Bug 413036 – gnome-terminal crashed with SIGSEGV in vte_terminal_accessible_text_scrolled()

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 413036 - gnome-terminal crashed with SIGSEGV in vte_terminal_accessible_text_scrolled()


Summary:	gnome-terminal crashed with SIGSEGV in vte_terminal_accessible_text_scrolled()


Status:	RESOLVED FIXED

Product:	vte
Classification:	Core
Component:	general
Version:	0.15.x
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	VTE Maintainers
QA Contact:	VTE Maintainers

URL:
Whiteboard:

Duplicates:	413401 413437 413873 414477 (view as bug list)
Depends on:
Blocks:

Reported:	2007-02-28 12:50 UTC by Sebastien Bacher
Modified:	2007-03-04 12:10 UTC

See Also:
GNOME target:	---
GNOME version:	2.17/2.18

Description Sebastien Bacher 2007-02-28 12:50:32 UTC

That bug has been opened on https://launchpad.net/bugs/88602

"Binary package hint: gnome-terminal

opened a new tab and started typing without waiting for a real promt
...
libvte9 1:0.15.4-0ubuntu1
...
"

Debug backtrace for the crash:

+ Trace 114606

#0 vte_terminal_accessible_text_scrolled
at /build/buildd/vte-0.15.4/./src/vteaccess.c line 585
#1 IA__g_cclosure_marshal_VOID__INT
at gmarshal.c line 216
#2 IA__g_closure_invoke
at gclosure.c line 490
#3 signal_emit_unlocked_R
at gsignal.c line 2440
#4 IA__g_signal_emit_valist
at gsignal.c line 2199
#5 IA__g_signal_emit_by_name
at gsignal.c line 2267
#6 vte_terminal_handle_scroll
at /build/buildd/vte-0.15.4/./src/vte.c line 943
#7 IA__g_cclosure_marshal_VOID__VOID
at gmarshal.c line 77
#8 IA__g_closure_invoke
at gclosure.c line 490
#9 signal_emit_unlocked_R
at gsignal.c line 2440
#10 IA__g_signal_emit_valist
at gsignal.c line 2199
#11 IA__g_signal_emit
at gsignal.c line 2243
#12 IA__gtk_adjustment_value_changed
at gtkadjustment.c line 363
#13 vte_terminal_emit_pending_signals
at /build/buildd/vte-0.15.4/./src/vte.c line 1598
#14 process_timeout
at /build/buildd/vte-0.15.4/./src/vte.c line 11970
#15 g_timeout_dispatch
at gmain.c line 3422
#16 IA__g_main_context_dispatch
at gmain.c line 2045
#17 g_main_context_iterate
at gmain.c line 2677

Comment 1 Sebastien Bacher 2007-02-28 12:52:28 UTC

(gdb) p *priv
$1 = {snapshot_contents_invalid = 1, snapshot_caret_invalid = 1, snapshot_text = 0x0, snapshot_characters = 0x0, 
  snapshot_attributes = 0x0, snapshot_linebreaks = 0x0, snapshot_caret = -1, action_descriptions = {0x0}}

Comment 2 Chris Wilson 2007-02-28 13:09:50 UTC

This was an old bug recently exposed...
Fixed in r1775: 2007-02-27  Chris Wilson  <chris@chris-wilson.co.uk>

	* src/vteaccess.c  (vte_terminal_accessible_text_scrolled):
		Consistently guard against the snapshot being NULL.

Comment 3 Chris Wilson 2007-03-01 11:26:43 UTC

*** Bug 413401 has been marked as a duplicate of this bug. ***

Comment 4 Chris Wilson 2007-03-01 14:35:08 UTC

*** Bug 413437 has been marked as a duplicate of this bug. ***

Comment 5 Chris Wilson 2007-03-02 15:13:28 UTC

*** Bug 413873 has been marked as a duplicate of this bug. ***

Comment 6 Chris Wilson 2007-03-04 12:10:44 UTC

*** Bug 414477 has been marked as a duplicate of this bug. ***