PDF images are blank

Bug #1714596 reported by Bryan Quigley
36
This bug affects 4 people
Affects Status Importance Assigned to Milestone
poppler (Ubuntu)
Fix Released
High
Unassigned

Bug Description

1. Download a PDFs with images such as -
http://www.dvrpc.org/Connections2045/pdf/2045_DRAFT_Plan_for_Public_Comment.pdf
http://www.hopkinsmedicine.org/human_resources/_docs/employee_handbook_non-union_non-represented.pdf
http://humanservices.arkansas.gov/dccece/classroom_docs/carseatsafety.pdf

2. Open in Evince, note how first page is blank

Open with Firefox and note how it displays a nice intro page.

Ubuntu 17.04 LiveCD works fine
Ubuntu 17.10 LiveCD does not

For Evince Zesty (3.24.0) vs Artful (3.24.1) which might be any easy thing to rule out. (I also tried the artful -proposed evince which has the issue too)
For Poppler Zesty (0.48.0) vs Artful (0.57.0) so my guess is bug is in poppler.

Given my testing in Fedora (C#2) which worked fine with same version of poppler and by downgrading the packages I believe this a Ubuntu specific poppler bug.

ProblemType: Bug
DistroRelease: Ubuntu 17.10
Package: evince 3.24.1-0ubuntu2
ProcVersionSignature: Ubuntu 4.12.0-12.13-generic 4.12.8
Uname: Linux 4.12.0-12-generic x86_64
NonfreeKernelModules: nvidia_uvm nvidia_drm nvidia_modeset nvidia
ApportVersion: 2.20.7-0ubuntu1
Architecture: amd64
CurrentDesktop: LXDE
Date: Fri Sep 1 17:22:35 2017
SourcePackage: evince
UpgradeStatus: Upgraded to artful on 2017-07-26 (37 days ago)

Revision history for this message
Bryan Quigley (bryanquigley) wrote :
Revision history for this message
Bryan Quigley (bryanquigley) wrote :

Hmm.. Looking either Ubuntu specific or not poppler/evince related.

Fedora rawhide (or 27) with poppler 0.57 and evince 3.25.91 displays the pictures fine.

Revision history for this message
Bryan Quigley (bryanquigley) wrote :
affects: evince (Ubuntu) → poppler (Ubuntu)
description: updated
Revision history for this message
Simon Quigley (tsimonq2) wrote :

It doesn't seem like Fedora Rawhide has any (new) patches modifying poppler at all: https://src.fedoraproject.org/rpms/poppler/tree/f27

There also doesn't seem to be any relevant patches in the Ubuntu packaging...

Otherwise, I can reproduce.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in poppler (Ubuntu):
status: New → Confirmed
Revision history for this message
Bryan Quigley (bryanquigley) wrote :

Rebuilding with openjpeg enabled fixed it - which is similar to this bug- https://bugs.launchpad.net/ubuntu/+source/poppler/+bug/710412.

I don't understand why this is a regression if it was already disabled...

Revision history for this message
Bryan Quigley (bryanquigley) wrote :

Looks like enabling openjpeg2 would need an old MIR approved first. Got many negative security reviews in the past.
https://bugs.launchpad.net/ubuntu/+source/openjpeg2/+bug/711061

description: updated
Revision history for this message
Sebastien Bacher (seb128) wrote :

> I don't understand why this is a regression if it was already disabled...

when not using openjpeg poppler has its own parser, maybe there is a bug in that code, would be worth upstreaming in any case

Revision history for this message
Bryan Quigley (bryanquigley) wrote :

The internal openjpeg parser has been disabled by default and can be re-enabled by passing --enable-libopenjpeg=unmaintained - I tested this and it fixes this bug.

It is not only unmaintained and not recommended to use but they mention having known security issues with the code (and perhaps no plans to fix*). https://lists.freedesktop.org/archives/poppler/2017-May/012229.html

Adding security team as I'd definitely want their opinion before moving forward.

*It appears at least one likely related CVE was fixed by security team - "fix NULL pointer dereference in JPXStream::readUByte" but not upstreamed.

Revision history for this message
Seth Arnold (seth-arnold) wrote :

Even Rouault has been checking in a huge number of fixes for upstream openjpeg, and he's been remarkably responsive to Agostino Sarubbo's fuzzing efforts. I suspect the next time I review the openjpeg codebase I'll find something far more sustainable than the last time around.

Thanks

Revision history for this message
Nick Moffitt (nick-moffitt) wrote :

This bug makes the PDF viewer all but useless in artful. Can we hope to see a bug fix before release?

Revision history for this message
Leonidas S. Barbosa (leosilvab) wrote :

I don't think poppler is the issue here, I've tested this in artful with: evince 3.24.1-ubuntu2 and libpoppler68 0.57.0-2ubuntu2 and couldn't reproduce this issue. https://imgur.com/a/YyDZD

Revision history for this message
Sebastien Bacher (seb128) wrote :

Right, let's upload a build with --enable-libopenjpeg=unmaintained for this cycle and try to get the external library promoted next cycle

Changed in poppler (Ubuntu):
importance: Undecided → High
status: Confirmed → In Progress
Revision history for this message
Leonidas S. Barbosa (leosilvab) wrote :

Ok, I could reproduce seems that it has some regression in libpoppler-glib8. If you downgrade only this .deb for (https://launchpad.net/~ubuntu-security/+archive/ubuntu/ppa/+build/13046914/+files/libpoppler-glib8_0.48.0-2ubuntu2.1_amd64.deb) things will works fine.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package poppler - 0.57.0-2ubuntu3

---------------
poppler (0.57.0-2ubuntu3) artful; urgency=medium

  * debian/rules:
    - build with --enable-libopenjpeg=unmaintained which makes the poppler
      openjpeg parser used as it was in Ubuntu until now. Upstream doesn't
      recommend that but the libopenjpeg MIR has still not been approved and
      without a parser some documents are rendered as blank. (lp: #1714596)

 -- Sebastien Bacher <email address hidden> Mon, 09 Oct 2017 19:31:17 +0200

Changed in poppler (Ubuntu):
status: In Progress → Fix Released
Mathew Hodson (mhodson)
tags: added: regression-release
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.