GNOME Bugzilla – Bug 408192
bug-buddy crashed with SIGSEGV in glade_xml_get_widget()
Last modified: 2007-04-16 21:40:58 UTC
That bug has been opened on https://launchpad.net/ubuntu/+source/bug-buddy/+bug/85292 "Binary package hint: bug-buddy crash in deskbar was being reported ... Package: bug-buddy 2.17.3-0ubuntu1 ... #0 0x0fe8cce4 in glade_xml_get_widget (self=0x10023748, name=0x1000e3f4 "main-text") at glade-xml.c:511 __PRETTY_FUNCTION__ = "glade_xml_get_widget" #1 0x1000a7ac in bug_sent (msg=<value optimized out>, xml=0x10023748) at bug-buddy.c:601 dirname = (gchar *) 0x1002b6b0 "\020\032X" filename = <value optimized out> message_string = <value optimized out> button = (GtkWidget *) 0x1002b6b0 image = <value optimized out> text = 0x104c3000 "Server returned bad state. This is most likely a server issue and should be reported to bugmaster@gnome-org\n\nHTTP Response returned bad status code 2" errmsg = 0x3018902c <Address 0x3018902c out of bounds> str = <value optimized out> ptr = <value optimized out> urlbutton = <value optimized out> requisition = {width = 273413584, height = 259463096} err = (GError *) 0x100664a8 #2 0x0f731f0c in IA__g_cclosure_marshal_VOID__VOID (closure=0x104bf5d0, return_value=<value optimized out>, n_param_values=<value optimized out>, param_values=<value optimized out>, invocation_hint=<value optimized out>, marshal_data=0x1000a360) at gmarshal.c:77 data1 = (gpointer) 0x10023748 data2 = (gpointer) 0x1000e3f4 __PRETTY_FUNCTION__ = "IA__g_cclosure_marshal_VOID__VOID" #3 0x0f72124c in IA__g_closure_invoke (closure=0x104bf5d0, return_value=0x0, n_param_values=1, param_values=0x7fd96418, invocation_hint=0x7fd9636c) at gclosure.c:490 marshal = (GClosureMarshal) 0xf731ea0 <IA__g_cclosure_marshal_VOID__VOID> marshal_data = (gpointer) 0x0 __PRETTY_FUNCTION__ = "IA__g_closure_invoke" #4 0x0f735764 in signal_emit_unlocked_R (node=0x10362b80, detail=0, instance=0x102da5c0, emission_return=0x0, instance_and_params=0x7fd96418) at gsignal.c:2440 tmp = <value optimized out> handler = (Handler *) 0x101dc620 accumulator = (SignalAccumulator *) 0x0 emission = {next = 0x7fd96864, instance = 0x102da5c0, ihint = {signal_id = 209, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4} class_closure = (GClosure *) 0x10362b48 handler_list = (Handler *) 0x101dc620 return_accu = (GValue *) 0x0 accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, { v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}} signal_id = 209 max_sequential_handler_number = 168 return_value_altered = 1 #5 0x0f736a6c in IA__g_signal_emit_valist (instance=0x102da5c0, signal_id=<value optimized out>, detail=0, var_args=0x7fd966f4) at gsignal.c:2199 _flags = <value optimized out> _vtable = <value optimized out> _cvalues = {{v_int = 0, v_long = 0, v_int64 = 0, v_double = 0, v_pointer = 0x0}, {v_int = 1, v_long = 1, v_int64 = 4294967693, v_double = 2.1219959871093337e-314, v_pointer = 0x1}, {v_int = 0, v_long = 0, v_int64 = 805438184, v_double = 3.9793933656316077e-315, v_pointer = 0x0}, { v_int = 260940358, v_long = 260940358, v_int64 = 1120730304077470392, v_double = 9.3201288883986632e-234, v_pointer = 0xf8da246}, {v_int = 260933912, v_long = 260933912, v_int64 = 1120702618457341953, v_double = 9.2891940507166062e-234, v_pointer = 0xf8d8918}, {v_int = -110203128, v_long = -110203128, v_int64 = -473318830676901888, v_double = -8.429484444225671e+276, v_pointer = 0xf96e6f08}, {v_int = 1, v_long = 1, v_int64 = 6439921144, v_double = 3.1817437991770593e-314, v_pointer = 0x1}, {v_int = 2144953856, v_long = 2144953856, v_int64 = 9212506662949093376, v_double = 7.1341557390593128e+307, v_pointer = 0x7fd96600}} _lcopy_format = <value optimized out> _n_values = <value optimized out> return_value = {g_type = 1, data = {{v_int = 1, v_uint = 1, v_long = 1, v_ulong = 1, v_int64 = 4294967296, v_uint64 = 4294967296, v_float = 1.40129846e-45, v_double = 2.1219957909652723e-314, v_pointer = 0x1}, {v_int = 191589812, v_uint = 191589812, v_long = 191589812, v_ulong = 191589812, v_int64 = 822871978931743000, v_uint64 = 822871978931743000, v_float = 4.53418852e-32, v_double = 1.1691124435585914e-253, v_pointer = 0xb6b6db4}}} error = <value optimized out> instance_and_params = (GValue *) 0x7fd96418 stack_values = {{g_type = 271799248, data = {{v_int = 271427008, v_uint = 271427008, v_long = 271427008, v_ulong = 271427008, v_int64 = 1165770122611130368, v_uint64 = 1165770122611130368, v_float = 3.42459233e-29, v_double = 9.5481853269628599e-231, v_pointer = 0x102da5c0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}, {g_type = 2144953472, data = {{v_int = 259463096, v_uint = 259463096, v_long = 259463096, v_ulong = 259463096, v_int64 = 1114385513983862264, v_uint64 = 1114385513983862264, v_float = 1.21826083e-29, v_double = 3.6314270513835376e-234, v_pointer = 0xf7717b8}, {v_int = 671630338, v_uint = 671630338, v_long = 671630338, v_ulong = 671630338, v_int64 = 2884630336711426052, v_uint64 = 2884630336711426052, v_float = 7.56426341e-15, v_double = 7.6981027934938605e-116, v_pointer = 0x28084402}}}, { g_type = 2144954812, data = {{v_int = 9502720, v_uint = 9502720, v_long = 9502720, v_ulong = 9502720, v_int64 = 40813871894852608, v_uint64 = 40813871894852608, v_float = 1.33161469e-38, v_double = 6.0522012389238875e-306, v_pointer = 0x910000}, {v_int = 2144954124, v_uint = 2144954124, v_long = 2144954124, v_ulong = 2144954124, v_int64 = 9212507814000328705, v_uint64 = 9212507814000328705, v_float = nan(0x59670c), v_double = 7.1353043962862174e+307, v_pointer = 0x7fd9670c}}}, {g_type = 2144953520, data = {{v_int = -1, v_uint = 4294967295, v_long = -1, v_ulong = 4294967295, v_int64 = -4294967276, v_uint64 = 18446744069414584340, v_float = -nan(0x7fffff), v_double = -nan(0xfffff00000014), v_pointer = 0xffffffff}, {v_int = 671622274, v_uint = 671622274, v_long = 671622274, v_ulong = 671622274, v_int64 = 2884595702095151108, v_uint64 = 2884595702095151108, v_float = 7.55743294e-15, v_double = 7.6590670669921793e-116, v_pointer = 0x28082482}}}, {g_type = 3211264, data = {{v_int = 9502720, v_uint = 9502720, v_long = 9502720, v_ulong = 9502720, v_int64 = 40813871894852608, v_uint64 = 40813871894852608, v_float = 1.33161469e-38, v_double = 6.0522012389238875e-306, v_pointer = 0x910000}, {v_int = 2144954124, v_uint = 2144954124, v_long = 2144954124, v_ulong = 2144954124, v_int64 = 9212507814000394240, v_uint64 = 9212507814000394240, v_float = nan(0x59670c), v_double = 7.1353043963516161e+307, v_pointer = 0x7fd9670c}}}, {g_type = 0, data = {{v_int = 1376256, v_uint = 1376256, v_long = 1376256, v_ulong = 1376256, v_int64 = 5910974510925056, v_uint64 = 5910974510925056, v_float = 1.92854542e-39, v_double = 2.9204094392913342e-308, v_pointer = 0x150000}, {v_int = 65536, v_uint = 65536, v_long = 65536, v_ulong = 65536, v_int64 = 281474976710656, v_uint64 = 281474976710656, v_float = 9.18354962e-41, v_double = 1.3906711615670009e-309, v_pointer = 0x10000}}}, {g_type = 255193076, data = {{ v_int = 2144953552, v_uint = 2144953552, v_long = 2144953552, v_ulong = 2144953552, v_int64 = 9212505357533366260, v_uint64 = 9212505357533366260, v_float = nan(0x5964d0), v_double = 7.1328530383948734e+307, v_pointer = 0x7fd964d0}, {v_int = 1376256, v_uint = 1376256, v_long = 1376256, v_ulong = 1376256, v_int64 = 5910976655877424, v_uint64 = 5910976655877424, v_float = 1.92854542e-39, v_double = 2.9204104990386112e-308, v_pointer = 0x150000}}}, { g_type = 2144953824, data = {{v_int = 249049048, v_uint = 249049048, v_long = 249049048, v_ulong = 249049048, v_int64 = 1069657518404889020, v_uint64 = 1069657518404889020, v_float = 5.3294183e-30, v_double = 3.7143565078642673e-237, v_pointer = 0xed82fd8}, {v_int = 2144953584, v_uint = 2144953584, v_long = 2144953584, v_ulong = 2144953584, v_int64 = 9212505494966639500, v_uint64 = 9212505494966639500, v_float = nan(0x5964f0), v_double = 7.1329901858281753e+307, v_pointer = 0x7fd964f0}}}, {g_type = 0, data = {{v_int = 2144953616, v_uint = 2144953616, v_long = 2144953616, v_ulong = 2144953616, v_int64 = 9212505634301896000, v_uint64 = 9212505634301896000, v_float = nan(0x596510), v_double = 7.1331292312889063e+307, v_pointer = 0x7fd96510}, {v_int = 249047948, v_uint = 249047948, v_long = 249047948, v_ulong = 249047948, v_int64 = 1069652793940863420, v_uint64 = 1069652793940863420, v_float = 5.32900452e-30, v_double = 3.7117789039653842e-237, v_pointer = 0xed82b8c}}}, {g_type = 2144953632, data = {{ v_int = 271807496, v_uint = 271807496, v_long = 271807496, v_ulong = 271807496, v_int64 = 1167404306127650820, v_uint64 = 1167404306127650820, v_float = 3.53909127e-29, v_double = 1.2530125843161249e-230, v_pointer = 0x10337408}, {v_int = 2144953632, v_uint = 2144953632, v_long = 2144953632, v_ulong = 2144953632, v_int64 = 9212505701148226572, v_uint64 = 9212505701148226572, v_float = nan(0x596520), v_double = 7.1331959385894563e+307, v_pointer = 0x7fd96520}}}, {g_type = 3211264, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 268811896, v_uint64 = 268811896, v_float = 0, v_double = 1.3281072300705e-315, v_pointer = 0x0}, {v_int = 805498868, v_uint = 805498868, v_long = 805498868, v_ulong = 805498868, v_int64 = 3459591295025020946, v_uint64 = 3459591295025020946, v_float = 4.76347184e-10, v_double = 2.0443232585301264e-77, v_pointer = 0x3002eff4}}}, { g_type = 2144953760, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 1, v_uint = 1, v_long = 1, v_ulong = 1, v_int64 = 4294967704, v_uint64 = 4294967704, v_float = 1.40129846e-45, v_double = 2.1219959925440558e-314, v_pointer = 0x1}}}, {g_type = 0, data = {{v_int = 2144953696, v_uint = 2144953696, v_long = 2144953696, v_ulong = 2144953696, v_int64 = 9212505976009870180, v_uint64 = 9212505976009870180, v_float = nan(0x596560), v_double = 7.1334702285633852e+307, v_pointer = 0x7fd96560}, {v_int = 260930088, v_uint = 260930088, v_long = 260930088, v_ulong = 260930088, v_int64 = 1120686194502402138, v_uint64 = 1120686194502402138, v_float = 1.39507263e-29, v_double = 9.2708425607444276e-234, v_pointer = 0xf8d7a28}}}, {g_type = 0, data = {{v_int = 805498868, v_uint = 805498868, v_long = 805498868, v_ulong = 805498868, v_int64 = 3459591295025020936, v_uint64 = 3459591295025020936, v_float = 4.76347184e-10, v_double = 2.0443232585301226e-77, v_pointer = 0x3002eff4}, {v_int = 2144953824, v_uint = 2144953824, v_long = 2144953824, v_ulong = 2144953824, v_int64 = 9212506526315490484, v_uint64 = 9212506526315490484, v_float = nan(0x5965e0), v_double = 7.1340193896331684e+307, v_pointer = 0x7fd965e0}}}, {g_type = 0, data = {{ v_int = 2144953744, v_uint = 2144953744, v_long = 2144953744, v_ulong = 2144953744, v_int64 = 9212506181912756848, v_uint64 = 9212506181912756848, v_float = nan(0x596590), v_double = 7.133675703203916e+307, v_pointer = 0x7fd96590}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 90, v_uint64 = 90, v_float = 0, v_double = 4.4465908125712189e-322, v_pointer = 0x0}}}, {g_type = 0, data = {{v_int = 805498868, v_uint = 805498868, v_long = 805498868, v_ulong = 805498868, v_int64 = 3459591295025020936, v_uint64 = 3459591295025020936, v_float = 4.76347184e-10, v_double = 2.0443232585301226e-77, v_pointer = 0x3002eff4}, {v_int = 2144953872, v_uint = 2144953872, v_long = 2144953872, v_ulong = 2144953872, v_int64 = 9212506732473920692, v_uint64 = 9212506732473920692, v_float = nan(0x596610), v_double = 7.1342251192857481e+307, v_pointer = 0x7fd96610}}}} free_me = (GValue *) 0x0 signal_return_type = 4 param_values = (GValue *) 0x7fd96430 node = (SignalNode *) 0x10362b80 i = 273404752 __PRETTY_FUNCTION__ = "IA__g_signal_emit_valist" #6 0x0f736c38 in IA__g_signal_emit (instance=0x10023748, signal_id=268493812, detail=0) at gsignal.c:2243 var_args = {{gpr = 3 '\003', fpr = 0 '\0', reserved = 17848, overflow_arg_area = 0x7fd96718, reg_save_area = 0x7fd96690}} #7 0x0f8ed264 in soup_message_got_headers () from /usr/lib/libsoup-2.2.so.8 #8 0x0f8f8ff8 in ?? () from /usr/lib/libsoup-2.2.so.8 #9 0x0f8f6608 in soup_session_send_message () from /usr/lib/libsoup-2.2.so.8 ..."
ey, this stack looks strange to me: errmsg = 0x3018902c <Address 0x3018902c out of bounds> but this is coming from: errmsg = _("Bug Buddy has encountered an error while submitting your report " "to the Bugzilla server. Details of the error are included below.\n\n"); that should be ok... Then crashing in glade_xml_get_widget is really weird.
that might be some sort of memory corruption, I've asked for a valgrind log to the bug submitter, marking NEEDINFO for now then
It could be difficult to reproduce the exact code path, because you need a bugzilla.gnome.org http bad status error. However we could reproduce easily a similar code path (bugzilla returning an error) doing this: 1.- edit /usr/share/applications/gcalctool.desktop 2.- Change bugzilla component to gcalctoolAAA 3.- run "gnome-calculator" 4.- "killall -SIGSEGV gnome-calculator" Then we will get an bugzilla error.
I've asked a valgrind log to the submitter, no reply though, closing the bug