Ubuntu
pidgin package

adding an avatar makes pidgin crash

Bug #371898 reported by Fernando Miguel on 2009-05-04

This bug affects 2 people

Affects		Status	Importance	Assigned to	Milestone
	Pidgin	Fix Released	Unknown	pidgin-bugs #9120
	pidgin (Ubuntu)	Fix Released	Medium	Unassigned

Bug Description

Binary package hint: pidgin

adding a .png avatar makes pidgin crash

$ apt-cache policy pidgin
pidgin:
  Installed: 1:2.5.5-1ubuntu8
  Candidate: 1:2.5.5-1ubuntu8
  Version table:
*** 1:2.5.5-1ubuntu8 0
        500 ftp://darkstar.ist.utl.pt karmic/main Packages
        500 ftp://archive.ubuntu.com karmic/main Packages
        100 /var/lib/dpkg/status

$ gdb --args pidgin -n -m
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
(gdb) handle SIGPIPE nostop noprint
Signal Stop Print Pass to program Description
SIGPIPE No No Yes Broken pipe
(gdb) r
Starting program: /usr/bin/pidgin -n -m
[Thread debugging using libthread_db enabled]
[New Thread 0x7f0f959667d0 (LWP 23943)]
warning: Lowest section in /usr/lib/libicudata.so.38 is .hash at 0000000000000158
[New Thread 0x7f0f7f8f9950 (LWP 23968)]
[New Thread 0x7f0f74e33950 (LWP 23985)]
[Thread 0x7f0f74e33950 (LWP 23985) exited]
[New Thread 0x7f0f74e33950 (LWP 24025)]
[New Thread 0x7f0f6bbfe950 (LWP 24036)]
[New Thread 0x7f0f6b3fd950 (LWP 24037)]
[Thread 0x7f0f6bbfe950 (LWP 24036) exited]
[Thread 0x7f0f6b3fd950 (LWP 24037) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f0f959667d0 (LWP 23943)]
0x00007f0f92272639 in ?? () from /lib/libc.so.6
(gdb) bt full
#0 0x00007f0f92272639 in ?? () from /lib/libc.so.6
No symbol table info available.
#1 0x00007f0f92274901 in ?? () from /lib/libc.so.6
No symbol table info available.
#2 0x00007f0f9227654f in calloc () from /lib/libc.so.6
No symbol table info available.
#3 0x00007f0f92ac80b8 in g_malloc0 () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f0f9346b8ae in ?? () from /usr/lib/libgdk_pixbuf-2.0.so.0
No symbol table info available.
#5 0x00007f0f92d78d07 in g_type_create_instance () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#6 0x00007f0f92d5d61c in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#7 0x00007f0f92d5e639 in g_object_newv () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#8 0x00007f0f92d5f195 in g_object_new_valist () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#9 0x00007f0f92d5f2ec in g_object_new () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#10 0x00000000004a048a in pidgin_status_box_redisplay_buddy_icon (status_box=0x19c6240) at ../../pidgin/gtkstatusbox.c:2260
loader = <value optimized out>
#11 0x00000000004a2bcc in buddy_icon_set_cb (filename=0x73a03c0 "/home/bugabundo/signatures/eyetumb64.png", box=0x19c6240)
    at ../../pidgin/gtkstatusbox.c:1536
img = (PurpleStoredImage *) 0x733cc30
#12 0x00000000004a2d18 in icon_choose_cb (filename=0x7f0f92567a00 "\001", data=0x438) at ../../pidgin/gtkstatusbox.c:1561
box = (PidginStatusBox *) 0x438
#13 0x00000000004a78c2 in icon_filesel_choose_cb (widget=<value optimized out>, response=<value optimized out>,
    dialog=0x5af4cb0) at ../../pidgin/gtkutils.c:2375
filename = 0x73a03c0 "/home/bugabundo/signatures/eyetumb64.png"
current_folder = <value optimized out>
---Type <return> to continue, or q <return> to quit---
#14 0x00007f0f92d5834e in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#15 0x00007f0f92d6da95 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#16 0x00007f0f92d6eeaf in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#17 0x00007f0f92d6f403 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#18 0x00007f0f92d5834e in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#19 0x00007f0f92d6da95 in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#20 0x00007f0f92d6eeaf in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#21 0x00007f0f92d6f403 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#22 0x00007f0f93bcf72e in ?? () from /usr/lib/libgtk-x11-2.0.so.0
No symbol table info available.
#23 0x00007f0f938ba04b in ?? () from /usr/lib/libgdk-x11-2.0.so.0
No symbol table info available.
#24 0x00007f0f92abff7b in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#25 0x00007f0f92abf82e in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#26 0x00007f0f92ac2f88 in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#27 0x00007f0f92ac3425 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#28 0x00007f0f93c73bc7 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
No symbol table info available.
#29 0x000000000047dc83 in main (argc=3, argv=0x7fff9d9a6d28) at ../../pidgin/gtkmain.c:880
---Type <return> to continue, or q <return> to quit---
opt_help = <value optimized out>
opt_login = 0
opt_nologin = 1
opt_version = <value optimized out>
opt_si = 0
opt_config_dir_arg = 0x0
opt_login_arg = 0x0
opt_session_arg = 0x0
accounts = <value optimized out>
sigset = {__val = {81927, 0 <repeats 15 times>}}
prev_sig_disp = (void (*)(int)) 0x31
errmsg = "\001\000\000\000\017\177\000\000\000ï¿½\226\225\017\177\000\000ï¿½K\232\235ï¿½\177\000\000\000\000\000\000\000\000\000\000ï¿½Sz\222\017\177\000\0007?y\225\017\177\000\000\000ï¿½\226\225\017\177\000\000ï¿½D\232\225\017\177\000\000ï¿½ï¿½\227\225\017\177\000\000ï¿½\204\227\225\017\177\000\000\000ï¿½\227\225\017\177\000\000\000p\227\225\017\177\000\000\000\220\227\225\017\177\000\000ï¿½\211\227\225\017\177\000\000\000ï¿½\227\225\017\177\000\000ï¿½ï¿½\226\225\017\177\000\000ï¿½ï¿½\226\225\017\177\000\000ï¿½\231\227\225\017\177\000\000\000\200\227\225\017\177\000\000\000\000\000\000\000\000\000\000p\215ï¿½\222\017\177\000\000\001\000\000\000\000\000\000\000\000\220\227\225\017\177\000\000\000\000ï¿½\2304;ï¿½ï¿½\000\000Vï¿½ï¿½*\037ï¿½"...
error = (GError *) 0x0
opt = <value optimized out>
gui_check = <value optimized out>
debug_enabled = <value optimized out>
migration_failed = <value optimized out>
active_accounts = <value optimized out>
long_options = {{name = 0x4c1ae2 "config", has_arg = 1, flag = 0x0, val = 99}, {name = 0x4aef36 "debug",
    has_arg = 0, flag = 0x0, val = 100}, {name = 0x4b2de5 "help", has_arg = 0, flag = 0x0, val = 104}, {
    name = 0x4af201 "login", has_arg = 2, flag = 0x0, val = 108}, {name = 0x4bda28 "multiple", has_arg = 0, flag = 0x0,
    val = 109}, {name = 0x4bda31 "nologin", has_arg = 0, flag = 0x0, val = 110}, {name = 0x4bda39 "nocrash", has_arg = 0,
    flag = 0x0, val = 120}, {name = 0x4c1ad8 "session", has_arg = 1, flag = 0x0, val = 115}, {name = 0x4b4c4f "version",
    has_arg = 0, flag = 0x0, val = 118}, {name = 0x4c1aeb "display", has_arg = 1, flag = 0x0, val = 68}, {
    name = 0x4bda41 "sync", has_arg = 0, flag = 0x0, val = 83}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
(gdb) q

ProblemType: Bug
Architecture: amd64
Date: Mon May 4 22:07:47 2009
DistroRelease: Ubuntu 9.10
Package: pidgin 1:2.5.5-1ubuntu8
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, user)
LANG=en_US.UTF-8
SourcePackage: pidgin
Uname: Linux 2.6.30-2-generic x86_64

Tags:

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-04:

Dependencies.txt Edit (3.9 KiB, text/plain; charset="utf-8")

Fernando Miguel (fernandomiguel) on 2009-05-04

summary:

- adding a .png avatar makes pidgin crash
+ adding an avatar makes pidgin crash

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-04:

i removed microblog-purple (http://code.google.com/p/microblog-purple/) plugin and disabled account and got a new crash

(gdb) r
Starting program: /usr/bin/pidgin -n -m -c /tmp/p/
[Thread debugging using libthread_db enabled]
[New Thread 0x7feeb77667d0 (LWP 14047)]
warning: Lowest section in /usr/lib/libicudata.so.38 is .hash at 0000000000000158
[New Thread 0x7feea16f9950 (LWP 14064)]
[New Thread 0x7fee96c33950 (LWP 14084)]
[Thread 0x7fee96c33950 (LWP 14084) exited]
[New Thread 0x7fee96c33950 (LWP 14283)]
[New Thread 0x7fee8e6f2950 (LWP 14284)]
[Thread 0x7fee96c33950 (LWP 14283) exited]
[Thread 0x7fee8e6f2950 (LWP 14284) exited]
[New Thread 0x7fee8e6f2950 (LWP 14375)]
[New Thread 0x7fee96c33950 (LWP 14376)]
[Thread 0x7fee8e6f2950 (LWP 14375) exited]
[Thread 0x7fee96c33950 (LWP 14376) exited]
[New Thread 0x7fee96c33950 (LWP 14395)]
[New Thread 0x7fee8e6f2950 (LWP 14396)]
[Thread 0x7fee8e6f2950 (LWP 14396) exited]
[New Thread 0x7fee8e6f2950 (LWP 14410)]
[New Thread 0x7fee91a23950 (LWP 14411)]
[Thread 0x7fee8e6f2950 (LWP 14410) exited]
[Thread 0x7fee91a23950 (LWP 14411) exited]
[New Thread 0x7fee91a23950 (LWP 14434)]
[New Thread 0x7fee8e6f2950 (LWP 14435)]
[Thread 0x7fee91a23950 (LWP 14434) exited]
[Thread 0x7fee8e6f2950 (LWP 14435) exited]
[New Thread 0x7fee8e6f2950 (LWP 14452)]
[New Thread 0x7fee91a23950 (LWP 14453)]
[Thread 0x7fee8e6f2950 (LWP 14452) exited]
[Thread 0x7fee91a23950 (LWP 14453) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7feeb77667d0 (LWP 14047)]
0x00007feeb4072639 in ?? () from /lib/libc.so.6

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-04:

bug is actually in pidgin-plugin-pack on MyStatusBox

affects:

pidgin (Ubuntu) → purple-plugin-pack (Ubuntu)

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-04:

According to #pidgin this package is 4 months old. both Ubuntu and Debian need to be upgraded to 2.3

$ apt-cache policy pidgin-plugin-pack
pidgin-plugin-pack:
  Installed: 2.2.0-1
  Candidate: 2.2.0-1
  Version table:
*** 2.2.0-1 0
        500 ftp://darkstar.ist.utl.pt karmic/universe Packages
        500 ftp://archive.ubuntu.com karmic/universe Packages
        100 /var/lib/dpkg/status

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-04:

Download full text (16.5 KiB)

$ gdb --args pidgin -n -m -c /tmp/14
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) r
Starting program: /usr/bin/pidgin -n -m -c /tmp/14
[Thread debugging using libthread_db enabled]
[New Thread 0x7f84576e37d0 (LWP 11155)]
warning: Lowest section in /usr/lib/libicudata.so.38 is .hash at 0000000000000158
[New Thread 0x7f8441676950 (LWP 11192)]
[New Thread 0x7f84335cf950 (LWP 11228)]
[New Thread 0x7f8432dce950 (LWP 11229)]
[Thread 0x7f8432dce950 (LWP 11229) exited]
[New Thread 0x7f8432dce950 (LWP 11279)]
[New Thread 0x7f8431239950 (LWP 11280)]
[Thread 0x7f8432dce950 (LWP 11279) exited]
[Thread 0x7f8431239950 (LWP 11280) exited]
[New Thread 0x7f8431239950 (LWP 11302)]
[Thread 0x7f84335cf950 (LWP 11228) exited]

$ gdb --args pidgin -n -m -c /tmp/14
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu"...
(gdb) r
Starting program: /usr/bin/pidgin -n -m -c /tmp/14
[Thread debugging using libthread_db enabled]
[New Thread 0x7f84576e37d0 (LWP 11155)]
warning: Lowest section in /usr/lib/libicudata.so.38 is .hash at 0000000000000158
[New Thread 0x7f8441676950 (LWP 11192)]
[New Thread 0x7f84335cf950 (LWP 11228)]
[New Thread 0x7f8432dce950 (LWP 11229)]
[Thread 0x7f8432dce950 (LWP 11229) exited]
[New Thread 0x7f8432dce950 (LWP 11279)]
[New Thread 0x7f8431239950 (LWP 11280)]
[Thread 0x7f8432dce950 (LWP 11279) exited]
[Thread 0x7f8431239950 (LWP 11280) exited]
[New Thread 0x7f8431239950 (LWP 11302)]
[Thread 0x7f84335cf950 (LWP 11228) exited]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f84576e37d0 (LWP 11155)]
malloc_consolidate (av=0x7f84542e4a00) at malloc.c:4889
4889	malloc.c: No such file or directory.
	in malloc.c
(gdb) bt full
#0  malloc_consolidate (av=0x7f84542e4a00) at malloc.c:4889
	fb = (mfastbinptr *) 0x7f84542e4a28
	maxfb = (mfastbinptr *) 0x7f84542e4a58
	p = (mchunkptr) 0x100000000
	nextp = (mchunkptr) 0x100000000
	unsorted_bin = (mchunkptr) 0x7f84542e4a60
	first_unsorted = (mchunkptr) 0x371b0c0
	nextchunk = (mchunkptr) 0x370ae40
	size = 48
	nextsize = <value optimized out>
	prevsize = <value optimized out>
	bck = <value optimized out>
	fwd = (mchunkptr) 0x371b0c0
#1  0x00007f8453ff1901 in _int_malloc (av=0x7f84542e4a00, bytes=1080) at malloc.c:4229
	nb = 1088
	idx = 65
	bin = (mbinptr) 0x0
	victim = (mchunkptr) 0x7f84542e4a00
	size = <value optimized out>
	victim_index = <value optimized out>
	remainder = <value optimized out>
	remainder_size = <value optimized out>
	block = <value optimized out>
	bit = <value optimized out>
	map = <value optimized out>
	fwd = <value optimized out>
	bck = <value optimized out>
#2  0x00007f8453ff354f in __libc_calloc (n=<value optimized out>, elem_size=<value optimized out>) at malloc.c:3946
	av = (mstate) 0x7f84542e4a00
	oldtop = (mchunkptr) 0x378da80
	p = <value optimized out>
	bytes = 1080
	csz = <value optimized out>
	oldtopsize = 132480
	mem = (void *) 0x37368c0
	clearsize = <value optimized out>
	nclears = <value optimized out>
	hook = (void *(*)(size_t, const void *)) 0
#3  0x00007f84548450b8 in IA__g_malloc0 (n_bytes=1080) at /build/buildd/glib2.0-2.20.1/glib/gmem.c:151
	mem = (gpointer) 0x31
#4  0x00007f84551e88ae in gdk_pixbuf_loader_init (loader=0x37368c0) at /build/buildd/gtk+2.0-2.16.1/gdk-pixbuf/gdk-pixbuf-loader.c:173
No locals.
#5  0x00007f8454af5d07 in IA__g_type_create_instance (type=<value optimized out>) at /build/buildd/glib2.0-2.20.1/gobject/gtype.c:1674
	node = (TypeNode *) 0x2741b60
	instance = (GTypeInstance *) 0x37368c0
	class = (GTypeClass *) 0x2741100
	i = 0
---Type <return> to continue, or q <return> to quit---
#6  0x00007f8454ada61c in g_object_constructor (type=140206324730368, n_construct_properties=1080, construct_params=0x371b0c0)
    at /build/buildd/glib2.0-2.20.1/gobject/gobject.c:1338
	object = (GObject *) 0x22f9fc8
#7  0x00007f8454adb639 in IA__g_object_newv (object_type=<value optimized out>, n_parameters=0, parameters=<value optimized out>)
    at /build/buildd/glib2.0-2.20.1/gobject/gobject.c:1215
	nqueue = <value optimized out>
	object = <value optimized out>
	class = (GObjectClass *) 0x2741100
	unref_class = (GObjectClass *) 0x0
	slist = <value optimized out>
	n_total_cparams = 0
	n_cparams = 0
	n_oparams = <value optimized out>
	n_cvalues = <value optimized out>
	clist = (GList *) 0x0
	newly_constructed = <value optimized out>
	i = 0
	__PRETTY_FUNCTION__ = "IA__g_object_newv"
#8  0x00007f8454adc195 in IA__g_object_new_valist (object_type=41163616, first_property_name=0x0, var_args=0x7fff5f720600) at /build/buildd/glib2.0-2.20.1/gobject/gobject.c:1278
	params = <value optimized out>
	name = <value optimized out>
	object = <value optimized out>
	n_params = <value optimized out>
	n_alloced_params = 0
	__PRETTY_FUNCTION__ = "IA__g_object_new_valist"
#9  0x00007f8454adc2ec in IA__g_object_new (object_type=41163616, first_property_name=0x0) at /build/buildd/glib2.0-2.20.1/gobject/gobject.c:1060
	var_args = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff5f7206f0, reg_save_area = 0x7fff5f720620}}
	__PRETTY_FUNCTION__ = "IA__g_object_new"
#10 0x00000000004a048a in pidgin_status_box_redisplay_buddy_icon (status_box=0x249a250) at ../../pidgin/gtkstatusbox.c:2260
	loader = <value optimized out>
#11 0x00000000004a2bcc in buddy_icon_set_cb (filename=0x36d2100 "/home/bugabundo/signatures/eyetumb64.png", box=0x249a250) at ../../pidgin/gtkstatusbox.c:1536
	img = (PurpleStoredImage *) 0x370ae20
#12 0x00007f8454571f43 in ?? () from /usr/lib/libpurple.so.0
No symbol table info available.
#13 0x00000000004a2d35 in icon_choose_cb (filename=<value optimized out>, data=<value optimized out>) at ../../pidgin/gtkstatusbox.c:1559
	box = (PidginStatusBox *) 0x249a010
#14 0x00000000004a78c2 in icon_filesel_choose_cb (widget=<value optimized out>, response=<value optimized out>, dialog=0x23a4160) at ../../pidgin/gtkutils.c:2375
	filename = 0x23b04f0 "/home/bugabundo/signatures/eyetumb64.png"
	current_folder = <value optimized out>
#15 0x00007f8454ad534e in IA__g_closure_invoke (closure=0x3665780, return_value=0x0, n_param_values=2, param_values=0x371b990, invocation_hint=0x7fff5f720920)
    at /build/buildd/glib2.0-2.20.1/gobject/gclosure.c:767
	marshal = (GClosureMarshal) 0x31
	marshal_data = (gpointer) 0x100000000
	__PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#16 0x00007f8454aeaa95 in signal_emit_unlocked_R (node=0x22df8c0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:3247
	tmp = (Handler *) 0x7f84542f35b0
---Type <return> to continue, or q <return> to quit---
	handler = (Handler *) 0x275c210
	accumulator = (SignalAccumulator *) 0x0
	emission = {next = 0x7fff5f720d10, instance = 0x36690a0, ihint = {signal_id = 86, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
	class_closure = (GClosure *) 0x22df810
	handler_list = (Handler *) 0x3667010
	return_accu = <value optimized out>
	accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
      v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
	signal_id = 86
	max_sequential_handler_number = <value optimized out>
	return_value_altered = 1
#17 0x00007f8454aebeaf in IA__g_signal_emit_valist (instance=0x36690a0, signal_id=<value optimized out>, detail=0, var_args=0x7fff5f720b10)
    at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:2980
	signal_return_type = 4
	param_values = <value optimized out>
	node = (SignalNode *) 0x22df8c0
	i = <value optimized out>
	n_params = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#18 0x00007f8454aec403 in IA__g_signal_emit (instance=0x7f84542e4a00, signal_id=1080, detail=57782464) at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:3037
	var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff5f720bf0, reg_save_area = 0x7fff5f720b30}}
#19 0x00007f8454ad534e in IA__g_closure_invoke (closure=0x3684ea0, return_value=0x0, n_param_values=1, param_values=0x3773c40, invocation_hint=0x7fff5f720d20)
    at /build/buildd/glib2.0-2.20.1/gobject/gclosure.c:767
	marshal = (GClosureMarshal) 0x31
	marshal_data = (gpointer) 0x100000000
	__PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#20 0x00007f8454aeaa95 in signal_emit_unlocked_R (node=0x22e0f80, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:3247
	tmp = (Handler *) 0x7f84542f35b0
	handler = (Handler *) 0x275c060
	accumulator = (SignalAccumulator *) 0x0
	emission = {next = 0x7fff5f721150, instance = 0x36b0190, ihint = {signal_id = 98, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
	class_closure = (GClosure *) 0x22e0e80
	handler_list = (Handler *) 0x275c060
	return_accu = <value optimized out>
	accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
      v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
	signal_id = 98
	max_sequential_handler_number = <value optimized out>
	return_value_altered = 1
#21 0x00007f8454aebeaf in IA__g_signal_emit_valist (instance=0x36b0190, signal_id=<value optimized out>, detail=0, var_args=0x7fff5f720f10)
    at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:2980
	signal_return_type = 4
	param_values = <value optimized out>
	node = (SignalNode *) 0x22e0f80
	i = <value optimized out>
	n_params = <value optimized out>
---Type <return> to continue, or q <return> to quit---
	__PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#22 0x00007f8454aec403 in IA__g_signal_emit (instance=0x7f84542e4a00, signal_id=1080, detail=57782464) at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:3037
	var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff5f720ff0, reg_save_area = 0x7fff5f720f30}}
#23 0x00007f845594c77a in gtk_button_key_release (widget=0x7f84542e4a00, event=<value optimized out>) at /build/buildd/gtk+2.0-2.16.1/gtk/gtkbutton.c:1631
No locals.
#24 0x00007f84559f6df8 in _gtk_marshal_BOOLEAN__BOXED (closure=0x22d6680, return_value=0x7fff5f7211a0, n_param_values=<value optimized out>, param_values=0x7f842c022c10, 
    invocation_hint=<value optimized out>, marshal_data=0x7f845594c740) at /build/buildd/gtk+2.0-2.16.1/gtk/gtkmarshalers.c:84
	data1 = (gpointer) 0x36b0190
	data2 = (gpointer) 0x371b0c0
	v_return = <value optimized out>
	__PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
#25 0x00007f8454ad534e in IA__g_closure_invoke (closure=0x22d6680, return_value=0x7fff5f7211a0, n_param_values=2, param_values=0x7f842c022c10, invocation_hint=0x7fff5f721160)
    at /build/buildd/glib2.0-2.20.1/gobject/gclosure.c:767
	marshal = (GClosureMarshal) 0x31
	marshal_data = (gpointer) 0x100000000
	__PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#26 0x00007f8454aea765 in signal_emit_unlocked_R (node=0x22d66f0, detail=<value optimized out>, instance=<value optimized out>, emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:3285
	accumulator = (SignalAccumulator *) 0x0
	emission = {next = 0x0, instance = 0x36b0190, ihint = {signal_id = 40, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 36516752}
	class_closure = (GClosure *) 0x22d6680
	handler_list = (Handler *) 0x0
	return_accu = <value optimized out>
	accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
      v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
	signal_id = 40
	max_sequential_handler_number = 0
	return_value_altered = 0
#27 0x00007f8454aebd3c in IA__g_signal_emit_valist (instance=0x36b0190, signal_id=<value optimized out>, detail=0, var_args=0x7fff5f721350)
    at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:2990
	return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, 
      v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
	error = <value optimized out>
	signal_return_type = 20
	param_values = <value optimized out>
	node = (SignalNode *) 0x22d66f0
	i = <value optimized out>
	n_params = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#28 0x00007f8454aec403 in IA__g_signal_emit (instance=0x7f84542e4a00, signal_id=1080, detail=57782464) at /build/buildd/glib2.0-2.20.1/gobject/gsignal.c:3037
	var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff5f721430, reg_save_area = 0x7fff5f721370}}
#29 0x00007f8455aff09e in gtk_widget_event_internal (widget=0x36b0190, event=0x36fe8e0) at /build/buildd/gtk+2.0-2.16.1/gtk/gtkwidget.c:4761
	signal_num = <value optimized out>
	return_val = 0
#30 0x00007f84559ef742 in IA__gtk_propagate_event (widget=0x36b0190, event=0x36fe8e0) at /build/buildd/gtk+2.0-2.16.1/gtk/gtkmain.c:2362
	window = (GtkWidget *) 0x36690a0
	handled_event = <value optimized out>
---Type <return> to continue, or q <return> to quit---
	__PRETTY_FUNCTION__ = "IA__gtk_propagate_event"
#31 0x00007f84559f07b3 in IA__gtk_main_do_event (event=0x36fe8e0) at /build/buildd/gtk+2.0-2.16.1/gtk/gtkmain.c:1601
	event_widget = (GtkWidget *) 0x36690a0
	grab_widget = (GtkWidget *) 0x36b0190
	window_group = (GtkWindowGroup *) 0x0
	rewritten_event = (GdkEvent *) 0x0
	tmp_list = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__gtk_main_do_event"
#32 0x00007f8455669f3c in gdk_event_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>)
    at /build/buildd/gtk+2.0-2.16.1/gdk/x11/gdkevents-x11.c:2364
	display = <value optimized out>
	event = <value optimized out>
#33 0x00007f845483c82e in IA__g_main_context_dispatch (context=0x22b83e0) at /build/buildd/glib2.0-2.20.1/glib/gmain.c:1814
No locals.
#34 0x00007f845483ff88 in g_main_context_iterate (context=0x22b83e0, block=<value optimized out>, dispatch=<value optimized out>, self=<value optimized out>)
    at /build/buildd/glib2.0-2.20.1/glib/gmain.c:2448
	max_priority = 2147483647
	timeout = 240
	some_ready = 1
	nfds = 9
	allocated_nfds = 1420584776
	fds = <value optimized out>
	__PRETTY_FUNCTION__ = "g_main_context_iterate"
#35 0x00007f8454840425 in IA__g_main_loop_run (loop=0x30c6050) at /build/buildd/glib2.0-2.20.1/glib/gmain.c:2656
	self = (GThread *) 0x227b4d0
	__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#36 0x00007f84559f0bc7 in IA__gtk_main () at /build/buildd/gtk+2.0-2.16.1/gtk/gtkmain.c:1205
	tmp_list = (GList *) 0x0
	functions = (GList *) 0x0
	init = (GtkInitFunction *) 0x22a2950
	loop = <value optimized out>
#37 0x000000000047dc83 in main (argc=5, argv=0x7fff5f723a88) at ../../pidgin/gtkmain.c:880
	opt_help = <value optimized out>
	opt_login = 0
	opt_nologin = 1
	opt_version = <value optimized out>
	opt_si = 0
	opt_config_dir_arg = 0x22884a0 "pidgin"
	opt_login_arg = 0x0
	opt_session_arg = 0x0
	accounts = <value optimized out>
	sigset = {__val = {81927, 0 <repeats 15 times>}}
	prev_sig_disp = (void (*)(int)) 0x31
	errmsg = "\001\000\000\000\204\177\000\000\000ï¿½nW\204\177\000\000@\031r_ï¿½\177\000\000\000\000\000\000\000\000\000\000ï¿½#RT\204\177\000\0007\017QW\204\177\000\000\000ï¿½nW\204\177\000\000ï¿½\024rW\204\177\000\000ï¿½yoW\204\177\000\000ï¿½ToW\204\177\000\000\000ï¿½oW\204\177\000\000\000@oW\204\177\000\000\000`oW\204\177\000\000ï¿½YoW\204\177\000\000\000poW\204\177\000\000ï¿½ï¿½nW\204\177\000\000ï¿½ï¿½nW\204\177\000\000ï¿½ioW\204\177\000\000\000PoW\204\177\000\000\000\000\000\000\000\000\000\000p]ï¿½T\204\177\000\000\001\000\000\000\000\000\000\000\000`oW\204\177\000\000\000\000`3ï¿½ï¿½ï¿½ï¿½\000\000VQï¿½ï¿½\bï¿½"...
---Type <return> to continue, or q <return> to quit---
	error = (GError *) 0x0
	opt = <value optimized out>
	gui_check = <value optimized out>
	debug_enabled = <value optimized out>
	migration_failed = <value optimized out>
	active_accounts = <value optimized out>
	long_options = {{name = 0x4c1ae2 "config", has_arg = 1, flag = 0x0, val = 99}, {name = 0x4aef36 "debug", has_arg = 0, flag = 0x0, val = 100}, {name = 0x4b2de5 "help", 
    has_arg = 0, flag = 0x0, val = 104}, {name = 0x4af201 "login", has_arg = 2, flag = 0x0, val = 108}, {name = 0x4bda28 "multiple", has_arg = 0, flag = 0x0, val = 109}, {
    name = 0x4bda31 "nologin", has_arg = 0, flag = 0x0, val = 110}, {name = 0x4bda39 "nocrash", has_arg = 0, flag = 0x0, val = 120}, {name = 0x4c1ad8 "session", has_arg = 1, 
    flag = 0x0, val = 115}, {name = 0x4b4c4f "version", has_arg = 0, flag = 0x0, val = 118}, {name = 0x4c1aeb "display", has_arg = 1, flag = 0x0, val = 68}, {
    name = 0x4bda41 "sync", has_arg = 0, flag = 0x0, val = 83}, {name = 0x0, has_arg = 0, flag = 0x0, val = 0}}
(gdb)

$ export MALLOC_CHECK_=2 and $ export MALLOC_PERTURB_=254 seems to prevent it from crashing.

Revision history for this message

darkrain42 (darkrain42) wrote on 2009-05-04:

The last line in Pidgin (the mystatusbox plugin uses code existing in Pidgin) at
#10 0x00000000004a048a in pidgin_status_box_redisplay_buddy_icon (status_box=0x2592b50) at ../../pidgin/gtkstatusbox.c:2260
is
GdkPixbufLoader *loader = gdk_pixbuf_loader_new();

So I don't believe this is a crash in Pidgin, but instead is something else.

It didn't crash for BUGabundo when he set MALLOC_CHECK_=2 and MALLOC_PERTURB_=254. Any chance this is the fatal assertions in development versions of gtk/gdk/glib?

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-04:

$ apt-cache policy libgtk2.0-0
libgtk2.0-0:
  Installed: 2.16.1-0ubuntu2
  Candidate: 2.16.1-0ubuntu2
  Version table:
*** 2.16.1-0ubuntu2 0
        500 ftp://darkstar.ist.utl.pt karmic/main Packages
        500 ftp://archive.ubuntu.com karmic/main Packages
        100 /var/lib/dpkg/status

affects:

purple-plugin-pack (Ubuntu) → gtk+2.0 (Ubuntu)

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-05:

valgring1.txt Edit (79.9 KiB, text/plain)

Revision history for this message

Martin Erik Werner (arand) wrote on 2009-05-05: Re: [Bug #371898] adding an avatar makes pidgin crash

gdb_pidgin_9.04.txt Edit (7.3 KiB, text/plain; name="gdb_pidgin_9.04.txt")
libgtk2_policy.txt Edit (202 bytes, text/plain; name="libgtk2_policy.txt")

Ran through test case on 9.04:
[QUTOE]create a NEW profile, added a single XMPP account, enabled
MyStatusBox, changed avatar, got a crash.[/QUOTE]
Crash/lockup manifests when pressing "open" button in browser, when
adding avatar.

Attaching backtrace and gtk-policy.

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-05:

#10

valgrind6970.log Edit (507.8 KiB, text/plain)

since running valgrind on gdb might not be a great idea
$ valgrindB pidgin -n -m -c /tmp/12

Revision history for this message

Sebastien Bacher (seb128) wrote on 2009-05-05:

#11

That's not because something has a gtk function in its stacktrace that the bug is a gtk one, open bugs on the crashing software when you are not sure

affects:	gtk+2.0 (Ubuntu) → pidgin (Ubuntu)
Changed in pidgin (Ubuntu):
importance:	Undecided → Medium

Revision history for this message

Sebastien Bacher (seb128) wrote on 2009-05-05:

#12

The valgrind log has an error in libpurple code

==6970== Invalid read of size 1
==6970== at 0x7B8DF09: purple_imgstore_ref (in /usr/lib/libpurple.so.0.5.5)
==6970== by 0x4A0743: pidgin_status_box_set_buddy_icon (gtkstatusbox.c:2295)
==6970== by 0x4A2BCB: buddy_icon_set_cb (gtkstatusbox.c:1536)
==6970== by 0x7B9AF42: (within /usr/lib/libpurple.so.0.5.5)
==6970== by 0x4A2D34: icon_choose_cb (gtkstatusbox.c:1559)
==6970== by 0x4A78C1: icon_filesel_choose_cb (gtkutils.c:2375)
==6970== by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970== by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970== by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970== by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970== by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970== by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970== by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970== by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970== by 0x650A72D: button_activate_timeout (gtkbutton.c:1720)
==6970== by 0x6A9304A: gdk_threads_dispatch (gdk.c:498)
==6970== by 0x78A2F7A: g_timeout_dispatch (gmain.c:3253)
==6970== by 0x78A282D: g_main_context_dispatch (gmain.c:1814)
==6970== by 0x78A5F87: g_main_context_iterate (gmain.c:2448)
==6970== by 0x78A6424: g_main_loop_run (gmain.c:2656)
==6970== by 0x65AEBC6: gtk_main (gtkmain.c:1205)
==6970== by 0x47DC82: main (gtkmain.c:880)
==6970== Address 0xd7c2c34 is 4 bytes inside a block of size 32 free'd
==6970== at 0x4C265AF: free (vg_replace_malloc.c:323)
==6970== by 0x7B8E082: purple_imgstore_unref (in /usr/lib/libpurple.so.0.5.5)
==6970== by 0x7B765B9: purple_buddy_icons_set_account_icon (in /usr/lib/libpurple.so.0.5.5)
==6970== by 0x4A2B93: buddy_icon_set_cb (gtkstatusbox.c:1498)
==6970== by 0x7B9AF42: (within /usr/lib/libpurple.so.0.5.5)
==6970== by 0x4A2D34: icon_choose_cb (gtkstatusbox.c:1559)
==6970== by 0x4A78C1: icon_filesel_choose_cb (gtkutils.c:2375)
==6970== by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970== by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970== by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970== by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970== by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970== by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970== by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970== by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970== by 0x650A72D: button_activate_timeout (gtkbutton.c:1720)
==6970== by 0x6A9304A: gdk_threads_dispatch (gdk.c:498)
==6970== by 0x78A2F7A: g_timeout_dispatch (gmain.c:3253)
==6970== by 0x78A282D: g_main_context_dispatch (gmain.c:1814)
==6970== by 0x78A5F87: g_main_context_iterate (gmain.c:2448)
==6970== by 0x78A6424: g_main_loop_run (gmain.c:2656)
==6970== by 0x65AEBC6: gtk_main (gtkmain.c:1205)
==6970== by 0x47DC82: main (gtkmain.c:880)

The valgrind log has an error in libpurple code

==6970== Invalid read of size 1
==6970==    at 0x7B8DF09: purple_imgstore_ref (in /usr/lib/libpurple.so.0.5.5)
==6970==    by 0x4A0743: pidgin_status_box_set_buddy_icon (gtkstatusbox.c:2295)
==6970==    by 0x4A2BCB: buddy_icon_set_cb (gtkstatusbox.c:1536)
==6970==    by 0x7B9AF42: (within /usr/lib/libpurple.so.0.5.5)
==6970==    by 0x4A2D34: icon_choose_cb (gtkstatusbox.c:1559)
==6970==    by 0x4A78C1: icon_filesel_choose_cb (gtkutils.c:2375)
==6970==    by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970==    by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970==    by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970==    by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970==    by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970==    by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970==    by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970==    by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970==    by 0x650A72D: button_activate_timeout (gtkbutton.c:1720)
==6970==    by 0x6A9304A: gdk_threads_dispatch (gdk.c:498)
==6970==    by 0x78A2F7A: g_timeout_dispatch (gmain.c:3253)
==6970==    by 0x78A282D: g_main_context_dispatch (gmain.c:1814)
==6970==    by 0x78A5F87: g_main_context_iterate (gmain.c:2448)
==6970==    by 0x78A6424: g_main_loop_run (gmain.c:2656)
==6970==    by 0x65AEBC6: gtk_main (gtkmain.c:1205)
==6970==    by 0x47DC82: main (gtkmain.c:880)
==6970==  Address 0xd7c2c34 is 4 bytes inside a block of size 32 free'd
==6970==    at 0x4C265AF: free (vg_replace_malloc.c:323)
==6970==    by 0x7B8E082: purple_imgstore_unref (in /usr/lib/libpurple.so.0.5.5)
==6970==    by 0x7B765B9: purple_buddy_icons_set_account_icon (in /usr/lib/libpurple.so.0.5.5)
==6970==    by 0x4A2B93: buddy_icon_set_cb (gtkstatusbox.c:1498)
==6970==    by 0x7B9AF42: (within /usr/lib/libpurple.so.0.5.5)
==6970==    by 0x4A2D34: icon_choose_cb (gtkstatusbox.c:1559)
==6970==    by 0x4A78C1: icon_filesel_choose_cb (gtkutils.c:2375)
==6970==    by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970==    by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970==    by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970==    by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970==    by 0x762E34D: g_closure_invoke (gclosure.c:767)
==6970==    by 0x7643A94: signal_emit_unlocked_R (gsignal.c:3247)
==6970==    by 0x7644EAE: g_signal_emit_valist (gsignal.c:2980)
==6970==    by 0x7645402: g_signal_emit (gsignal.c:3037)
==6970==    by 0x650A72D: button_activate_timeout (gtkbutton.c:1720)
==6970==    by 0x6A9304A: gdk_threads_dispatch (gdk.c:498)
==6970==    by 0x78A2F7A: g_timeout_dispatch (gmain.c:3253)
==6970==    by 0x78A282D: g_main_context_dispatch (gmain.c:1814)
==6970==    by 0x78A5F87: g_main_context_iterate (gmain.c:2448)
==6970==    by 0x78A6424: g_main_loop_run (gmain.c:2656)
==6970==    by 0x65AEBC6: gtk_main (gtkmain.c:1205)
==6970==    by 0x47DC82: main (gtkmain.c:880)

Revision history for this message

Sebastien Bacher (seb128) wrote on 2009-05-05:

#13

could you install pidgin-dbg and get a new valgrind log?

Changed in pidgin (Ubuntu):
status:	New → Incomplete

Revision history for this message

Fernando Miguel (fernandomiguel) wrote on 2009-05-05:

#14

valgrind7159.log Edit (145.9 KiB, text/plain)

now with pidgin-dbg

Changed in pidgin (Ubuntu):
status:	Incomplete → New

Bug Watch Updater (bug-watch-updater) on 2009-05-06

Changed in pidgin:
status:	Unknown → Fix Released

Revision history for this message

Sebastien Bacher (seb128) wrote on 2009-06-09:

#15

the new version is in karmic now

Changed in pidgin (Ubuntu):
status:	New → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

pidgin-bugs #9120
[fixed] Edit

Bug watches keep track of this bug in other bug trackers.

Ubuntupidgin package

adding an avatar makes pidgin crash

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
pidgin package