Bug 354730 – crash in Calculator: running 3x10^38 using bi...

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 354730 - crash in Calculator: running 3x10^38 using bi...


Summary:	crash in Calculator: running 3x10^38 using bi...


Status:	RESOLVED FIXED

Product:	gnome-calculator
Classification:	Core
Component:	general
Version:	unspecified
Hardware:	Other All

Importance:	High critical
Target Milestone:	---
Assigned To:	Sami Pietilä
QA Contact:	Rich Burridge

URL:
Whiteboard:

Duplicates:	358103 362469 366340 368885 369035 370207 371243 373371 375183 375335 377426 377430 378955 379575 381161 381518 382417 382749 384451 384987 386343 386686 388247 390905 391077 397897 398139 399339 401224 402105 402112 404586 404788 404797 404826 406065 406418 406954 407843 409031 409599 410973 413762 416172 416183 418100 418561 418890 421655 424550 427351 428147 429150 430316 430948 432050 432550 435470 436777 437029 440648 449379 470583 477560 484045 (view as bug list)
Depends on:
Blocks:

Reported:	2006-09-07 06:52 UTC by Karl
Modified:	2007-10-06 14:02 UTC

See Also:
GNOME target:	---
GNOME version:	2.15/2.16

Attachments
The Fix. (2.26 KB, patch) 2006-09-28 20:38 UTC, Sami Pietilä	none	Details \| Review

Description Karl 2006-09-07 06:52:03 UTC

What were you doing when the application crashed?
running 3x10^38 using binary notation, in scientific view, with 'sci format' (i think) on..


Distribution: Ubuntu 6.10 (edgy)
Gnome Release: 2.16.0 2006-09-04 (Ubuntu)
BugBuddy Version: 2.15.92

Memory status: size: 36569088 vsize: 0 resident: 36569088 share: 0 rss: 13889536 rss_rlim: 0
CPU usage: start_time: 1157611669 rtime: 0 utime: 336 stime: 0 cutime:322 cstime: 0 timeout: 14 it_real_value: 0 frequency: 0

Backtrace was generated from '/usr/bin/gcalctool'

(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1224340992 (LWP 21009)]
0xffffe410 in __kernel_vsyscall ()

+ Trace 71777

Thread 1 (Thread -1224340992 (LWP 21009))

#0 __kernel_vsyscall
#1 __waitpid_nocancel
from /lib/tls/i686/cmov/libpthread.so.0
#2 gnome_gtk_module_info_get
from /usr/lib/libgnomeui-2.so.0
#3 <signal handler called>
#4 __kernel_vsyscall
#5 *__GI_raise
from /lib/tls/i686/cmov/libc.so.6
#6 *__GI_abort
from /lib/tls/i686/cmov/libc.so.6
#7 *__GI___assert_fail
from /lib/tls/i686/cmov/libc.so.6
#8 matherr
#9 matherr
#10 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#11 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#12 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#13 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#14 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#15 gtk_button_clicked
from /usr/lib/libgtk-x11-2.0.so.0
#16 gtk_button_set_alignment
from /usr/lib/libgtk-x11-2.0.so.0
#17 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#18 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#19 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#20 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#21 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#22 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#23 gtk_button_released
from /usr/lib/libgtk-x11-2.0.so.0
#24 gtk_button_released
from /usr/lib/libgtk-x11-2.0.so.0
#25 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#26 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#27 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#28 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#29 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#30 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#31 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#32 gtk_propagate_event
from /usr/lib/libgtk-x11-2.0.so.0
#33 gtk_main_do_event
from /usr/lib/libgtk-x11-2.0.so.0
#34 _gdk_events_init
from /usr/lib/libgdk-x11-2.0.so.0
#35 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#36 g_main_context_check
from /usr/lib/libglib-2.0.so.0
#37 g_main_loop_run
from /usr/lib/libglib-2.0.so.0
#38 gtk_main
from /usr/lib/libgtk-x11-2.0.so.0
#39 matherr
#40 __libc_start_main
from /lib/tls/i686/cmov/libc.so.6
#41 ??
#0 __kernel_vsyscall

Comment 1 Rich Burridge 2006-09-07 14:19:13 UTC

I'm not reproducing this, so could you please do the following:

1/ Tell me what version of gcalctool this is. Help->About should give
   you that information.

2/ Give me step-by-step details of what you typed in, just before it crashed.

Thanks.

Comment 2 Karl 2006-09-28 09:08:15 UTC

open gcalctool
enter scientific mode
select 'dec'
select 'fix'
enter the following (clicking on the buttons)
3 (three)
* (times)
10x (the button, 10 to the power of)
3
8 (thirty eight)
select 'bin'
= (equals)
get a 'no undo history' warning in status bar at bottom
select 'dec'
= (equals again)
crash.

refile bug as http://bugzilla.gnome.org/show_bug.cgi?id=354730 to make sure the (probably useless) stacktrace is there.


Terminal output:

kgoetz@Rommel - Thu Sep 28 - 18:27:44 :~$ gcalctool 
gcalctool: functions.c:143: new_state: Assertion `!v->h.e[v->h.current].expression' failed.

** (bug-buddy:9804): WARNING **: Couldn't load icon for Epiphany Web Bookmarks

** (bug-buddy:9804): WARNING **: Couldn't load icon for Open Folder


Package version:

kgoetz@Rommel - Thu Sep 28 - 18:31:41 :~$ apt-cache show gcalctool
Package: gcalctool
Priority: optional
Section: math
Installed-Size: 5200
Maintainer: Sebastien Bacher <seb128@debian.org>
Architecture: i386
Version: 5.8.24-0ubuntu1
Replaces: gnome-utils (<< 2.4)
Depends: libatk1.0-0 (>= 1.12.1), libc6 (>= 2.4-1), libgconf2-4 (>= 2.13.5), libglib2.0-0 (>= 2.12.0), libgnome2-0 (>= 2.14.1), libgnomeui-0 (>= 2.13.0), libgtk2.0-0 (>= 2.10.0), liblaunchpad-integration0 (>= 0.0patch26), gconf2 (>= 2.12.1-4ubuntu1)
Conflicts: gnome-utils (<< 2.4)
Filename: pool/main/g/gcalctool/gcalctool_5.8.24-0ubuntu1_i386.deb
Size: 654352
MD5sum: e4bb4a52564d3458469e68afec9d1cd2
Description: A GTK2 desktop calculator
 gcalctool is a powerful graphical calculator with financial, logical and
 scientific modes. It uses a multiple precision package to do its arithmetic
 to give a high degree of accuracy.
Bugs: mailto:ubuntu-users@lists.ubuntu.com
Origin: Ubuntu
Task: ubuntu-desktop, edubuntu-desktop


Sorry it took a while to respond.

Comment 3 Fabio Bonelli 2006-09-28 11:23:30 UTC

*** Bug 358103 has been marked as a duplicate of this bug. ***

Comment 4 Rich Burridge 2006-09-28 15:03:16 UTC

Thanks Karl. Confirmed. gcalctool is terminating because it's
thrown an assertion:

Assertion failed: !v->h.e[v->h.current].expression, file functions.c, line 143

It simply shouldn't do that. It doesn't in no arithmetic operator
precedence mode.

Sami, please take a look at this and adjust it to put an error message 
in the status area if needed. In fact, if you have any other assertions,
please remove them and adjust accordingly.

Thanks.

Comment 5 Sami Pietilä 2006-09-28 20:38:07 UTC

Created attachment 73592 [details] [review]
The Fix.

Fixed
1. The erronous message about undo history.
2. Crash

Comment 6 Sami Pietilä 2006-09-28 20:53:41 UTC

There are situations where gcalctool must be exited because the error is unrecoverable (critical software bug detected). Such places are asserted.

This was a case where gcalctool detected corrupted data structure and protected itself from possible (future) NULL pointer reference. However in this case, a quick fix was to remove the check because currently the routines are likely to handle the NULL pointer. This is because empty expression currently has two presentation forms:

char *syntax = ""
char *syntax = NULL;

I am planning to make latter invalid in the future.

Comment 7 Sami Pietilä 2006-09-29 18:13:42 UTC

Committed the fix to the CVS HEAD.

Comment 8 Rich Burridge 2006-11-03 19:15:55 UTC

Yesterday I also generated a gcalctool v5.8.25 tarball with this fix in.
Hopefully Linux distros will pick this up soon so we can stop the plaugue
of bugs reported in GNOME 2.16 because of this problem.

Comment 9 Rich Burridge 2006-11-03 19:20:40 UTC

*** Bug 369035 has been marked as a duplicate of this bug. ***

Comment 10 Rich Burridge 2006-11-03 23:05:09 UTC

*** Bug 370207 has been marked as a duplicate of this bug. ***

Comment 11 Rich Burridge 2006-11-10 12:29:13 UTC

*** Bug 373371 has been marked as a duplicate of this bug. ***

Comment 12 Rich Burridge 2006-11-14 17:19:19 UTC

*** Bug 375183 has been marked as a duplicate of this bug. ***

Comment 13 Rich Burridge 2006-11-14 23:47:54 UTC

*** Bug 375335 has been marked as a duplicate of this bug. ***

Comment 14 Rich Burridge 2006-11-17 18:11:59 UTC

*** Bug 368885 has been marked as a duplicate of this bug. ***

Comment 15 Rich Burridge 2006-11-17 18:12:07 UTC

*** Bug 371243 has been marked as a duplicate of this bug. ***

Comment 16 Rich Burridge 2006-11-18 16:26:43 UTC

*** Bug 362469 has been marked as a duplicate of this bug. ***

Comment 17 Rich Burridge 2006-11-18 16:28:31 UTC

*** Bug 366340 has been marked as a duplicate of this bug. ***

Comment 18 Rich Burridge 2006-11-20 16:21:26 UTC

*** Bug 377426 has been marked as a duplicate of this bug. ***

Comment 19 Rich Burridge 2006-11-20 16:49:23 UTC

*** Bug 377430 has been marked as a duplicate of this bug. ***

Comment 20 Rich Burridge 2006-11-24 22:59:29 UTC

*** Bug 378955 has been marked as a duplicate of this bug. ***

Comment 21 Rich Burridge 2006-11-26 21:50:00 UTC

*** Bug 379575 has been marked as a duplicate of this bug. ***

Comment 22 Rich Burridge 2006-12-01 15:46:20 UTC

*** Bug 381161 has been marked as a duplicate of this bug. ***

Comment 23 Rich Burridge 2006-12-02 07:57:45 UTC

*** Bug 381518 has been marked as a duplicate of this bug. ***

Comment 24 Rich Burridge 2006-12-04 22:36:30 UTC

*** Bug 382417 has been marked as a duplicate of this bug. ***

Comment 25 Rich Burridge 2006-12-05 21:55:34 UTC

*** Bug 382749 has been marked as a duplicate of this bug. ***

Comment 26 Rich Burridge 2006-12-10 18:51:18 UTC

*** Bug 384451 has been marked as a duplicate of this bug. ***

Comment 27 Rich Burridge 2006-12-12 15:52:48 UTC

*** Bug 384987 has been marked as a duplicate of this bug. ***

Comment 28 Rich Burridge 2006-12-15 23:10:01 UTC

*** Bug 386343 has been marked as a duplicate of this bug. ***

Comment 29 Rich Burridge 2006-12-17 05:04:52 UTC

*** Bug 386686 has been marked as a duplicate of this bug. ***

Comment 30 Rich Burridge 2006-12-21 16:01:19 UTC

*** Bug 388247 has been marked as a duplicate of this bug. ***

Comment 31 Susana 2006-12-30 15:11:39 UTC

*** Bug 390905 has been marked as a duplicate of this bug. ***

Comment 32 Rich Burridge 2006-12-30 20:15:31 UTC

*** Bug 391077 has been marked as a duplicate of this bug. ***

Comment 33 Rich Burridge 2007-01-18 16:30:24 UTC

*** Bug 397897 has been marked as a duplicate of this bug. ***

Comment 34 Rich Burridge 2007-01-18 21:04:05 UTC

*** Bug 398139 has been marked as a duplicate of this bug. ***

Comment 35 palfrey 2007-01-22 13:43:30 UTC

*** Bug 399339 has been marked as a duplicate of this bug. ***

Comment 36 palfrey 2007-01-27 15:34:23 UTC

*** Bug 401224 has been marked as a duplicate of this bug. ***

Comment 37 Rich Burridge 2007-01-29 15:31:18 UTC

*** Bug 402112 has been marked as a duplicate of this bug. ***

Comment 38 Rich Burridge 2007-01-29 15:31:25 UTC

*** Bug 402105 has been marked as a duplicate of this bug. ***

Comment 39 Rich Burridge 2007-02-05 15:28:58 UTC

*** Bug 404586 has been marked as a duplicate of this bug. ***

Comment 40 Rich Burridge 2007-02-05 23:11:58 UTC

*** Bug 404788 has been marked as a duplicate of this bug. ***

Comment 41 Rich Burridge 2007-02-06 00:40:13 UTC

*** Bug 404797 has been marked as a duplicate of this bug. ***

Comment 42 Rich Burridge 2007-02-06 02:06:43 UTC

*** Bug 404826 has been marked as a duplicate of this bug. ***

Comment 43 Rich Burridge 2007-02-09 15:47:15 UTC

*** Bug 406065 has been marked as a duplicate of this bug. ***

Comment 44 Rich Burridge 2007-02-10 16:14:06 UTC

*** Bug 406418 has been marked as a duplicate of this bug. ***

Comment 45 Rich Burridge 2007-02-12 10:37:41 UTC

*** Bug 406954 has been marked as a duplicate of this bug. ***

Comment 46 Teppo Turtiainen 2007-02-14 15:18:23 UTC

*** Bug 407843 has been marked as a duplicate of this bug. ***

Comment 47 Rich Burridge 2007-02-17 21:44:18 UTC

*** Bug 409031 has been marked as a duplicate of this bug. ***

Comment 48 Susana 2007-02-19 15:55:24 UTC

*** Bug 409599 has been marked as a duplicate of this bug. ***

Comment 49 Rich Burridge 2007-02-23 00:03:18 UTC

*** Bug 410973 has been marked as a duplicate of this bug. ***

Comment 50 Susana 2007-03-02 15:29:39 UTC

*** Bug 413762 has been marked as a duplicate of this bug. ***

Comment 51 Rich Burridge 2007-03-08 19:54:04 UTC

*** Bug 416172 has been marked as a duplicate of this bug. ***

Comment 52 Rich Burridge 2007-03-08 21:05:51 UTC

*** Bug 416183 has been marked as a duplicate of this bug. ***

Comment 53 Rich Burridge 2007-03-14 03:30:29 UTC

*** Bug 418100 has been marked as a duplicate of this bug. ***

Comment 54 Rich Burridge 2007-03-15 14:51:06 UTC

*** Bug 418561 has been marked as a duplicate of this bug. ***

Comment 55 Pedro Villavicencio 2007-03-16 13:52:19 UTC

*** Bug 418890 has been marked as a duplicate of this bug. ***

Comment 56 Rich Burridge 2007-03-24 20:40:43 UTC

*** Bug 421655 has been marked as a duplicate of this bug. ***

Comment 57 Rich Burridge 2007-03-30 17:25:19 UTC

*** Bug 424550 has been marked as a duplicate of this bug. ***

Comment 58 Rich Burridge 2007-04-07 19:08:43 UTC

*** Bug 427351 has been marked as a duplicate of this bug. ***

Comment 59 Rich Burridge 2007-04-10 15:13:43 UTC

*** Bug 428147 has been marked as a duplicate of this bug. ***

Comment 60 Rich Burridge 2007-04-12 22:25:11 UTC

*** Bug 429150 has been marked as a duplicate of this bug. ***

Comment 61 Rich Burridge 2007-04-16 14:22:17 UTC

*** Bug 430316 has been marked as a duplicate of this bug. ***

Comment 62 Rich Burridge 2007-04-18 13:08:58 UTC

*** Bug 430948 has been marked as a duplicate of this bug. ***

Comment 63 Rich Burridge 2007-04-21 19:44:17 UTC

*** Bug 432050 has been marked as a duplicate of this bug. ***

Comment 64 Rich Burridge 2007-04-23 14:16:00 UTC

*** Bug 432550 has been marked as a duplicate of this bug. ***

Comment 65 palfrey 2007-05-03 13:27:09 UTC

*** Bug 435470 has been marked as a duplicate of this bug. ***

Comment 66 Rich Burridge 2007-05-08 04:40:07 UTC

*** Bug 436777 has been marked as a duplicate of this bug. ***

Comment 67 Rich Burridge 2007-05-09 00:08:51 UTC

*** Bug 437029 has been marked as a duplicate of this bug. ***

Comment 68 Susana 2007-05-23 11:55:13 UTC

*** Bug 440648 has been marked as a duplicate of this bug. ***

Comment 69 Rich Burridge 2007-06-20 14:06:48 UTC

*** Bug 449379 has been marked as a duplicate of this bug. ***

Comment 70 Rich Burridge 2007-08-27 03:11:44 UTC

*** Bug 470583 has been marked as a duplicate of this bug. ***

Comment 71 Rich Burridge 2007-09-16 19:12:40 UTC

*** Bug 477560 has been marked as a duplicate of this bug. ***

Comment 72 Rich Burridge 2007-10-06 14:02:55 UTC

*** Bug 484045 has been marked as a duplicate of this bug. ***