Segfault triggered from marker style panel

Summary:

A segfault can be triggered reliably from the marker style panel by entering a value and pressing tab.

Steps to reproduce:

  • Open Inkscape.
  • Draw a line (I used the pen tool).
  • Open the Stroke Style panel.
  • Add a marker to the line.
  • Type 0.1 in the Offset Y field.
  • Press tab (pressing enter does not cause a crash).

What happened?

Inkscape will crash immediately.

What should have happened?

No crash.

Version info

Arch Linux:

Inkscape 1.3.2 (091e20ef0f, 2023-11-25, custom)

CentOS 7 with latest AppImage:

Inkscape 1.3.2 (091e20e, 2023-11-25)

Crash log

 0# Inkscape::Application::crash_handler(int) in /usr/bin/../lib/inkscape/libinkscape_base.so.1.3.2.0
 1# 0x00007C2E94E5A770 in /usr/lib/libc.so.6
 2# 0x00007C2E9313F88A in /usr/bin/../lib/inkscape/../libgtk-3.so.0
 3# 0x00007C2E93146951 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
 4# Gtk::Widget_Class::grab_focus_callback(_GtkWidget*) in /usr/bin/../lib/inkscape/../libgtkmm-3.0.so.1
 5# 0x00007C2E949D4B73 in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
 6# g_signal_emit_valist in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
 7# g_signal_emit in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
 8# gtk_widget_grab_focus in /usr/bin/../lib/inkscape/../libgtk-3.so.0
 9# 0x00007C2E92F5EFA1 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
10# 0x00007C2E92E89155 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
11# 0x00007C2E949D4B73 in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
12# g_signal_emit_valist in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
13# g_signal_emit in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
14# 0x00007C2E92FA5997 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
15# g_cclosure_marshal_VOID__BOXEDv in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
16# 0x00007C2E949D4B73 in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
17# g_signal_emit_valist in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
18# g_signal_emit in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
19# 0x00007C2E92F9E277 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
20# 0x00007C2E92FA5492 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
21# 0x00007C2E92FA5E63 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
22# gtk_event_controller_handle_event in /usr/bin/../lib/inkscape/../libgtk-3.so.0
23# 0x00007C2E93145F57 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
24# Gtk::Widget::on_button_press_event(_GdkEventButton*) in /usr/bin/../lib/inkscape/../libgtkmm-3.0.so.1
25# Gtk::Widget_Class::button_press_event_callback(_GtkWidget*, _GdkEventButton*) in /usr/bin/../lib/inkscape/../libgtkmm-3.0.so.1
26# 0x00007C2E92E8C6CD in /usr/bin/../lib/inkscape/../libgtk-3.so.0
27# g_closure_invoke in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
28# 0x00007C2E949E40EA in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
29# 0x00007C2E949D4335 in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
30# g_signal_emit_valist in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
31# g_signal_emit in /usr/bin/../lib/inkscape/../libgobject-2.0.so.0
32# 0x00007C2E93154CD5 in /usr/bin/../lib/inkscape/../libgtk-3.so.0
33# 0x00007C2E92FEEC6B in /usr/bin/../lib/inkscape/../libgtk-3.so.0
34# gtk_main_do_event in /usr/bin/../lib/inkscape/../libgtk-3.so.0
35# 0x00007C2E93710B77 in /usr/bin/../lib/inkscape/../libgdk-3.so.0
36# 0x00007C2E93769438 in /usr/bin/../lib/inkscape/../libgdk-3.so.0
37# 0x00007C2E9550DF69 in /usr/lib/libglib-2.0.so.0
38# 0x00007C2E9556C3A7 in /usr/lib/libglib-2.0.so.0
39# g_main_context_iteration in /usr/lib/libglib-2.0.so.0
40# g_application_run in /usr/bin/../lib/inkscape/../libgio-2.0.so.0
41# main in inkscape
42# 0x00007C2E94E43CD0 in /usr/lib/libc.so.6
43# __libc_start_main in /usr/lib/libc.so.6
44# _start in inkscape
System info Inkscape 1.3.2 (091e20ef0f, 2023-11-25, custom)
GLib version:     2.78.4
GTK version:      3.24.41
glibmm version:   2.66.6
gtkmm version:    3.24.8
libxml2 version:  2.12.3
libxslt version:  1.1.39
Cairo version:    1.18.0
Pango version:    1.51.2
HarfBuzz version: 8.3.0

OS version:       Arch Linux