After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 484988 - rhythmbox crashes on exit with libsoup >2.2.101
rhythmbox crashes on exit with libsoup >2.2.101
Status: RESOLVED FIXED
Product: libsoup
Classification: Core
Component: HTTP Transport
2.2.x
Other All
: High critical
: ---
Assigned To: Dan Winship
Dan Winship
: 485116 485306 485363 485584 485657 485765 486533 487006 487007 487305 487334 487364 488049 488144 488225 488322 488341 488444 489152 489274 489537 489568 489583 489585 489621 489645 489691 489740 489808 489822 489860 489998 490038 490078 490250 490264 490276 490287 490453 490636 490707 490722 490752 490865 490883 490966 491339 491593 491656 491999 492519 492630 492778 492786 492874 492958 493023 493155 493195 493235 493387 493394 493640 493648 493872 493908 494019 494294 494300 494340 494523 494647 494693 494708 494730 494820 494914 494974 495069 495170 495398 495554 495624 495662 495773 495925 495979 496000 496292 496480 496562 496976 497848 497888 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2007-10-09 09:24 UTC by abhinav.sarkar
Modified: 2007-11-25 11:11 UTC
See Also:
GNOME target: ---
GNOME version: 2.19/2.20


Attachments
stacktrace from Latest crash. (53.38 KB, text/plain)
2007-10-28 00:02 UTC, Hussam Al-Tayeb
  Details
Patch to fix. (3.46 KB, patch)
2007-10-28 11:04 UTC, Rob Bradford
none Details | Review
Patch to fix (3.48 KB, patch)
2007-10-28 11:06 UTC, Rob Bradford
none Details | Review

Description abhinav.sarkar 2007-10-09 09:24:54 UTC
Version: 0.10.1

What were you doing when the application crashed?



Distribution: Debian lenny/sid
Gnome Release: 2.20.0 2007-09-21 (Debian)
BugBuddy Version: 2.20.0

System: Linux 2.6.22-2-686 #1 SMP Fri Aug 31 00:24:01 UTC 2007 i686
X Vendor: The X.Org Foundation
X Vendor Release: 10400000
Selinux: No
Accessibility: Disabled
GTK+ Theme: Toxig
Icon Theme: Neu

Memory status: size: 108437504 vsize: 108437504 resident: 44474368 share: 20754432 rss: 44474368 rss_rlim: 4294967295
CPU usage: start_time: 1191916156 rtime: 22305 utime: 21176 stime: 1129 cutime:3 cstime: 14 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/rhythmbox'

Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 0xb6c666c0 (LWP 22865)]
[New Thread 0xb38fdb90 (LWP 22879)]
0xffffe410 in __kernel_vsyscall ()

Thread 1 (Thread 0xb6c666c0 (LWP 22865))

  • #0 __kernel_vsyscall
  • #1 waitpid
    from /lib/i686/cmov/libpthread.so.0
  • #2 IA__g_spawn_sync
    at /tmp/buildd/glib2.0-2.14.1/glib/gspawn.c line 364
  • #3 IA__g_spawn_command_line_sync
    at /tmp/buildd/glib2.0-2.14.1/glib/gspawn.c line 672
  • #4 ??
    from /usr/lib/gtk-2.0/modules/libgnomebreakpad.so
  • #5 <signal handler called>
  • #6 gdk_event_dispatch
    at /tmp/buildd/gtk+2.0-2.12.0/gdk/x11/gdkevents-x11.c line 2356
  • #7 IA__g_main_context_dispatch
    at /tmp/buildd/glib2.0-2.14.1/glib/gmain.c line 2061
  • #8 g_main_context_iterate
    at /tmp/buildd/glib2.0-2.14.1/glib/gmain.c line 2694
  • #9 IA__g_main_loop_run
    at /tmp/buildd/glib2.0-2.14.1/glib/gmain.c line 2898
  • #10 IA__gtk_main
    at /tmp/buildd/gtk+2.0-2.12.0/gtk/gtkmain.c line 1144
  • #11 main
    at main.c line 384
  • #0 __kernel_vsyscall


----------- .xsession-errors (151277 sec old) ---------------------
Selected video codec: [ffodivx] vfm: ffmpeg (FFmpeg MPEG-4)
==========================================================================
==========================================================================
Opening audio decoder: [mp3lib] MPEG layer-2, layer-3
AUDIO: 48000 Hz, 2 ch, s16le, 128.0 kbit/8.33% (ratio: 16000->192000)
Selected audio codec: [mp3] afm: mp3lib (mp3lib MPEG layer-2, layer-3)
==========================================================================
AO: [oss] 48000Hz 2ch s16le (2 bytes per sample)
Starting playback...
VDec: vo config request - 640 x 352 (preferred colorspace: Planar YV12)
VDec: using Planar YV12 as output csp (no 0)
Movie-Aspect is 1.82:1 - prescaling to correct movie aspect.
VO: [xv] 640x352 => 640x352 Planar YV12 
A:   0.1 V:   0.0 A-V:  0.087 ct:  0.000   1/  1 ??% ??% ??,?% 0 0              
A:   0.1 V:   0.0 A-V:  0.104 ct:  0.003   2/  2 ??% ??% ??,?% 0 0              
A:   0.2 V:   0.1 A-V:  0.071 ct:  0.0
...Too much output, ignoring rest...
--------------------------------------------------
Comment 1 Jonathan Matthew 2007-10-13 06:53:32 UTC
*** Bug 485116 has been marked as a duplicate of this bug. ***
Comment 2 Jonathan Matthew 2007-10-13 06:56:07 UTC
*** Bug 485363 has been marked as a duplicate of this bug. ***
Comment 3 Jonathan Matthew 2007-10-13 07:06:49 UTC
*** Bug 485584 has been marked as a duplicate of this bug. ***
Comment 4 Jonathan Matthew 2007-10-13 07:07:05 UTC
*** Bug 485657 has been marked as a duplicate of this bug. ***
Comment 5 Jonathan Matthew 2007-10-13 07:07:22 UTC
*** Bug 485765 has been marked as a duplicate of this bug. ***
Comment 6 Jonathan Matthew 2007-10-16 21:50:20 UTC
*** Bug 486533 has been marked as a duplicate of this bug. ***
Comment 7 Jonathan Matthew 2007-10-16 21:50:21 UTC
*** Bug 487305 has been marked as a duplicate of this bug. ***
Comment 8 Hussam Al-Tayeb 2007-10-16 21:58:52 UTC
Is it an incompatibility with glib 2.14.x issue?
I'm getting the on exit crash in latest trunk svn (0.11.2svn) and I updated to gnome 2.20.0 around 5 days ago.
Comment 9 Jonathan Matthew 2007-10-17 08:02:05 UTC
*** Bug 487006 has been marked as a duplicate of this bug. ***
Comment 10 Jonathan Matthew 2007-10-17 08:02:40 UTC
*** Bug 487007 has been marked as a duplicate of this bug. ***
Comment 11 Jonathan Matthew 2007-10-17 08:08:47 UTC
*** Bug 487334 has been marked as a duplicate of this bug. ***
Comment 12 Jonathan Matthew 2007-10-17 08:09:13 UTC
*** Bug 485306 has been marked as a duplicate of this bug. ***
Comment 13 Jonathan Matthew 2007-10-17 08:10:30 UTC
*** Bug 487364 has been marked as a duplicate of this bug. ***
Comment 14 Sven Arvidsson 2007-10-19 21:31:15 UTC
A similar bug was reported to Debian in http://bugs.debian.org/446288

Claudio Saavedra pointed out that it only happens with the last.fm plugin enabled;

"The crash seems to happen when the last.fm plugin is activated, and more
specifically, after this plugin has authenticated against the
audioscrobbler server. Another way to trigger the crash is to wait for
the plugin to authenticate, and then disable it."
Comment 15 Jonathan Matthew 2007-10-19 23:27:32 UTC
*** Bug 488444 has been marked as a duplicate of this bug. ***
Comment 16 Jonathan Matthew 2007-10-20 00:34:52 UTC
Commenting out the code that cleans up the libsoup session in rb_audioscrobbler_dispose seems to stop it crashing.
Comment 17 Jonathan Matthew 2007-10-20 00:50:09 UTC
Downgrading to libsoup 2.2.100 also stops it crashing.
Comment 18 Jonathan Matthew 2007-10-20 02:40:27 UTC
Seems to have been introduced with this change: http://svn.gnome.org/viewvc/libsoup/trunk/libsoup/soup-session-async.c?r1=857&r2=922
Comment 19 Jonathan Matthew 2007-10-20 03:33:19 UTC
*** Bug 488225 has been marked as a duplicate of this bug. ***
Comment 20 Ritesh Khadgaray ( irc:ritz) 2007-10-20 19:27:42 UTC
w.r.t. bug 488444, which has been marked a dup of this bug

I moved all plugins out of tree

 $ mv /usr/lib/rhythmbox /tmp

started rb, and clicked on close. rb still segfaulted and opened up again :(
Comment 21 Jonathan Matthew 2007-10-23 12:13:51 UTC
*** Bug 488049 has been marked as a duplicate of this bug. ***
Comment 22 Jonathan Matthew 2007-10-23 12:14:29 UTC
*** Bug 488144 has been marked as a duplicate of this bug. ***
Comment 23 Jonathan Matthew 2007-10-23 12:17:13 UTC
*** Bug 488341 has been marked as a duplicate of this bug. ***
Comment 24 Jonathan Matthew 2007-10-23 12:31:14 UTC
*** Bug 489274 has been marked as a duplicate of this bug. ***
Comment 25 Jonathan Matthew 2007-10-23 21:29:03 UTC
*** Bug 488322 has been marked as a duplicate of this bug. ***
Comment 26 Jonathan Matthew 2007-10-24 08:02:01 UTC
*** Bug 489568 has been marked as a duplicate of this bug. ***
Comment 27 Jonathan Matthew 2007-10-24 08:02:22 UTC
*** Bug 489152 has been marked as a duplicate of this bug. ***
Comment 28 Jonathan Matthew 2007-10-24 08:07:50 UTC
*** Bug 489583 has been marked as a duplicate of this bug. ***
Comment 29 Jonathan Matthew 2007-10-24 08:08:45 UTC
*** Bug 489621 has been marked as a duplicate of this bug. ***
Comment 30 Jonathan Matthew 2007-10-24 08:09:24 UTC
*** Bug 489645 has been marked as a duplicate of this bug. ***
Comment 31 Jonathan Matthew 2007-10-24 08:10:34 UTC
*** Bug 489691 has been marked as a duplicate of this bug. ***
Comment 32 Jonathan Matthew 2007-10-24 08:49:57 UTC
*** Bug 489537 has been marked as a duplicate of this bug. ***
Comment 33 Jonathan Matthew 2007-10-24 08:51:27 UTC
*** Bug 489585 has been marked as a duplicate of this bug. ***
Comment 34 Jonathan Matthew 2007-10-24 22:15:24 UTC
*** Bug 489860 has been marked as a duplicate of this bug. ***
Comment 35 Jonathan Matthew 2007-10-27 03:25:17 UTC
*** Bug 489740 has been marked as a duplicate of this bug. ***
Comment 36 Jonathan Matthew 2007-10-27 03:26:30 UTC
*** Bug 489998 has been marked as a duplicate of this bug. ***
Comment 37 Jonathan Matthew 2007-10-27 03:32:00 UTC
*** Bug 490038 has been marked as a duplicate of this bug. ***
Comment 38 Jonathan Matthew 2007-10-27 03:35:05 UTC
*** Bug 490276 has been marked as a duplicate of this bug. ***
Comment 39 Jonathan Matthew 2007-10-27 03:37:27 UTC
*** Bug 490287 has been marked as a duplicate of this bug. ***
Comment 40 Jonathan Matthew 2007-10-27 04:04:38 UTC
*** Bug 489808 has been marked as a duplicate of this bug. ***
Comment 41 Jonathan Matthew 2007-10-27 04:04:57 UTC
*** Bug 489822 has been marked as a duplicate of this bug. ***
Comment 42 Jonathan Matthew 2007-10-27 04:07:04 UTC
*** Bug 490078 has been marked as a duplicate of this bug. ***
Comment 43 Jonathan Matthew 2007-10-27 04:07:56 UTC
*** Bug 490250 has been marked as a duplicate of this bug. ***
Comment 44 Jonathan Matthew 2007-10-27 04:08:16 UTC
*** Bug 490264 has been marked as a duplicate of this bug. ***
Comment 45 Jonathan Matthew 2007-10-27 04:25:48 UTC
*** Bug 490453 has been marked as a duplicate of this bug. ***
Comment 46 Jonathan Matthew 2007-10-27 04:42:08 UTC
*** Bug 490636 has been marked as a duplicate of this bug. ***
Comment 47 Jonathan Matthew 2007-10-27 04:42:48 UTC
*** Bug 490707 has been marked as a duplicate of this bug. ***
Comment 48 Hussam Al-Tayeb 2007-10-28 00:02:10 UTC
Created attachment 97997 [details]
stacktrace from Latest crash.

I attached a stacktrace from my crash on exit.
Comment 49 Rob Bradford 2007-10-28 10:49:34 UTC
Reassigning to libsoup.
Comment 50 Rob Bradford 2007-10-28 10:52:38 UTC
Thanks to Hussam I've identified that this crash is due to libsoup potentially corrupting the stack.

The call to g_object_add_weak_pointer is not matched with a call to g_object_remove_weak_pointer in the case where the object is not disposed in the idle callback. This means that when the object is actually finally disposed that address on the stack is rewritten to NULL causing this crash.

Comment 51 Rob Bradford 2007-10-28 11:04:06 UTC
Created attachment 98014 [details] [review]
Patch to fix.
Comment 52 Rob Bradford 2007-10-28 11:06:13 UTC
Created attachment 98015 [details] [review]
Patch to fix

Actually include the bug number in the ChangeLog. Too early in the morning ;-)
Comment 53 Jonathan Matthew 2007-10-28 11:39:32 UTC
*** Bug 490883 has been marked as a duplicate of this bug. ***
Comment 54 Jonathan Matthew 2007-10-28 11:41:22 UTC
*** Bug 490966 has been marked as a duplicate of this bug. ***
Comment 55 Jonathan Matthew 2007-10-28 11:41:59 UTC
*** Bug 490722 has been marked as a duplicate of this bug. ***
Comment 56 Jonathan Matthew 2007-10-28 11:44:18 UTC
*** Bug 490752 has been marked as a duplicate of this bug. ***
Comment 57 Jonathan Matthew 2007-10-28 11:47:02 UTC
*** Bug 490865 has been marked as a duplicate of this bug. ***
Comment 58 Dan Winship 2007-10-28 17:29:59 UTC
Doh. Fixed in head and will go out shortly as part of 2.2.103.
Comment 59 Jonathan Matthew 2007-10-30 11:58:45 UTC
*** Bug 491656 has been marked as a duplicate of this bug. ***
Comment 60 Jonathan Matthew 2007-10-30 11:59:20 UTC
*** Bug 491593 has been marked as a duplicate of this bug. ***
Comment 61 Jonathan Matthew 2007-10-30 12:00:16 UTC
*** Bug 491339 has been marked as a duplicate of this bug. ***
Comment 62 Jonathan Matthew 2007-10-31 22:41:53 UTC
*** Bug 491999 has been marked as a duplicate of this bug. ***
Comment 63 Ritesh Khadgaray ( irc:ritz) 2007-11-01 21:17:34 UTC
*** Bug 488444 has been marked as a duplicate of this bug. ***
Comment 64 Jonathan Matthew 2007-11-03 07:56:59 UTC
*** Bug 492519 has been marked as a duplicate of this bug. ***
Comment 65 Jonathan Matthew 2007-11-03 07:59:25 UTC
*** Bug 492630 has been marked as a duplicate of this bug. ***
Comment 66 Jonathan Matthew 2007-11-03 08:04:43 UTC
*** Bug 492778 has been marked as a duplicate of this bug. ***
Comment 67 Jonathan Matthew 2007-11-03 08:05:14 UTC
*** Bug 492786 has been marked as a duplicate of this bug. ***
Comment 68 Jonathan Matthew 2007-11-03 08:06:02 UTC
*** Bug 492874 has been marked as a duplicate of this bug. ***
Comment 69 Jonathan Matthew 2007-11-05 08:33:23 UTC
*** Bug 493640 has been marked as a duplicate of this bug. ***
Comment 70 Jonathan Matthew 2007-11-07 04:13:45 UTC
*** Bug 492958 has been marked as a duplicate of this bug. ***
Comment 71 Jonathan Matthew 2007-11-07 04:15:27 UTC
*** Bug 493023 has been marked as a duplicate of this bug. ***
Comment 72 Jonathan Matthew 2007-11-07 04:16:59 UTC
*** Bug 493195 has been marked as a duplicate of this bug. ***
Comment 73 Jonathan Matthew 2007-11-07 04:56:24 UTC
*** Bug 493394 has been marked as a duplicate of this bug. ***
Comment 74 Jonathan Matthew 2007-11-07 05:07:12 UTC
*** Bug 493872 has been marked as a duplicate of this bug. ***
Comment 75 Jonathan Matthew 2007-11-07 05:12:47 UTC
*** Bug 493155 has been marked as a duplicate of this bug. ***
Comment 76 Jonathan Matthew 2007-11-07 05:22:02 UTC
*** Bug 494019 has been marked as a duplicate of this bug. ***
Comment 77 Jonathan Matthew 2007-11-07 05:23:48 UTC
*** Bug 494300 has been marked as a duplicate of this bug. ***
Comment 78 Jonathan Matthew 2007-11-07 05:24:58 UTC
*** Bug 494340 has been marked as a duplicate of this bug. ***
Comment 79 Jonathan Matthew 2007-11-07 05:34:31 UTC
*** Bug 494294 has been marked as a duplicate of this bug. ***
Comment 80 Jonathan Matthew 2007-11-07 05:46:34 UTC
*** Bug 493235 has been marked as a duplicate of this bug. ***
Comment 81 Jonathan Matthew 2007-11-07 05:47:25 UTC
*** Bug 493387 has been marked as a duplicate of this bug. ***
Comment 82 Jonathan Matthew 2007-11-07 05:51:51 UTC
*** Bug 493648 has been marked as a duplicate of this bug. ***
Comment 83 Jonathan Matthew 2007-11-07 05:53:49 UTC
*** Bug 493908 has been marked as a duplicate of this bug. ***
Comment 84 Jonathan Matthew 2007-11-07 11:03:15 UTC
*** Bug 494523 has been marked as a duplicate of this bug. ***
Comment 85 Jonathan Matthew 2007-11-10 12:43:27 UTC
*** Bug 494647 has been marked as a duplicate of this bug. ***
Comment 86 Jonathan Matthew 2007-11-10 12:43:44 UTC
*** Bug 494693 has been marked as a duplicate of this bug. ***
Comment 87 Jonathan Matthew 2007-11-10 12:47:04 UTC
*** Bug 494730 has been marked as a duplicate of this bug. ***
Comment 88 Jonathan Matthew 2007-11-10 12:47:29 UTC
*** Bug 494914 has been marked as a duplicate of this bug. ***
Comment 89 Jonathan Matthew 2007-11-10 13:17:35 UTC
*** Bug 494974 has been marked as a duplicate of this bug. ***
Comment 90 Jonathan Matthew 2007-11-10 13:18:51 UTC
*** Bug 495069 has been marked as a duplicate of this bug. ***
Comment 91 Jonathan Matthew 2007-11-10 13:21:04 UTC
*** Bug 495170 has been marked as a duplicate of this bug. ***
Comment 92 Jonathan Matthew 2007-11-10 13:27:38 UTC
*** Bug 495398 has been marked as a duplicate of this bug. ***
Comment 93 Jonathan Matthew 2007-11-10 14:08:52 UTC
*** Bug 494708 has been marked as a duplicate of this bug. ***
Comment 94 Jonathan Matthew 2007-11-10 14:10:06 UTC
*** Bug 494820 has been marked as a duplicate of this bug. ***
Comment 95 Jonathan Matthew 2007-11-10 14:11:39 UTC
*** Bug 495554 has been marked as a duplicate of this bug. ***
Comment 96 Jonathan Matthew 2007-11-15 09:23:35 UTC
*** Bug 495624 has been marked as a duplicate of this bug. ***
Comment 97 Jonathan Matthew 2007-11-15 09:25:19 UTC
*** Bug 495662 has been marked as a duplicate of this bug. ***
Comment 98 Jonathan Matthew 2007-11-15 09:26:47 UTC
*** Bug 495773 has been marked as a duplicate of this bug. ***
Comment 99 Jonathan Matthew 2007-11-15 09:31:14 UTC
*** Bug 495925 has been marked as a duplicate of this bug. ***
Comment 100 Jonathan Matthew 2007-11-15 09:32:01 UTC
*** Bug 495979 has been marked as a duplicate of this bug. ***
Comment 101 Jonathan Matthew 2007-11-15 09:34:52 UTC
*** Bug 496000 has been marked as a duplicate of this bug. ***
Comment 102 Jonathan Matthew 2007-11-15 10:11:34 UTC
*** Bug 496292 has been marked as a duplicate of this bug. ***
Comment 103 Jonathan Matthew 2007-11-15 10:14:00 UTC
*** Bug 496480 has been marked as a duplicate of this bug. ***
Comment 104 Jonathan Matthew 2007-11-15 10:15:26 UTC
*** Bug 496562 has been marked as a duplicate of this bug. ***
Comment 105 Jonathan Matthew 2007-11-15 10:18:54 UTC
*** Bug 496976 has been marked as a duplicate of this bug. ***
Comment 106 Susana 2007-11-25 11:11:30 UTC
*** Bug 497848 has been marked as a duplicate of this bug. ***
Comment 107 Susana 2007-11-25 11:11:39 UTC
*** Bug 497888 has been marked as a duplicate of this bug. ***