Bug 333482 – crash with command completion

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 333482 - crash with command completion


Summary:	crash with command completion


Status:	RESOLVED FIXED

Product:	xchat-gnome
Classification:	Other
Component:	general
Version:	unspecified
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	xchat-gnome maintainers
QA Contact:	xchat-gnome maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2006-03-05 13:35 UTC by Guillaume Desmottes
Modified:	2006-07-16 20:20 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description Guillaume Desmottes 2006-03-05 13:35:12 UTC

To reproduce:
- Login on a server
- Type: /AL <tab>

Starting program: /home/cassidy/gnome/xchat-gnome/src/fe-gnome/xchat-gnome
[Thread debugging using libthread_db enabled]
[New Thread 1996261056 (LWP 11635)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1996261056 (LWP 11635)]
0x77329682 in malloc_usable_size () from /lib/tls/i686/cmov/libc.so.6
(gdb) thread apply all bt

+ Trace 66702

Thread 1 (Thread 1996261056 (LWP 11635))

#0 malloc_usable_size
from /lib/tls/i686/cmov/libc.so.6
#1 free
from /lib/tls/i686/cmov/libc.so.6
#2 malloc
from /lib/tls/i686/cmov/libc.so.6
#3 IA__g_malloc
at gmem.c line 131
#4 IA__g_slice_alloc
at gslice.c line 777
#5 pango_script_iter_new
from /usr/lib/libpango-1.0.so.0
#6 pango_context_get_base_dir
from /usr/lib/libpango-1.0.so.0
#7 pango_itemize_with_base_dir
from /usr/lib/libpango-1.0.so.0
#8 pango_layout_iter_get_char_extents
from /usr/lib/libpango-1.0.so.0
#9 pango_layout_get_lines
from /usr/lib/libpango-1.0.so.0
#10 gtk_entry_adjust_scroll
at gtkentry.c line 3425
#11 recompute_idle_func
at gtkentry.c line 2906
#12 g_idle_dispatch
at gmain.c line 3796
#13 IA__g_main_context_dispatch
at gmain.c line 1916
#14 g_main_context_iterate
at gmain.c line 2547
#15 IA__g_main_loop_run
at gmain.c line 2751
#16 IA__gtk_main
at gtkmain.c line 1014
#17 fe_main
at fe-gnome.c line 174
#18 main
at xchat.c line 1016

Comment 1 David Trowbridge 2006-04-21 23:50:46 UTC

I can't reproduce, and the trace looks odd.  Is this still happening?

Comment 2 Guillaume Desmottes 2006-04-22 23:07:21 UTC

Yep, i still have this issue (with the same trace).

In fact it doesn't really crash, it's "just" the app that freeze.
I use gdb to get the trace.

Comment 3 Guillaume Desmottes 2006-07-15 20:39:13 UTC

GRRRR i really don't understand this bug.

*** glibc detected *** corrupted double-linked list: 0xb7335358 ***

Program received signal SIGABRT, Aborted.


Seems this crash doesn't occur if the g_free in text-entry.c:476 is removed but i can't see any reason to explain that.

Comment 4 David Trowbridge 2006-07-16 04:01:34 UTC

Perhaps valgrind could help?

Comment 5 Guillaume Desmottes 2006-07-16 20:20:36 UTC

RAHHH shame on me !! I'm completely stupid !!!
It was just that the npt pointer was freed two times ...

Fixed in the development version. The fix will be available in the next major release. Thank you for your bug report.