Crashes when switching to some UTM CRSs with certain data

[qgib]

Author Name: Johannes Kroeger (Johannes Kroeger)
Original Redmine Issue: 15345
Affected QGIS version: 2.18.4
Redmine category:projection_support

---

This could probably be nailed down better but here it goes:

Load the shapefile from http://www.naturalearthdata.com/http//www.naturalearthdata.com/download/10m/cultural/ne_10m_populated_places.zip (also works with the layer from their sqlite version)

Switch OTF CRS to EPSG 25832 or 25833 (probably many others result in the same crash).

QGIS will crash.

I am on Archlinux, qgis built from master a short while ago at 7343b36.

With gdb I got this backtrace:

*** Error in `/usr/bin/qgis': double free or corruption (fasttop): 0x00007fff3c0010e0 ***
======= Backtrace: =========
/usr/lib/libc.so.6(+0x6ed4b)[0x7ffff43fad4b]
/usr/lib/libc.so.6(+0x74546)[0x7ffff4400546]
/usr/lib/libc.so.6(+0x74d1e)[0x7ffff4400d1e]
/usr/lib/libqgis_core.so.2.99.0(_ZN11QgsSymbolV210stopRenderER16QgsRenderContext+0xbf)[0x7ffff61b6ccf]
/usr/lib/libqgis_core.so.2.99.0(_ZN25QgsSingleSymbolRendererV210stopRenderER16QgsRenderContext+0x1a)[0x7ffff616f8aa]
/usr/lib/libqgis_core.so.2.99.0(+0x5f9b7e)[0x7ffff6504b7e]
/usr/lib/libqgis_core.so.2.99.0(+0x5fb019)[0x7ffff6506019]
/usr/lib/libqgis_core.so.2.99.0(_ZN25QgsMapRendererParallelJob17renderLayerStaticER14LayerRenderJob+0x67)[0x7ffff639b587]
/usr/lib/libqgis_core.so.2.99.0(+0x491ba6)[0x7ffff639cba6]
/usr/lib/libqgis_core.so.2.99.0(+0x491f28)[0x7ffff639cf28]
/usr/lib/libQtCore.so.4(_ZN12QtConcurrent16ThreadEngineBase3runEv+0x6d)[0x7ffff5a8030d]
/usr/lib/libQtCore.so.4(+0x7f3fa)[0x7ffff5a823fa]
/usr/lib/libQtCore.so.4(+0x8c12c)[0x7ffff5a8f12c]
/usr/lib/libpthread.so.0(+0x7484)[0x7fffeda44484]
/usr/lib/libc.so.6(clone+0x6d)[0x7ffff44736dd]

[qgib]

Author Name: Johannes Kroeger (Johannes Kroeger)

---

Huh! I played around some more. If I load the file, then first set OTF CRS to EPSG 3978, then to 25832, I will get the same backtrace.
If I go 3978 -> 25833 however, I get this:

Thread 1 "qgis" received signal SIGSEGV, Segmentation fault.
0x00007ffff440d76c in __memset_sse2 () from /usr/lib/libc.so.6

[qgib]

Author Name: Nyall Dawson (@nyalldawson)

---

I can't reproduce (on ubuntu 16.04). Can you share a project?

---

• status_id was changed from Open to Feedback

[qgib]

Author Name: Johannes Kroeger (Johannes Kroeger)

---

No project needed, it seems not to rely on anything (tried with a clean state, no .qgis2, no .config/QGIS/QGIS2.conf). I also reproduced it on another Archlinux system, there I used c9d6269.

[qgib]

Author Name: Johannes Kroeger (Johannes Kroeger)

---

I just realised that above was not an actual gdb backtrace. Here is one from 2.16 built via https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=qgis

#_0  0x00007ffff43ca295 in raise () from /usr/lib/libc.so.6
#_1  0x00007ffff43cb6da in abort () from /usr/lib/libc.so.6
#_2  0x00007ffff4405d50 in __libc_message () from /usr/lib/libc.so.6
#_3  0x00007ffff440b546 in malloc_printerr () from /usr/lib/libc.so.6
#_4  0x00007ffff440bd1e in _int_free () from /usr/lib/libc.so.6
#_5  0x00007ffff61c207f in QgsSymbolV2::stopRender(QgsRenderContext&) () from /usr/lib/libqgis_core.so.2.16.0
#_6  0x00007ffff617af5a in QgsSingleSymbolRendererV2::stopRender(QgsRenderContext&) () from /usr/lib/libqgis_core.so.2.16.0
#_7  0x00007ffff650b30e in QgsVectorLayerRenderer::drawRendererV2(QgsFeatureIterator&) () from /usr/lib/libqgis_core.so.2.16.0
#_8  0x00007ffff650c8f5 in QgsVectorLayerRenderer::render() () from /usr/lib/libqgis_core.so.2.16.0
#_9  0x00007ffff63a4b37 in QgsMapRendererParallelJob::renderLayerStatic(LayerRenderJob&) () from /usr/lib/libqgis_core.so.2.16.0
#_10 0x00007ffff63a6156 in QtConcurrent::MapKernel<QList<LayerRenderJob>::iterator, QtConcurrent::FunctionWrapper1<void, LayerRenderJob&> >::runIterations(QList<LayerRenderJob>::iterator, int, int, void*)
    () from /usr/lib/libqgis_core.so.2.16.0
#_11 0x00007ffff63a64d8 in QtConcurrent::IterateKernel<QList<LayerRenderJob>::iterator, void>::threadFunction() () from /usr/lib/libqgis_core.so.2.16.0
#_12 0x00007ffff5a8b30d in QtConcurrent::ThreadEngineBase::run() () from /usr/lib/libQtCore.so.4
#_13 0x00007ffff5a8d3fa in ?? () from /usr/lib/libQtCore.so.4
#_14 0x00007ffff5a9a12c in ?? () from /usr/lib/libQtCore.so.4
#_15 0x00007fffeda4f484 in start_thread () from /usr/lib/libpthread.so.0
#_16 0x00007ffff447e6dd in clone () from /usr/lib/libc.so.6

[qgib]

Author Name: Giovanni Manghi (@gioman)

---

Hi Nyall,

here (Ubuntu 16.04) it crashes too.

---

• priority_id was changed from Normal to High
• crashes_corrupts_data was changed from 0 to 1
• status_id was changed from Feedback to Open
• category_id was configured as Projection Support

[qgib]

Author Name: Giovanni Manghi (@gioman)

---

• version was changed from master to 2.18.4
• fixed_version_id was configured as Version 2.18

[qgib]

Author Name: Giovanni Manghi (@gioman)

---

• easy_fix was configured as 0
• regression was configured as 0

[qgib]

Author Name: Nyall Dawson (@nyalldawson)

---

Applied in changeset fefa572.

---

• status_id was changed from Open to Closed
• done_ratio was changed from 0 to 100