[New LWP 13380]
[New LWP 13382]
[New LWP 13381]
[New LWP 13387]
[New LWP 13396]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/libexec/gnome-terminal-server'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  vte_terminal_accessible_get_text (text=<optimized out>, start_offset=0, end_offset=24) at vteaccess.c:864
864		start = g_array_index(priv->snapshot_characters, int, start_offset);

Thread 5 (Thread 0x7f275a60a700 (LWP 13396)):
#0  0x00000039ecef51fd in poll () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x0000003a9fc32c51 in poll (__timeout=-1, __nfds=2, __fds=0x7f27500049d0) at /usr/include/bits/poll2.h:46
No locals.
#2  poll_func (ufds=0x7f27500049d0, nfds=2, timeout=-1, userdata=0x261dac0) at pulse/thread-mainloop.c:71
        mutex = 0x261dac0
        r = <optimized out>
#3  0x0000003a9fc24231 in pa_mainloop_poll (m=<optimized out>) at pulse/mainloop.c:851
        __func__ = "pa_mainloop_poll"
        __PRETTY_FUNCTION__ = "pa_mainloop_poll"
#4  0x0000003a9fc248ce in pa_mainloop_iterate (m=<optimized out>, block=<optimized out>, retval=<optimized out>) at pulse/mainloop.c:933
        r = <optimized out>
#5  0x0000003a9fc24980 in pa_mainloop_run (m=<optimized out>, retval=<optimized out>) at pulse/mainloop.c:951
        r = <optimized out>
#6  0x0000003a9fc32be6 in thread (userdata=0x26151d0) at pulse/thread-mainloop.c:90
        m = 0x26151d0
        mask = {__val = {18446744067267100671, 18446744073709551615 <repeats 15 times>}}
#7  0x0000003aa004f888 in internal_thread_func (userdata=0x261d890) at pulsecore/thread-posix.c:83
        t = 0x261d890
#8  0x00000039ed60752a in start_thread (arg=0x7f275a60a700) at pthread_create.c:310
        __res = <optimized out>
        pd = 0x7f275a60a700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139806996735744, 4667624646764179987, 140735515457024, 0, 139806996735744, 139806996736448, -4717503962646007277, 4662739788924105235}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#9  0x00000039ecf0079d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.

Thread 4 (Thread 0x7f275b220700 (LWP 13387)):
#0  0x00000039ecef51fd in poll () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00000039ef649e24 in g_main_context_poll (priority=2147483647, n_fds=2, fds=0x7f274c0008c0, timeout=-1, context=0x26140c0) at gmain.c:4076
        poll_func = 0x39ef659240 <g_poll>
#2  g_main_context_iterate (context=context@entry=0x26140c0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3776
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x7f274c0008c0
#3  0x00000039ef649f3c in g_main_context_iteration (context=0x26140c0, may_block=may_block@entry=1) at gmain.c:3842
        retval = <optimized out>
#4  0x00000039ef649f79 in glib_worker_main (data=<optimized out>) at gmain.c:5589
No locals.
#5  0x00000039ef6707b5 in g_thread_proxy (data=0x2429a30) at gthread.c:764
        thread = 0x2429a30
#6  0x00000039ed60752a in start_thread (arg=0x7f275b220700) at pthread_create.c:310
        __res = <optimized out>
        pd = 0x7f275b220700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139807009408768, 4667624646764179987, 140735515454720, 0, 139807009408768, 139807009409472, -4717505623724609005, 4662739788924105235}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#7  0x00000039ecf0079d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.

Thread 3 (Thread 0x7f2761548700 (LWP 13381)):
#0  0x00000039ecef51fd in poll () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00000039ef649e24 in g_main_context_poll (priority=2147483647, n_fds=2, fds=0x7f275c0010e0, timeout=-1, context=0x2116930) at gmain.c:4076
        poll_func = 0x39ef659240 <g_poll>
#2  g_main_context_iterate (context=0x2116930, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3776
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x7f275c0010e0
#3  0x00000039ef64a1b2 in g_main_loop_run (loop=0x21168c0) at gmain.c:3975
        __FUNCTION__ = "g_main_loop_run"
#4  0x0000003bcbadad96 in gdbus_shared_thread_func (user_data=0x2116900) at gdbusprivate.c:273
        data = 0x2116900
#5  0x00000039ef6707b5 in g_thread_proxy (data=0x20c20a0) at gthread.c:764
        thread = 0x20c20a0
#6  0x00000039ed60752a in start_thread (arg=0x7f2761548700) at pthread_create.c:310
        __res = <optimized out>
        pd = 0x7f2761548700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139807113381632, 4667624646764179987, 140735515453952, 0, 139807113381632, 139807113382336, -4717387250130963949, 4662739788924105235}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#7  0x00000039ecf0079d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.

Thread 2 (Thread 0x7f275bfff700 (LWP 13382)):
#0  0x00000039ecef51fd in poll () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00000039ef649e24 in g_main_context_poll (priority=2147483647, n_fds=1, fds=0x7f27540010c0, timeout=-1, context=0x2157c70) at gmain.c:4076
        poll_func = 0x39ef659240 <g_poll>
#2  g_main_context_iterate (context=context@entry=0x2157c70, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3776
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 1
        allocated_nfds = 1
        fds = 0x7f27540010c0
#3  0x00000039ef649f3c in g_main_context_iteration (context=context@entry=0x2157c70, may_block=may_block@entry=1) at gmain.c:3842
        retval = <optimized out>
#4  0x00007f27606d524d in dconf_gdbus_worker_thread (user_data=0x2157c70) at dconf-gdbus-thread.c:82
        context = 0x2157c70
#5  0x00000039ef6707b5 in g_thread_proxy (data=0x2317590) at gthread.c:764
        thread = 0x2317590
#6  0x00000039ed60752a in start_thread (arg=0x7f275bfff700) at pthread_create.c:310
        __res = <optimized out>
        pd = 0x7f275bfff700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139807023953664, 4667624646764179987, 140735515455488, 0, 139807023953664, 139807023954368, -4717507290708790765, 4662739788924105235}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
#7  0x00000039ecf0079d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109
No locals.

Thread 1 (Thread 0x7f2767f62a00 (LWP 13380)):
#0  vte_terminal_accessible_get_text (text=<optimized out>, start_offset=0, end_offset=24) at vteaccess.c:864
        accessible = 0x26322c0
        priv = <optimized out>
        start = <optimized out>
        end = <optimized out>
        ret = <optimized out>
        __FUNCTION__ = "vte_terminal_accessible_get_text"
#1  0x0000003bd4810718 in text_changed_event_listener (signal_hint=signal_hint@entry=0x7fff8a67ebf0, n_param_values=<optimized out>, param_values=param_values@entry=0x7fff8a67ec50, data=<optimized out>) at event.c:903
        accessible = 0x26322c0
        signal_query = {signal_id = 342, signal_name = 0x23fbe09 "text-changed", itype = 36819552, signal_flags = (G_SIGNAL_RUN_LAST | G_SIGNAL_DETAILED), return_type = 4, n_params = 2, param_types = 0x2119aa0}
        name = 0x23fbe09 "text-changed"
        minor = 0x23fc052 "delete"
        selected = <optimized out>
        detail1 = 0
        detail2 = 24
#2  0x0000003bcaa2160b in signal_emit_unlocked_R (node=node@entry=0x2119a30, detail=detail@entry=2373, instance=instance@entry=0x26322c0, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7fff8a67ec50) at gsignal.c:3519
        hook_func = 0x3bd4810680 <text_changed_event_listener>
        signal_hook = 0x2428e80
        need_destroy = <optimized out>
        was_in_call = 0
        may_recurse = 1
        hook = 0x2428e80
        accumulator = 0x0
        emission = {next = 0x7fff8a67f120, instance = 0x26322c0, ihint = {signal_id = 342, detail = 2373, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_HOOK, chain_type = 4}
        handler_list = <optimized out>
        return_accu = 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 342
        max_sequential_handler_number = 72768
        return_value_altered = 0
#3  0x0000003bcaa2a181 in g_signal_emit_valist (instance=instance@entry=0x26322c0, signal_id=signal_id@entry=342, detail=detail@entry=2373, var_args=var_args@entry=0x7fff8a67ee68) at gsignal.c:3309
        instance_and_params = 0x7fff8a67ec50
        signal_return_type = <optimized out>
        param_values = 0x7fff8a67ec68
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __FUNCTION__ = "g_signal_emit_valist"
#4  0x0000003bcaa2a8fa in g_signal_emit_by_name (instance=0x26322c0, detailed_signal=detailed_signal@entry=0x3a97c8205c "text-changed::delete") at gsignal.c:3405
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff8a67efa0, reg_save_area = 0x7fff8a67eeb0}}
        detail = 2373
        signal_id = 342
        itype = 35227152
        __FUNCTION__ = "g_signal_emit_by_name"
#5  0x0000003a97c2b5c1 in emit_text_changed_delete (object=<optimized out>, text=text@entry=0x2a42a00 "  remotes/epic/promoted\n  remotes/epic/release\n  remotes/ouya/4.0\n  remotes/ouya/4.1\n  remotes/ouya/4.2\n  remotes/ouya/4.3\n  remotes/ouya/4.4\n  remotes/ouya/4.5\n  remotes/ouya/4.6\n  remotes/ouya/4.6-O"..., offset=offset@entry=0, len=len@entry=24) at vteaccess.c:197
        start = <optimized out>
        count = <optimized out>
#6  0x0000003a97c2b900 in emit_text_changed_delete (len=24, offset=0, text=0x2a42a00 "  remotes/epic/promoted\n  remotes/epic/release\n  remotes/ouya/4.0\n  remotes/ouya/4.1\n  remotes/ouya/4.2\n  remotes/ouya/4.3\n  remotes/ouya/4.4\n  remotes/ouya/4.5\n  remotes/ouya/4.6\n  remotes/ouya/4.6-O"..., object=<optimized out>) at vteaccess.c:611
No locals.
#7  vte_terminal_accessible_text_scrolled (terminal=<optimized out>, howmuch=<optimized out>, data=0x26322c0) at vteaccess.c:602
        inserted = 0
        accessible = <optimized out>
        priv = <optimized out>
        attr = <optimized out>
        delta = <optimized out>
        row_count = <optimized out>
        i = <optimized out>
        len = <optimized out>
        __FUNCTION__ = "vte_terminal_accessible_text_scrolled"
#8  0x0000003bcaa11fcb in g_cclosure_marshal_VOID__INTv (closure=<optimized out>, return_value=<optimized out>, instance=<optimized out>, args=<optimized out>, marshal_data=<optimized out>, n_params=<optimized out>, param_types=0x216e870) at gmarshal.c:410
        cc = <optimized out>
        data1 = <optimized out>
        data2 = <optimized out>
        callback = <optimized out>
        arg0 = <optimized out>
        args_copy = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff8a67f380, reg_save_area = 0x7fff8a67f290}}
#9  0x0000003bcaa0ff64 in _g_closure_invoke_va (closure=closure@entry=0x29dd530, return_value=return_value@entry=0x0, instance=instance@entry=0x28fcf50, args=args@entry=0x7fff8a67f248, n_params=<optimized out>, param_types=0x216e870) at gclosure.c:831
        marshal = <optimized out>
        marshal_data = <optimized out>
        in_marshal = 0
        real_closure = 0x29dd510
        __FUNCTION__ = "_g_closure_invoke_va"
#10 0x0000003bcaa29b60 in g_signal_emit_valist (instance=instance@entry=0x28fcf50, signal_id=signal_id@entry=304, detail=detail@entry=0, var_args=var_args@entry=0x7fff8a67f248) at gsignal.c:3218
        return_accu = 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x0
        emission = {next = 0x0, instance = 0x28fcf50, ihint = {signal_id = 304, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 36156176}
        signal_id = 304
        instance_type = 36156176
        emission_return = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = 4
        static_scope = 0
        fastpath_handler = <optimized out>
        closure = 0x29dd530
        run_type = <optimized out>
        l = <optimized out>
        fastpath = <optimized out>
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __FUNCTION__ = "g_signal_emit_valist"
#11 0x0000003bcaa2a8fa in g_signal_emit_by_name (instance=0x28fcf50, detailed_signal=0x3a97c8005f "text-scrolled") at gsignal.c:3405
        var_args = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff8a67f380, reg_save_area = 0x7fff8a67f290}}
        detail = 0
        signal_id = 304
        itype = 36156176
        __FUNCTION__ = "g_signal_emit_by_name"
#12 0x0000003a97c19f5b in vte_terminal_handle_scroll (terminal=<optimized out>) at vte.c:986
        dy = <optimized out>
        adj = <optimized out>
        screen = <optimized out>
#13 0x0000003bcaa0fd35 in g_closure_invoke (closure=0x270de70, return_value=return_value@entry=0x0, n_param_values=1, param_values=param_values@entry=0x7fff8a67f570, invocation_hint=invocation_hint@entry=0x7fff8a67f510) at gclosure.c:768
        marshal = <optimized out>
        marshal_data = <optimized out>
        in_marshal = 0
        real_closure = 0x270de50
        __FUNCTION__ = "g_closure_invoke"
#14 0x0000003bcaa21a42 in signal_emit_unlocked_R (node=node@entry=0x21753f0, detail=detail@entry=0, instance=instance@entry=0x2c6f880, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7fff8a67f570) at gsignal.c:3553
        tmp = <optimized out>
        handler = 0x296da40
        accumulator = 0x0
        emission = {next = 0x0, instance = 0x2c6f880, ihint = {signal_id = 313, detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 4}
        handler_list = <optimized out>
        return_accu = 0x0
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        signal_id = 313
        max_sequential_handler_number = 72768
        return_value_altered = 1
#15 0x0000003bcaa2a181 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7fff8a67f6f0) at gsignal.c:3309
        instance_and_params = 0x7fff8a67f570
        signal_return_type = <optimized out>
        param_values = 0x7fff8a67f588
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __FUNCTION__ = "g_signal_emit_valist"
#16 0x0000003bcaa2a3af in g_signal_emit (instance=instance@entry=0x2c6f880, signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3365
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fff8a67f7d0, reg_save_area = 0x7fff8a67f710}}
#17 0x0000003a99ae576a in gtk_adjustment_value_changed (adjustment=0x2c6f880) at gtkadjustment.c:894
No locals.
#18 0x0000003a97c2315f in vte_terminal_emit_pending_signals (terminal=<optimized out>) at vte.c:12787
        object = <optimized out>
        window = <optimized out>
#19 0x0000003a97c23bd0 in vte_terminal_process_incoming (terminal=<optimized out>) at vte.c:3950
        screen = <optimized out>
        cursor = <optimized out>
        cursor_visible = <optimized out>
        bbox_topleft = <optimized out>
        bbox_bottomright = <optimized out>
        wbuf = <optimized out>
        c = <optimized out>
        wcount = <optimized out>
        start = <optimized out>
        delta = <optimized out>
        leftovers = <optimized out>
        modified = <optimized out>
        bottom = <optimized out>
        again = <optimized out>
        invalidated_text = <optimized out>
        in_scroll_region = <optimized out>
        unichars = <optimized out>
        chunk = <optimized out>
        next_chunk = <optimized out>
        achunk = <optimized out>
        __FUNCTION__ = "vte_terminal_process_incoming"
#20 0x0000003a97c24198 in time_process_incoming (terminal=<optimized out>) at vte.c:12842
        elapsed = <optimized out>
        target = <optimized out>
#21 0x0000003a97c28c9f in process_timeout (data=<optimized out>) at vte.c:12891
        l = <optimized out>
        next = <optimized out>
        again = <optimized out>
#22 0x00000039ef64a553 in g_timeout_dispatch (source=0x276b700, callback=<optimized out>, user_data=<optimized out>) at gmain.c:4520
        timeout_source = 0x276b700
        again = <optimized out>
#23 0x00000039ef649aeb in g_main_dispatch (context=0x20ce230) at gmain.c:3111
        dispatch = 0x39ef64a540 <g_timeout_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x0
        callback = 0x3a97c28c10 <process_timeout>
        cb_funcs = 0x39ef9378c0 <g_source_callback_funcs>
        cb_data = 0x276b770
        need_destroy = <optimized out>
        source = 0x276b700
        current = 0x20b7ab0
        i = 0
#24 g_main_context_dispatch (context=context@entry=0x20ce230) at gmain.c:3710
No locals.
#25 0x00000039ef649e88 in g_main_context_iterate (context=context@entry=0x20ce230, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at gmain.c:3781
        max_priority = 2147483647
        timeout = 10
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = 13
        fds = 0x29c5400
#26 0x00000039ef649f3c in g_main_context_iteration (context=0x20ce230, context@entry=0x0, may_block=may_block@entry=1) at gmain.c:3842
        retval = <optimized out>
#27 0x0000003bcbaa50cc in g_application_run (application=application@entry=0x2113230, argc=argc@entry=0, argv=argv@entry=0x0) at gapplication.c:2282
        arguments = 0x221efe0
        status = 0
        __FUNCTION__ = "g_application_run"
#28 0x0000000000411a05 in main (argc=1, argv=0x7fff8a67fc18) at server.c:144
        app = 0x2113230
        exit_code = 1
        home_dir = <optimized out>
        charset = 0x20a5ee0 "UTF-8"
        error = 0x0
From                To                  Syms Read   Shared Object Library
0x0000003a97c0ddc0  0x0000003a97c35e49  Yes         /lib64/libvte-2.91.so.0
0x0000003a99a7f5f0  0x0000003a99d76779  Yes         /lib64/libgtk-3.so.0
0x0000003a99620390  0x0000003a99675d11  Yes         /lib64/libgdk-3.so.0
0x0000003a988048b0  0x0000003a988095a6  Yes         /lib64/libpangocairo-1.0.so.0
0x0000003bd2a0cde0  0x0000003bd2a2c1f6  Yes         /lib64/libpango-1.0.so.0
0x0000003bd320b0a0  0x0000003bd3217683  Yes         /lib64/libatk-1.0.so.0
0x0000003945003550  0x00000039450044e2  Yes (*)     /lib64/libcairo-gobject.so.2
0x0000003943a134c0  0x0000003943acd0ad  Yes (*)     /lib64/libcairo.so.2
0x0000003bd0e07380  0x0000003bd0e1ae00  Yes         /lib64/libgdk_pixbuf-2.0.so.0
0x0000003bd62044a0  0x0000003bd620943e  Yes         /lib64/libdconf.so.1
0x0000003bcba33cb0  0x0000003bcbafdfcb  Yes         /lib64/libgio-2.0.so.0
0x0000003bcaa0ae20  0x0000003bcaa3a126  Yes         /lib64/libgobject-2.0.so.0
0x00000039ef61a5f0  0x00000039ef6b6409  Yes         /lib64/libglib-2.0.so.0
0x00000039f5601620  0x00000039f5602ce7  Yes         /lib64/libuuid.so.1
0x0000003bcae1dfd0  0x0000003bcaea661c  Yes         /lib64/libX11.so.6
0x0000003a97802af0  0x0000003a978129b5  Yes         /lib64/libgcc_s.so.1
0x00000039ed605a20  0x00000039ed611e01  Yes         /lib64/libpthread.so.0
0x00000039ece1f4f0  0x00000039ecf6acc4  Yes         /lib64/libc.so.6
0x0000003a08c00f10  0x0000003a08c017f5  Yes         /lib64/libutil.so.1
0x00000039ed2055c0  0x00000039ed276b91  Yes         /lib64/libm.so.6
0x00000039f1a01190  0x00000039f1a02075  Yes         /lib64/libgmodule-2.0.so.0
0x0000003bcce02230  0x0000003bcce0c857  Yes         /lib64/libXi.so.6
0x0000003bcc2015f0  0x0000003bcc203926  Yes         /lib64/libXfixes.so.3
0x0000003bd480a4a0  0x0000003bd481e4a9  Yes         /lib64/libatk-bridge-2.0.so.0
0x0000003a98c072a0  0x0000003a98c0f79b  Yes         /lib64/libpangoft2-1.0.so.0
0x00000039f3606cc0  0x00000039f3624d3d  Yes         /lib64/libfontconfig.so.1
0x0000003bcc600bb0  0x0000003bcc601524  Yes         /lib64/libXinerama.so.1
0x0000003bcca01c00  0x0000003bcca075a9  Yes         /lib64/libXrandr.so.2
0x0000003bcd202ab0  0x0000003bcd2075b7  Yes         /lib64/libXcursor.so.1
0x0000003bd3600cd0  0x0000003bd36016e5  Yes         /lib64/libXcomposite.so.1
0x0000003bd0600c40  0x0000003bd060156b  Yes         /lib64/libXdamage.so.1
0x0000003bd1604f80  0x0000003bd16093bf  Yes         /lib64/libwayland-client.so.0
0x0000003a042043a0  0x0000003a0421ed55  Yes         /lib64/libxkbcommon.so.0
0x0000003bd5e01260  0x0000003bd5e02d79  Yes         /lib64/libwayland-cursor.so.0
0x0000003bcb603770  0x0000003bcb60d54f  Yes         /lib64/libXext.so.6
0x00000039eee022a0  0x00000039eee05417  Yes         /lib64/librt.so.1
0x00000039f22006b0  0x00000039f220082a  Yes         /lib64/libgthread-2.0.so.0
0x0000003a98006ee0  0x0000003a9803c679  Yes         /lib64/libharfbuzz.so.0
                                        No          /usr/lib64/freetype-freeworld/libfreetype.so.6
0x00000039fce0a370  0x00000039fce94090  Yes         /lib64/libpixman-1.so.0
0x0000003943206a40  0x000000394321bf29  Yes         /lib64/libEGL.so.1
0x00000039eda00ed0  0x00000039eda01ace  Yes         /lib64/libdl.so.2
0x00000039f1205500  0x00000039f1226da7  Yes         /lib64/libpng16.so.16
0x0000003bd2200df0  0x0000003bd2201903  Yes         /lib64/libxcb-shm.so.0
0x0000003bcea03610  0x0000003bcea06a8a  Yes         /lib64/libxcb-render.so.0
0x0000003bcb209bd0  0x0000003bcb218215  Yes         /lib64/libxcb.so.1
0x0000003bcbe01b70  0x0000003bcbe07a45  Yes         /lib64/libXrender.so.1
0x00000039ede02200  0x00000039ede0e729  Yes         /lib64/libz.so.1
0x0000003941a1a240  0x0000003941a775d2  Yes         /lib64/libGL.so.1
0x0000003bca601870  0x0000003bca60600c  Yes         /lib64/libffi.so.6
0x00000039eea06530  0x00000039eea195ba  Yes         /lib64/libselinux.so.1
0x00000039ef203a40  0x00000039ef212ba1  Yes         /lib64/libresolv.so.2
0x00000039ec600b10  0x00000039ec61b6d0  Yes         /lib64/ld-linux-x86-64.so.2
0x0000003bd5a0f760  0x0000003bd5a20e68  Yes         /lib64/libatspi.so.0
0x00000039f4207920  0x00000039f4232174  Yes         /lib64/libdbus-1.so.3
0x00000039f2a03e00  0x00000039f2a1c249  Yes         /lib64/libexpat.so.1
0x0000003a98402710  0x0000003a984165e8  Yes         /lib64/libgraphite2.so.3
0x00000039efa01760  0x00000039efa0d462  Yes         /lib64/libbz2.so.1
0x0000003bcda00600  0x0000003bcda0071b  Yes         /lib64/libX11-xcb.so.1
0x0000003bce201920  0x0000003bce202a45  Yes         /lib64/libxcb-dri2.so.0
0x0000003bcfe02830  0x0000003bcfe04c05  Yes         /lib64/libxcb-xfixes.so.0
0x0000003bcf601020  0x0000003bcf601bc5  Yes         /lib64/libxcb-shape.so.0
0x0000003942e02980  0x0000003942e08214  Yes         /lib64/libgbm.so.1
0x0000003bd12061e0  0x0000003bd120bbbf  Yes         /lib64/libwayland-server.so.0
0x0000003bcfa09920  0x0000003bcfa1338e  Yes         /lib64/libglapi.so.0
0x0000003941e03210  0x0000003941e08b38  Yes         /lib64/libdrm.so.2
0x00000039f0a00ec0  0x00000039f0a01bf9  Yes         /lib64/libXau.so.6
0x0000003bce60a020  0x0000003bce611bb5  Yes         /lib64/libxcb-glx.so.0
0x0000003bd0a00d50  0x0000003bd0a014f3  Yes         /lib64/libxcb-dri3.so.0
0x0000003bd0200c50  0x0000003bd0201428  Yes         /lib64/libxcb-present.so.0
0x0000003bcde05bd0  0x0000003bcde09a21  Yes         /lib64/libxcb-randr.so.0
0x0000003bcf202060  0x0000003bcf203fc9  Yes         /lib64/libxcb-sync.so.1
0x00000039f8a00990  0x00000039f8a00c7c  Yes         /lib64/libxshmfence.so.1
0x0000003bcd601010  0x0000003bcd6039a8  Yes         /lib64/libXxf86vm.so.1
0x00000039ee6016f0  0x00000039ee64f8e5  Yes         /lib64/libpcre.so.1
0x00000039eca02f30  0x00000039eca18d72  Yes         /lib64/liblzma.so.5
0x00007f27617c7da0  0x00007f27617e2276  Yes         /usr/lib64/gio/modules/libgvfsdbus.so
0x0000003bd7e12d20  0x0000003bd7e29e56  Yes         /usr/lib64/gvfs/libgvfscommon.so
0x00007f276154d730  0x00007f276157846e  Yes         /lib64/libbluray.so.1
0x0000003a99403b10  0x0000003a9940b366  Yes (*)     /lib64/libudev.so.1
0x00000039f5a2e870  0x00000039f5b1039e  Yes         /lib64/libxml2.so.2
0x0000003a99009790  0x0000003a990387e0  Yes         /lib64/libdw.so.1
0x0000003bd3e02ae0  0x0000003bd3e10d1a  Yes         /lib64/libelf.so.1
0x00007f2760b458a0  0x00007f2760b46150  Yes         /usr/lib64/gtk-3.0/modules/libpk-gtk-module.so
0x00007f276093f1b0  0x00007f27609411f0  Yes         /usr/lib64/gtk-3.0/modules/libcanberra-gtk-module.so
0x0000003a9c601da0  0x0000003a9c60336e  Yes         /lib64/libcanberra-gtk3.so.0
0x0000003bdba033d0  0x0000003bdba0c9ea  Yes         /lib64/libcanberra.so.0
0x0000003a0da02110  0x0000003a0da0632c  Yes         /lib64/libvorbisfile.so.3
0x0000003bdae02d60  0x0000003bdae0e143  Yes         /lib64/libtdb.so.1
0x0000003a0b0024b0  0x0000003a0b0069a2  Yes         /lib64/libltdl.so.7
0x0000003a0a003800  0x0000003a0a01a00d  Yes         /lib64/libvorbis.so.0
0x0000003a09c01aa0  0x0000003a09c03f55  Yes         /lib64/libogg.so.0
0x0000003bd7a00ec0  0x0000003bd7a05038  Yes         /lib64/libcrypt.so.1
0x0000003bd8203900  0x0000003bd825846d  Yes         /lib64/libfreebl3.so
0x00007f27606d1be0  0x00007f27606d688e  Yes         /usr/lib64/gio/modules/libdconfsettings.so
0x00007f27604cb570  0x00007f27604cc00b  Yes         /usr/lib64/gconv/ISO8859-1.so
0x00007f27602c8570  0x00007f27602c9159  Yes         /usr/lib64/gconv/ISO8859-15.so
0x00007f275a815240  0x00007f275a81c2d3  Yes         /lib64/libnss_files.so.2
0x00007f275a60d190  0x00007f275a6103bf  Yes         /usr/lib64/libcanberra-0.30/libcanberra-pulse.so
0x0000003a9fc0c820  0x0000003a9fc38dc9  Yes         /lib64/libpulse.so.0
0x0000003aa00155c0  0x0000003aa00540b9  Yes         /usr/lib64/pulseaudio/libpulsecommon-5.0.so
0x00000039ffe04f30  0x00000039ffe128da  Yes         /lib64/libICE.so.6
0x0000003a00201c20  0x0000003a00205dff  Yes         /lib64/libSM.so.6
0x0000003bd92014c0  0x0000003bd9203e47  Yes         /lib64/libXtst.so.6
0x0000003a9b205190  0x0000003a9b21b8e5  Yes (*)     /lib64/libsystemd.so.0
0x0000003a11a02880  0x0000003a11a07993  Yes         /lib64/libjson-c.so.2
0x0000003a13a033e0  0x0000003a13a06f38  Yes         /lib64/libwrap.so.0
0x0000003bdc6062e0  0x0000003bdc63f42c  Yes         /lib64/libsndfile.so.1
0x0000003a12601380  0x0000003a126039e8  Yes         /lib64/libasyncns.so.0
0x0000003a0a801670  0x0000003a0a802f96  Yes         /lib64/libcap.so.2
0x0000003a01008600  0x0000003a010a8d48  Yes         /lib64/libgcrypt.so.20
0x0000003a00600db0  0x0000003a006015f5  Yes         /lib64/libgpg-error.so.0
0x0000003a0a404110  0x0000003a0a410e11  Yes         /lib64/libnsl.so.1
0x0000003a12201340  0x0000003a122090df  Yes         /lib64/libgsm.so.1
0x0000003a10a09000  0x0000003a10a4da1d  Yes         /lib64/libFLAC.so.8
0x0000003a0f213b60  0x0000003a0f21615f  Yes         /lib64/libvorbisenc.so.2
0x0000003a05e013d0  0x0000003a05e034aa  Yes         /lib64/libattr.so.1
0x00007f275b3b9c00  0x00007f275b3ba009  Yes         /usr/lib64/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-svg.so
0x00007f2759bdbbc0  0x00007f2759c00117  Yes         /lib64/librsvg-2.so.2
0x0000003a10208cd0  0x0000003a10226ba5  Yes         /lib64/libcroco-0.6.so.3
(*): Shared library is missing debugging information.
$1 = 0x0
$2 = 0x0
rax            0x0	0
rbx            0x18	24
rcx            0x0	0
rdx            0x505	1285
rsi            0x0	0
rdi            0x26322c0	40051392
rbp            0x0	0x0
rsp            0x7fff8a67ea50	0x7fff8a67ea50
r8             0x2198610	35227152
r9             0x260eaa0	39905952
r10            0x1	1
r11            0x2198648	35227208
r12            0x26322c0	40051392
r13            0x2632260	40051296
r14            0x23fc052	37732434
r15            0x18	24
rip            0x3a97c2cd0e	0x3a97c2cd0e <vte_terminal_accessible_get_text+190>
eflags         0x10213	[ CF AF IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
Dump of assembler code for function vte_terminal_accessible_get_text:
   0x0000003a97c2cc50 <+0>:	push   %r13
   0x0000003a97c2cc52 <+2>:	push   %r12
   0x0000003a97c2cc54 <+4>:	mov    %rdi,%r12
   0x0000003a97c2cc57 <+7>:	push   %rbp
   0x0000003a97c2cc58 <+8>:	push   %rbx
   0x0000003a97c2cc59 <+9>:	movslq %esi,%rbp
   0x0000003a97c2cc5c <+12>:	movslq %edx,%rbx
   0x0000003a97c2cc5f <+15>:	sub    $0x8,%rsp
   0x0000003a97c2cc63 <+19>:	callq  0x3a97c2be50 <_vte_terminal_accessible_get_type>
   0x0000003a97c2cc68 <+24>:	mov    %r12,%rdi
   0x0000003a97c2cc6b <+27>:	mov    %rax,%rsi
   0x0000003a97c2cc6e <+30>:	callq  0x3a97c0d3a0 <g_type_check_instance_cast@plt>
   0x0000003a97c2cc73 <+35>:	mov    %rax,%r12
   0x0000003a97c2cc76 <+38>:	movslq 0x26247b(%rip),%r13        # 0x3a97e8f0f8 <VteTerminalAccessible_private_offset>
   0x0000003a97c2cc7d <+45>:	callq  0x3a97c2be50 <_vte_terminal_accessible_get_type>
   0x0000003a97c2cc82 <+50>:	test   %r12,%r12
   0x0000003a97c2cc85 <+53>:	je     0x3a97c2cca4 <vte_terminal_accessible_get_text+84>
   0x0000003a97c2cc87 <+55>:	mov    (%r12),%rdx
   0x0000003a97c2cc8b <+59>:	test   %rdx,%rdx
   0x0000003a97c2cc8e <+62>:	je     0x3a97c2cc95 <vte_terminal_accessible_get_text+69>
   0x0000003a97c2cc90 <+64>:	cmp    (%rdx),%rax
   0x0000003a97c2cc93 <+67>:	je     0x3a97c2ccd0 <vte_terminal_accessible_get_text+128>
   0x0000003a97c2cc95 <+69>:	mov    %rax,%rsi
   0x0000003a97c2cc98 <+72>:	mov    %r12,%rdi
   0x0000003a97c2cc9b <+75>:	callq  0x3a97c0d0d0 <g_type_check_instance_is_a@plt>
   0x0000003a97c2cca0 <+80>:	test   %eax,%eax
   0x0000003a97c2cca2 <+82>:	jne    0x3a97c2ccd0 <vte_terminal_accessible_get_text+128>
   0x0000003a97c2cca4 <+84>:	lea    0x5557d(%rip),%r8        # 0x3a97c82228
   0x0000003a97c2ccab <+91>:	lea    0x556ce(%rip),%rcx        # 0x3a97c82380 <__FUNCTION__.54271>
   0x0000003a97c2ccb2 <+98>:	lea    0x553cd(%rip),%rsi        # 0x3a97c82086
   0x0000003a97c2ccb9 <+105>:	lea    0xa79a(%rip),%rdi        # 0x3a97c3745a
   0x0000003a97c2ccc0 <+112>:	mov    $0x344,%edx
   0x0000003a97c2ccc5 <+117>:	callq  0x3a97c0c950 <g_assertion_message_expr@plt>
   0x0000003a97c2ccca <+122>:	nopw   0x0(%rax,%rax,1)
   0x0000003a97c2ccd0 <+128>:	cmp    %ebx,%ebp
   0x0000003a97c2ccd2 <+130>:	jle    0x3a97c2cce1 <vte_terminal_accessible_get_text+145>
   0x0000003a97c2ccd4 <+132>:	cmp    $0xffffffff,%ebx
   0x0000003a97c2ccd7 <+135>:	je     0x3a97c2cce1 <vte_terminal_accessible_get_text+145>
   0x0000003a97c2ccd9 <+137>:	mov    %ebp,%eax
   0x0000003a97c2ccdb <+139>:	movslq %ebx,%rbp
   0x0000003a97c2ccde <+142>:	movslq %eax,%rbx
   0x0000003a97c2cce1 <+145>:	cmp    $0xffffffff,%ebx
   0x0000003a97c2cce4 <+148>:	jl     0x3a97c2cd60 <vte_terminal_accessible_get_text+272>
   0x0000003a97c2cce6 <+150>:	test   %ebp,%ebp
   0x0000003a97c2cce8 <+152>:	js     0x3a97c2cd60 <vte_terminal_accessible_get_text+272>
   0x0000003a97c2ccea <+154>:	xor    %edx,%edx
   0x0000003a97c2ccec <+156>:	add    %r12,%r13
   0x0000003a97c2ccef <+159>:	xor    %esi,%esi
   0x0000003a97c2ccf1 <+161>:	mov    %r12,%rdi
   0x0000003a97c2ccf4 <+164>:	callq  0x3a97c2acb0 <vte_terminal_accessible_update_private_data_if_needed>
   0x0000003a97c2ccf9 <+169>:	mov    0x10(%r13),%rax
   0x0000003a97c2ccfd <+173>:	mov    0x8(%rax),%edx
   0x0000003a97c2cd00 <+176>:	cmp    %edx,%ebp
   0x0000003a97c2cd02 <+178>:	jge    0x3a97c2cd90 <vte_terminal_accessible_get_text+320>
   0x0000003a97c2cd08 <+184>:	mov    (%rax),%rax
   0x0000003a97c2cd0b <+187>:	cmp    $0xffffffff,%ebx
=> 0x0000003a97c2cd0e <+190>:	mov    (%rax,%rbp,4),%ebp
   0x0000003a97c2cd11 <+193>:	je     0x3a97c2cdb0 <vte_terminal_accessible_get_text+352>
   0x0000003a97c2cd17 <+199>:	cmp    %edx,%ebx
   0x0000003a97c2cd19 <+201>:	jge    0x3a97c2cdb0 <vte_terminal_accessible_get_text+352>
   0x0000003a97c2cd1f <+207>:	mov    (%rax,%rbx,4),%edx
   0x0000003a97c2cd22 <+210>:	cmp    %ebp,%edx
   0x0000003a97c2cd24 <+212>:	jle    0x3a97c2cd90 <vte_terminal_accessible_get_text+320>
   0x0000003a97c2cd26 <+214>:	sub    %ebp,%edx
   0x0000003a97c2cd28 <+216>:	movslq %edx,%rbx
   0x0000003a97c2cd2b <+219>:	lea    0x1(%rbx),%edi
   0x0000003a97c2cd2e <+222>:	movslq %edi,%rdi
   0x0000003a97c2cd31 <+225>:	callq  0x3a97c0c6d0 <g_malloc@plt>
   0x0000003a97c2cd36 <+230>:	mov    %rax,%rcx
   0x0000003a97c2cd39 <+233>:	mov    0x8(%r13),%rax
   0x0000003a97c2cd3d <+237>:	movslq %ebp,%rsi
   0x0000003a97c2cd40 <+240>:	mov    %rbx,%rdx
   0x0000003a97c2cd43 <+243>:	mov    %rcx,%rdi
   0x0000003a97c2cd46 <+246>:	add    (%rax),%rsi
   0x0000003a97c2cd49 <+249>:	callq  0x3a97c0dc30 <memcpy@plt>
   0x0000003a97c2cd4e <+254>:	movb   $0x0,(%rax,%rbx,1)
   0x0000003a97c2cd52 <+258>:	add    $0x8,%rsp
   0x0000003a97c2cd56 <+262>:	pop    %rbx
   0x0000003a97c2cd57 <+263>:	pop    %rbp
   0x0000003a97c2cd58 <+264>:	pop    %r12
   0x0000003a97c2cd5a <+266>:	pop    %r13
   0x0000003a97c2cd5c <+268>:	retq   
   0x0000003a97c2cd5d <+269>:	nopl   (%rax)
   0x0000003a97c2cd60 <+272>:	lea    0x554e9(%rip),%r8        # 0x3a97c82250
   0x0000003a97c2cd67 <+279>:	lea    0x55612(%rip),%rcx        # 0x3a97c82380 <__FUNCTION__.54271>
   0x0000003a97c2cd6e <+286>:	lea    0x55311(%rip),%rsi        # 0x3a97c82086
   0x0000003a97c2cd75 <+293>:	lea    0xa6de(%rip),%rdi        # 0x3a97c3745a
   0x0000003a97c2cd7c <+300>:	mov    $0x34f,%edx
   0x0000003a97c2cd81 <+305>:	callq  0x3a97c0c950 <g_assertion_message_expr@plt>
   0x0000003a97c2cd86 <+310>:	nopw   %cs:0x0(%rax,%rax,1)
   0x0000003a97c2cd90 <+320>:	add    $0x8,%rsp
   0x0000003a97c2cd94 <+324>:	lea    0x55ce7(%rip),%rdi        # 0x3a97c82a82
   0x0000003a97c2cd9b <+331>:	pop    %rbx
   0x0000003a97c2cd9c <+332>:	pop    %rbp
   0x0000003a97c2cd9d <+333>:	pop    %r12
   0x0000003a97c2cd9f <+335>:	pop    %r13
   0x0000003a97c2cda1 <+337>:	jmpq   0x3a97c0c440 <g_strdup@plt>
   0x0000003a97c2cda6 <+342>:	nopw   %cs:0x0(%rax,%rax,1)
   0x0000003a97c2cdb0 <+352>:	mov    0x8(%r13),%rax
   0x0000003a97c2cdb4 <+356>:	mov    0x8(%rax),%edx
   0x0000003a97c2cdb7 <+359>:	jmpq   0x3a97c2cd22 <vte_terminal_accessible_get_text+210>
End of assembler dump.
== EXPLOITABLE ==