9  0x152a883e in Page::loadFile (this=0x7c7a1300, fileName=@0xcfbf7414, 
tiled=1, loadIntoView=false)
    at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/tpage.cpp:89
#10 0x152ad0f0 in PageCollection::appendPage (this=0x81ce54c0, 
fileName=@0x803272f4)
    at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/tpagecollection.cpp:55
#11 0x1525253e in MainForm::loadFile (this=0xcfbf864c, fn=@0x803272f4, 
loadIntoView=true)
    at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/mainform.cpp:544
#12 0x1525531c in MainForm::loadFiles (this=0xcfbf864c, files=@0xcfbf759c)
    at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/mainform.cpp:224
#13 0x15255eb4 in MainForm::loadImage (this=0xcfbf864c) at 
/usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/mainform.cpp:402
#14 0x152c95e7 in MainForm::qt_static_metacall (_o=0xcfbf864c, 
_c=QMetaObject::InvokeMetaMethod, _id=11, _a=0xcfbf7708)
    at src/moc_mainform.cxx:152
#15 0x0a8d8bb3 in QMetaObject::activate () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#16 0x0b50e1b4 in QAction::triggered () from /usr/local/lib/qt4/libQtGui.so.10.1
#17 0x0b50f746 in QAction::activate () from /usr/local/lib/qt4/libQtGui.so.10.1
#18 0x0babba92 in QToolButton::nextCheckState () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#19 0x0b9be3ee in QAbstractButtonPrivate::click () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#20 0x0b9be6dc in QAbstractButton::mouseReleaseEvent () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#21 0x0babbb8c in QToolButton::mouseReleaseEvent () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#22 0x0b57fd75 in QWidget::event () from /usr/local/lib/qt4/libQtGui.so.10.1
#23 0x0b9bd85f in QAbstractButton::event () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#24 0x0babee2e in QToolButton::event () from /usr/local/lib/qt4/libQtGui.so.10.1
#25 0x0b51672c in QApplicationPrivate::notify_helper () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#26 0x0b51f013 in QApplication::notify () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#27 0x0a8be0ea in QCoreApplication::notifyInternal () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#28 0x0b518c84 in QApplicationPrivate::sendMouseEvent () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#29 0x0b5b659f in QETWidget::translateMouseEvent () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#30 0x0b5b5a82 in QApplication::x11ProcessEvent () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#31 0x0b5e51c4 in 
QGuiEventDispatcherGlibPrivate::QGuiEventDispatcherGlibPrivate () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#32 0x0a3486e6 in g_main_context_dispatch () from 
/usr/local/lib/libglib-2.0.so.4000.0
#33 0x0a34a95f in g_main_context_iterate () from 
/usr/local/lib/libglib-2.0.so.4000.0
#34 0x0a34aa50 in g_main_context_iteration () from 
/usr/local/lib/libglib-2.0.so.4000.0
#35 0x0a8f9737 in QEventDispatcherGlib::processEvents () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#36 0x0b5e4cb0 in QGuiEventDispatcherGlib::processEvents () from 
/usr/local/lib/qt4/libQtGui.so.10.1
#37 0x0a8bcdde in QEventLoop::processEvents () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#38 0x0a8bd25a in QEventLoop::exec () from /usr/local/lib/qt4/libQtCore.so.9.0
#39 0x0a8c2436 in QCoreApplication::exec () from 
/usr/local/lib/qt4/libQtCore.so.9.0
#40 0x0b516057 in QApplication::exec () from /usr/local/lib/qt4/libQtGui.so.10.1
#41 0x1524d20d in main (argc=Cannot access memory at address 0x2
) at /usr/obj/p/yagf-0.9.4.3/yagf-yagf-0.9.4.3/src/main.cpp:80
Original issue reported on code.google.com by persgray@gmail.com on 2 Oct 2014 at 1:04
Attachments:
boromir-arkadyevich.jpg
lijian8 / yagf

Another crash, from QIPGrayscaleImage::copyInternal2() #53
