Dee: compiz crashed with SIGSEGV in PlaceEntryRemote::ActivateResult()

Bug #733250 reported by Halvor Lyche Strandvoll
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Unity
Fix Released
Low
Mikkel Kamstrup Erlandsen
Unity Foundations
Fix Released
Low
Mikkel Kamstrup Erlandsen
dee
Fix Released
Low
Mikkel Kamstrup Erlandsen
dee (Ubuntu)
Fix Released
Medium
Unassigned
unity (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

No more info.

ProblemType: Crash
DistroRelease: Ubuntu 11.04
Package: libnux-0.9-0 0.9.32-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.38-6.34-generic 2.6.38-rc7
Uname: Linux 2.6.38-6-generic x86_64
Architecture: amd64
CrashCounter: 1
Date: Fri Mar 11 03:45:24 2011
ExecutablePath: /usr/bin/compiz
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Alpha amd64 (20110302)
ProcCmdline: compiz
ProcEnviron:
 LANGUAGE=nb:en
 LANG=nb_NO.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7fc65389fc72: mov (%rax),%rax
 PC (0x7fc65389fc72) ok
 source "(%rax)" (0x7fc600003000) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: nux
StacktraceTop:
 ?? () from /usr/lib/libdee-1.0.so.1
 ?? () from /usr/lib/libdee-1.0.so.1
 PlaceEntryRemote::ActivateResult(void const*) () from /usr/lib/compiz/libunityshell.so
 PlacesTile::RecvMouseClick(int, int, unsigned long, unsigned long) () from /usr/lib/compiz/libunityshell.so
 sigc::internal::signal_emit4<void, int, int, unsigned long, unsigned long, sigc::nil>::emit(sigc::internal::signal_impl*, int const&, int const&, unsigned long const&, unsigned long const&) () from /usr/lib/libnux-0.9.so.0
Title: compiz crashed with SIGSEGV in PlaceEntryRemote::ActivateResult()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare
XsessionErrors:
 (nautilus:1469): GConf-CRITICAL **: gconf_value_free: assertion `value != NULL' failed
 (<unknown>:1464): libindicator-WARNING **: Shortcut Group does not have key 'TargetEnvironment' falling back to deprecated use of 'OnlyShowIn' and 'NotShowIn'.
 (<unknown>:1464): libindicator-WARNING **: Shortcut Group does not have key 'TargetEnvironment' falling back to deprecated use of 'OnlyShowIn' and 'NotShowIn'.

Revision history for this message
Halvor Lyche Strandvoll (halvors) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 dee_sequence_model_get_value (self=0x7fc65c036f30, iter=0x7fc6482f9ad0, column=3) at dee-sequence-model.c:494
 dee_serializable_model_get_string (self=0x7fc65c036f30, iter=0x7fc6482f9ad0, column=3) at dee-serializable-model.c:645
 PlaceEntryRemote::ActivateResult (this=0x18465c0, id=0x7fc6482f9ad0) at /build/buildd/unity-3.6.4/src/PlaceEntryRemote.cpp:643
 emit (this=0x7fc65c583928, x=<value optimized out>, y=<value optimized out>, button_flags=<value optimized out>, key_flags=<value optimized out>) at /usr/include/sigc++-2.0/sigc++/signal.h:1010
 emit (this=0x7fc65c583928, x=<value optimized out>, y=<value optimized out>, button_flags=<value optimized out>, key_flags=<value optimized out>) at /usr/include/sigc++-2.0/sigc++/signal.h:2777

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in nux (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
visibility: private → public
affects: nux → dee
affects: nux (Ubuntu) → dee (Ubuntu)
Alex Launi (alexlauni)
Changed in dee:
status: New → Confirmed
Changed in unity:
assignee: nobody → Mikkel Kamstrup Erlandsen (kamstrup)
status: New → Confirmed
Changed in dee (Ubuntu):
status: New → Confirmed
Revision history for this message
Mikkel Kamstrup Erlandsen (kamstrup) wrote : Re: compiz crashed with SIGSEGV in PlaceEntryRemote::ActivateResult()

This looks mighty odd. Dee appears to segfault in a g_ptr_array_index(row, 3) - but we explicitly create all the GPtrArrays for the rows with lengths == n_columns+1 and we assert that 3 < n_columns just a few lines before the crash...

Anyway - I added some guards against weird internal state corruption (mem corruption?)

Changed in unity:
importance: Undecided → Low
milestone: none → 3.6.6
status: Confirmed → Fix Committed
Changed in dee:
assignee: nobody → Mikkel Kamstrup Erlandsen (kamstrup)
importance: Undecided → Low
milestone: none → 0.5.16
status: Confirmed → Fix Committed
summary: - compiz crashed with SIGSEGV in PlaceEntryRemote::ActivateResult()
+ Dee: compiz crashed with SIGSEGV in PlaceEntryRemote::ActivateResult()
Changed in unity-foundations:
assignee: nobody → Mikkel Kamstrup Erlandsen (kamstrup)
importance: Undecided → Low
milestone: none → unity-3.6.6
status: New → Fix Committed
Changed in unity-foundations:
status: Fix Committed → Fix Released
Changed in unity:
status: Fix Committed → Fix Released
Changed in dee:
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package dee - 0.5.16-0ubuntu1

---------------
dee (0.5.16-0ubuntu1) natty; urgency=low

  * New upstream release.
    - compiz crashed with SIGSEGV in g_atomic_int_exchange_and_add()
      (LP: #733343)
    - Implement DeeFilters for restrictions and localized sorting
      (LP: #736875)
    - Dee: compiz crashed with SIGSEGV in PlaceEntryRemote::ActivateResult()
      (LP: #733250)
  * debian/libdee-1.0-1.symbols:
    updated
 -- Didier Roche <email address hidden> Thu, 17 Mar 2011 16:21:49 +0100

Changed in dee (Ubuntu):
status: Confirmed → Fix Released
Changed in unity (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.