Bug#1013247: telegram-desktop: Crashes on entering a chat if the window is too narrow (less wide than ca. 380 pixel) or resized to below ca. 380 pixel width while a chat is open

[Axel Beckert]

Package: telegram-desktop
Version: 3.7.3+ds-2+b1
Severity: important

Hi,

telegram-desktop crashes for me if I make its window smaller than some
specific window width or start it and it gets resized to such a width by
i3 (tiling window manager) and then open e.g. a group chat.

It basically happens once the speech bubbles don't become less wide than
the available space anymore. If I first make the window too small and
then enter the group chat, I only see the very last speech bubble before
it crashes (probably during trying to display the remaining speech
bubbles).

A window size of 381x572 was fine, and a window size of 378x572 or less
wide triggered the crash.

The crash output ends as follows:

DSvgRenderer::load: XML parse error: Input file is too short
/usr/include/c++/11/bits/stl_algo.h:3658: constexpr const _Tp& std::clamp(const _Tp&, const _Tp&, const _Tp&) [with _Tp = int]: Assertion '!(__hi < __lo)' failed.

[4] + 8736 IOT instruction (core dumped)

This is reproducible for me:

~crash/1000 → ls -ltr *telegram*
-rw------- 1 abe abe 2875678720 Jun 19 23:53 12097-1000-1000-6-1655675593-c6--usr-bin-telegram-desktop--deleted-.core
-rw------- 1 abe abe 628158464 Jun 19 23:53 1764-1000-1000-6-1655675638-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 538529792 Jun 19 23:54 2201-1000-1000-6-1655675651-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 538755072 Jun 19 23:54 2932-1000-1000-6-1655675678-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 538767360 Jun 19 23:56 4579-1000-1000-6-1655675773-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 537563136 Jun 20 00:08 8736-1000-1000-6-1655676533-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 535805952 Jun 20 00:19 10857-1000-1000-6-1655677151-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 545185792 Jun 20 00:19 12650-1000-1000-6-1655677178-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 523145216 Jun 20 00:34 15104-1000-1000-6-1655678091-c6--usr-bin-telegram-desktop.core
-rw------- 1 abe abe 537464832 Jun 20 00:35 19830-1000-1000-6-1655678103-c6--usr-bin-telegram-desktop.core

Backtraces available in private upon request. The one core dump
containing the word "deleted" was from before the BinNMU for the Qt
transistion. So I suspect that it is _NOT_ related to it. I just tried
this for the first time (in a long time) after that transition by
chance.

-- Package-specific info: