Ubuntu
gnome-utils package

[apport] gnome-search-tool crashed with SIGSEGV in free()

Bug #95700 reported by Detlef Lechner on 2007-03-24

This bug report is a duplicate of: Bug #76193: gnome-screenshot crashes in remove_one_stack(). Edit Remove

Affects		Status	Importance	Assigned to	Milestone
	gnome-utils (Ubuntu)	Invalid	Medium	Ubuntu Desktop Bugs

Bug Description

Binary package hint: gnome-utils

My error report is simiar to 94497. 93818, 91143. Gnome Panel 2.18.0.

ProblemType: Crash
Architecture: i386
Date: Sat Mar 24 23:28:57 2007
DistroRelease: Ubuntu 7.04
ExecutablePath: /usr/bin/gnome-search-tool
Package: gnome-utils 2.18.0-0ubuntu1
PackageArchitecture: i386
ProcCmdline: gnome-search-tool
ProcCwd: /home/detlef
ProcEnviron:
LANGUAGE=de_DE.UTF-8
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
LANG=de_DE.UTF-8
SHELL=/bin/bash
Signal: 11
SourcePackage: gnome-utils
StacktraceTop:
free () from /lib/tls/i686/cmov/libc.so.6
g_free () from /usr/lib/libglib-2.0.so.0
?? () from /usr/lib/libgnomevfs-2.so.0
?? ()
free () from /lib/tls/i686/cmov/libc.so.6
Uname: Linux MD97600 2.6.20-12-generic #2 SMP Wed Mar 21 20:55:46 UTC 2007 i686 GNU/Linux
UserGroups: adm admin audio cdrom dialout dip floppy lpadmin netdev plugdev powerdev scanner video

Revision history for this message

Detlef Lechner (detlef-lechner) wrote on 2007-03-24:

Dependencies.txt Edit (4.2 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (745 bytes, text/plain; charset="utf-8")
ProcMaps.txt Edit (23.3 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (676 bytes, text/plain; charset="utf-8")
Registers.txt Edit (485 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (386 bytes, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (4.3 KiB, text/plain; charset="utf-8")

Revision history for this message

Sebastien Bacher (seb128) wrote on 2007-03-25:

Download full text (11.4 KiB)

Debug backtrace for the crash:

#0 0xb7314dcc in free () from /lib/tls/i686/cmov/libc.so.6
(gdb) thread apply all bt full

Thread 8 (process 23718):
#0 0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb736b932 in unlink () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb743138d in IA__g_unlink (filename=0x809ce00 "/tmp/orbit-detlef/linc-5ca6-0-5101c8bc703e") at gstdio.c:741
No locals.
#3 0xb7c0469d in link_protocol_unix_destroy (fd=12, dummy=0x809cdf0 "localhost",
    pathname=0x809ce00 "/tmp/orbit-detlef/linc-5ca6-0-5101c8bc703e") at linc-protocols.c:1019
No locals.
#4 0xb7c04a6b in link_protocol_destroy_cnx (proto=0xb7c193b0, fd=12, host=0x809cdf0 "localhost",
    service=0x809ce00 "/tmp/orbit-detlef/linc-5ca6-0-5101c8bc703e") at linc-protocols.c:1122
        __PRETTY_FUNCTION__ = "link_protocol_destroy_cnx"
#5 0xb7c059f3 in link_server_dispose (obj=0x8082590) at linc-server.c:103
        l = <value optimized out>
#6 0xb74948db in IA__g_object_unref (_object=0x8082590) at gobject.c:1760
        object = (GObject *) 0x8082590
        __PRETTY_FUNCTION__ = "IA__g_object_unref"
#7 0xb7430b31 in IA__g_slist_foreach (list=0x808fb00, func=0x80511c8 <g_object_unref@plt>, user_data=0x0) at gslist.c:468
        next = (GSList *) 0x0
#8 0xb7be6762 in CORBA_ORB_shutdown (orb=0x8097318, wait_for_completion=1 '\001', ev=0xbfeb5958) at corba-orb.c:174
No locals.
#9 0xb7be684d in CORBA_ORB_destroy (orb=0x8097318, ev=0xbfeb5958) at corba-orb.c:1257
        __PRETTY_FUNCTION__ = "CORBA_ORB_destroy"
#10 0xb7be7f4f in shutdown_orb () at corba-orb.c:306
        orb = (CORBA_ORB) 0x8097318
        ev = {_id = 0x0, _major = 0, _any = {_type = 0x0, _value = 0x0, _release = 0 '\0'}}
#11 0xb72d69d9 in exit () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#12 0xb72bfec4 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#13 0x08051851 in _start ()
No symbol table info available.

Thread 7 (process 25782):
#0 0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7bb384c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2 0xb7bc4133 in g_cond_timed_wait_posix_impl (cond=0x8136008, entered_mutex=0x0, abs_time=0x58) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1174775337, tv_nsec = 500177000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3 0xb73fbc81 in g_async_queue_pop_intern_unlocked (queue=0x8097860, try=<value optimized out>, end_time=0xb6412384)
    at gasyncqueue.c:341
---Type <return> to continue, or q <return> to quit---
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4 0xb74386d3 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:220
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x8097828
#5 0xb7436b7f in g_thread_create_proxy (data=0x82bf460) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6 0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol tab...

Debug backtrace for the crash:

#0  0xb7314dcc in free () from /lib/tls/i686/cmov/libc.so.6
(gdb) thread apply all bt full

Thread 8 (process 23718):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb736b932 in unlink () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb743138d in IA__g_unlink (filename=0x809ce00 "/tmp/orbit-detlef/linc-5ca6-0-5101c8bc703e") at gstdio.c:741
No locals.
#3  0xb7c0469d in link_protocol_unix_destroy (fd=12, dummy=0x809cdf0 "localhost", 
    pathname=0x809ce00 "/tmp/orbit-detlef/linc-5ca6-0-5101c8bc703e") at linc-protocols.c:1019
No locals.
#4  0xb7c04a6b in link_protocol_destroy_cnx (proto=0xb7c193b0, fd=12, host=0x809cdf0 "localhost", 
    service=0x809ce00 "/tmp/orbit-detlef/linc-5ca6-0-5101c8bc703e") at linc-protocols.c:1122
        __PRETTY_FUNCTION__ = "link_protocol_destroy_cnx"
#5  0xb7c059f3 in link_server_dispose (obj=0x8082590) at linc-server.c:103
        l = <value optimized out>
#6  0xb74948db in IA__g_object_unref (_object=0x8082590) at gobject.c:1760
        object = (GObject *) 0x8082590
        __PRETTY_FUNCTION__ = "IA__g_object_unref"
#7  0xb7430b31 in IA__g_slist_foreach (list=0x808fb00, func=0x80511c8 <g_object_unref@plt>, user_data=0x0) at gslist.c:468
        next = (GSList *) 0x0
#8  0xb7be6762 in CORBA_ORB_shutdown (orb=0x8097318, wait_for_completion=1 '\001', ev=0xbfeb5958) at corba-orb.c:174
No locals.
#9  0xb7be684d in CORBA_ORB_destroy (orb=0x8097318, ev=0xbfeb5958) at corba-orb.c:1257
        __PRETTY_FUNCTION__ = "CORBA_ORB_destroy"
#10 0xb7be7f4f in shutdown_orb () at corba-orb.c:306
        orb = (CORBA_ORB) 0x8097318
        ev = {_id = 0x0, _major = 0, _any = {_type = 0x0, _value = 0x0, _release = 0 '\0'}}
#11 0xb72d69d9 in exit () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#12 0xb72bfec4 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#13 0x08051851 in _start ()
No symbol table info available.

Thread 7 (process 25782):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7bb384c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7bc4133 in g_cond_timed_wait_posix_impl (cond=0x8136008, entered_mutex=0x0, abs_time=0x58) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1174775337, tv_nsec = 500177000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb73fbc81 in g_async_queue_pop_intern_unlocked (queue=0x8097860, try=<value optimized out>, end_time=0xb6412384)
    at gasyncqueue.c:341
---Type <return> to continue, or q <return> to quit---
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4  0xb74386d3 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:220
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x8097828
#5  0xb7436b7f in g_thread_create_proxy (data=0x82bf460) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb73793ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 6 (process 25784):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7368933 in __old__lxstat64 () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2  0xb64382e7 in get_stat_info (file_info=0x826fe30, full_name=0x826c8f0 "/usr/share/doc/HOWTO", options=9, 
    statptr=0xb532613c) at /usr/include/sys/stat.h:443
        statbuf = {st_dev = 588275348478228816, __pad1 = 65415, __st_ino = 5, st_mode = 136968520, st_nlink = 0, 
  st_uid = 136968528, st_gid = 3039977720, st_rdev = 588275351416207176, __pad2 = 63824, st_size = -5241625703300833032, 
  st_blksize = 136968528, st_blocks = 587989063138079989, st_atim = {tv_sec = -1237064476, tv_nsec = -1237064476}, 
  st_mtim = {tv_sec = 136901872, tv_nsec = -1254989544}, st_ctim = {tv_sec = -1237090384, tv_nsec = 136968528}, 
  st_ino = 243576066855}
        link_file_path = <value optimized out>
        symlink_name = <value optimized out>
        recursive = <value optimized out>
#3  0xb6438649 in do_get_file_info (method=0xb643e840, uri=0x8265d10, file_info=0x826fe30, options=9, context=0x827f420)
    at file-method.c:1174
        result = GNOME_VFS_ERROR_INVALID_URI
        full_name = (gchar *) 0x826c8f0 "/usr/share/doc/HOWTO"
        statbuf = {st_dev = 587733360902879374, __pad1 = 15, __st_ino = 136842336, st_mode = 3084575400, 
  st_nlink = 136725840, st_uid = 7, st_gid = 3039977880, st_rdev = 13204114254343965585, __pad2 = 33056, 
  st_size = 587436283530313840, st_blksize = -1221512169, st_blocks = 136773168, st_atim = {tv_sec = 116, 
    tv_nsec = 383513}, st_mtim = {tv_sec = 137442792, tv_nsec = 112}, st_ctim = {tv_sec = -1210635841, tv_nsec = 0}, 
  st_ino = 13056605781321842800}
        __PRETTY_FUNCTION__ = "do_get_file_info"
#4  0xb7d702aa in gnome_vfs_get_file_info_uri_cancellable (uri=0x8265d10, info=0x826fe30, options=9, context=0x827f420)
    at gnome-vfs-cancellable-ops.c:202
        result = <value optimized out>
        __PRETTY_FUNCTION__ = "gnome_vfs_get_file_info_uri_cancellable"
#5  0xb7d78358 in _gnome_vfs_job_execute (job=0x82830e0) at gnome-vfs-job.c:1317
No locals.
#6  0xb7d7722a in thread_entry_point (data=0x82830e0, user_data=0x0) at gnome-vfs-job-queue.c:65
        complete = <value optimized out>
#7  0xb74384d8 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:265
---Type <return> to continue, or q <return> to quit---
        task = (gpointer) 0x82830e0
        pool = (GRealThreadPool *) 0x8097828
#8  0xb7436b7f in g_thread_create_proxy (data=0x82fd318) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#9  0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#10 0xb73793ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 5 (process 25785):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7bb384c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7bc4133 in g_cond_timed_wait_posix_impl (cond=0x8136008, entered_mutex=0x0, abs_time=0x55) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1174775337, tv_nsec = 476531000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb73fbc81 in g_async_queue_pop_intern_unlocked (queue=0x8097860, try=<value optimized out>, end_time=0xb3322384)
    at gasyncqueue.c:341
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4  0xb74386d3 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:220
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x8097828
#5  0xb7436b7f in g_thread_create_proxy (data=0x82facb0) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb73793ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 4 (process 25786):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7bb384c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7bc4133 in g_cond_timed_wait_posix_impl (cond=0x8136008, entered_mutex=0x0, abs_time=0x56) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1174775337, tv_nsec = 476691000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb73fbc81 in g_async_queue_pop_intern_unlocked (queue=0x8097860, try=<value optimized out>, end_time=0xb4a73384)
    at gasyncqueue.c:341
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4  0xb74386d3 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:220
---Type <return> to continue, or q <return> to quit---
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x8097828
#5  0xb7436b7f in g_thread_create_proxy (data=0x8284dc8) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb73793ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 3 (process 25787):
#0  0xffffe410 in __kernel_vsyscall ()
No symbol table info available.
#1  0xb7bb384c in pthread_cond_timedwait@@GLIBC_2.3.2 () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#2  0xb7bc4133 in g_cond_timed_wait_posix_impl (cond=0x8136008, entered_mutex=0x0, abs_time=0x57) at gthread-posix.c:242
        result = <value optimized out>
        end_time = {tv_sec = 1174775337, tv_nsec = 476702000}
        __PRETTY_FUNCTION__ = "g_cond_timed_wait_posix_impl"
#3  0xb73fbc81 in g_async_queue_pop_intern_unlocked (queue=0x8097860, try=<value optimized out>, end_time=0xb4272384)
    at gasyncqueue.c:341
        retval = <value optimized out>
        __PRETTY_FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#4  0xb74386d3 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:220
        task = <value optimized out>
        pool = (GRealThreadPool *) 0x8097828
#5  0xb7436b7f in g_thread_create_proxy (data=0x8280378) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#6  0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#7  0xb73793ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Thread 2 (process 25788):
#0  0xb73793d8 in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0x007d0f00 in ?? ()
No symbol table info available.
#2  0x00000000 in ?? ()
No symbol table info available.

Thread 1 (process 25783):
#0  0xb7314dcc in free () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0xb7420131 in IA__g_free (mem=0x5) at gmem.c:187
No locals.
#2  0xb7d809c5 in remove_one_stack (key=0x5, value=0x31, callback_data=0x0) at gnome-vfs-module-callback.c:362
---Type <return> to continue, or q <return> to quit---
No locals.
#3  0xb740bf4a in g_hash_table_foreach_remove_or_steal (hash_table=0x813a5a0, func=0xb7d809a0 <remove_one_stack>, 
    user_data=0x0, notify=1) at ghash.c:605
        node = (GHashNode *) 0x0
        prev = (GHashNode *) 0x0
        i = 0
        deleted = 0
#4  0xb7d8082c in clear_stack_table (stack_table=0xfffffffd) at gnome-vfs-module-callback.c:389
No locals.
#5  0xb7d808a7 in _gnome_vfs_module_callback_clear_stacks () at gnome-vfs-module-callback.c:961
No locals.
#6  0xb7d77c84 in _gnome_vfs_job_execute (job=0x827e668) at gnome-vfs-job.c:1751
No locals.
#7  0xb7d7722a in thread_entry_point (data=0x827e668, user_data=0x0) at gnome-vfs-job-queue.c:65
        complete = <value optimized out>
#8  0xb74384d8 in g_thread_pool_thread_proxy (data=0x8097828) at gthreadpool.c:265
        task = (gpointer) 0x827e668
        pool = (GRealThreadPool *) 0x8097828
#9  0xb7436b7f in g_thread_create_proxy (data=0x826c218) at gthread.c:591
        __PRETTY_FUNCTION__ = "g_thread_create_proxy"
#10 0xb7baf31b in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#11 0xb73793ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.

Revision history for this message

Apport retracing service (apport) wrote on 2007-03-26: Symbolic stack trace

Stacktrace.txt (retraced) Edit (1.3 KiB, text/plain)

StacktraceTop:free () from /lib/tls/i686/cmov/libc.so.6
IA__g_free (mem=0x5) at gmem.c:187
remove_one_stack (key=0x5, value=0x31, callback_data=0x0) at gnome-vfs-module-callback.c:362
g_hash_table_foreach_remove_or_steal (hash_table=0x813a5a0, func=0xb7d809a0 <remove_one_stack>, user_data=0x0, notify=1) at ghash.c:605
clear_stack_table (stack_table=0xfffffffd) at gnome-vfs-module-callback.c:389

Revision history for this message

Apport retracing service (apport) wrote on 2007-03-26: Symbolic threaded stack trace

ThreadStacktrace.txt (retraced) Edit (9.8 KiB, text/plain)

Revision history for this message

Sebastien Bacher (seb128) wrote on 2007-03-26:

Thanks for your bug report. The crash looks like a memory corruption. Could you try to get a valgrind log for it (you can follow the instructions from https://wiki.ubuntu.com/Valgrind for that)?

Changed in gnome-utils:
assignee:	nobody → desktop-bugs
importance:	Undecided → Medium
status:	Unconfirmed → Needs Info

Revision history for this message

Daniel Holbach (dholbach) wrote on 2007-04-12:

Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find.

Changed in gnome-utils:
status:	Needs Info → Rejected

Report a bug

This report contains Public information

Everyone can see this information.

Duplicate of bug #76193 Remove

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntugnome-utils package

[apport] gnome-search-tool crashed with SIGSEGV in free()

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
gnome-utils package