After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 302735 - crash while cancelling a 'rename' over ssh://
crash while cancelling a 'rename' over ssh://
Status: RESOLVED FIXED
Product: eel
Classification: Deprecated
Component: general
2.13.x
Other other
: High critical
: 2.14.x
Assigned To: Nautilus Maintainers
Nautilus Maintainers
Depends on:
Blocks:
 
 
Reported: 2005-05-02 16:10 UTC by Benoît Rouits
Modified: 2006-03-18 11:50 UTC
See Also:
GNOME target: ---
GNOME version: 2.13/2.14


Attachments
Possible fix (1.85 KB, patch)
2006-01-12 12:09 UTC, Alexander Larsson
committed Details | Review

Description Benoît Rouits 2005-05-02 16:11:00 UTC
Distribution: Debian 3.1
Package: nautilus
Severity: normal
Version: GNOME2.10.0 2.10.0
Gnome-Distributor: Ubuntu
Synopsis: crash while cancelling a 'rename' over ssh://
Bugzilla-Product: nautilus
Bugzilla-Component: general
Bugzilla-Version: 2.10.0
BugBuddy-GnomeVersion: 2.0 (2.10.0)
Description:
Description of the crash:
Nautilus craches sometimes when i cancel a rename (rename directory) 
over ssh://very.slow.server

Steps to reproduce the crash:
1. open ssh://very.slow.server/
2. right-click on the TO_RENAME Folder then select 'rename'
3. a popup happends to ask for cancel during the operation
4. pressing 'cancel' crashes Nautilus

Expected Results:
4. pressing cancel should give up the renaming and not crash Nautilus

How often does this happen?
30%

Additional Information:
gnome 2.10 ubuntu hoary


Debugging Information:

Backtrace was generated from '/usr/bin/nautilus'

(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(no debugging symbols found)
`system-supplied DSO at 0xffffe000' has disappeared; keeping its
symbols.
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1223899904 (LWP 8238)]
[New Thread -1248855120 (LWP 21055)]
[New Thread -1248588880 (LWP 21054)]
[New Thread -1248035920 (LWP 21014)]
[New Thread -1236477008 (LWP 8269)]
[New Thread -1236210768 (LWP 8268)]
[New Thread -1235944528 (LWP 8267)]
[New Thread -1235280976 (LWP 8266)]
[New Thread -1225847888 (LWP 8252)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
0xffffe410 in __kernel_vsyscall ()
  • #0 __kernel_vsyscall
  • #1 __waitpid_nocancel
    from /lib/tls/i686/cmov/libpthread.so.0
  • #2 libgnomeui_module_info_get
    from /usr/lib/libgnomeui-2.so.0
  • #3 <signal handler called>
  • #4 __kernel_vsyscall
  • #5 raise
    from /lib/tls/i686/cmov/libc.so.6
  • #6 abort
    from /lib/tls/i686/cmov/libc.so.6
  • #7 ??
  • #8 ??
  • #9 ??
  • #10 ??
  • #11 ??
  • #12 ??
  • #13 ??
  • #14 ??
  • #15 ??
  • #16 ??
  • #17 ??
  • #18 ??
  • #19 ??
  • #20 ??
  • #21 ??
  • #22 ??
  • #23 ??
  • #24 ??
  • #25 ??
  • #26 ??
  • #27 ??
  • #28 ??
  • #29 ??
  • #30 ??
  • #31 ??
  • #32 ??
  • #33 ??
  • #34 ??
  • #35 ??
  • #36 ??
  • #37 ??
  • #38 ??
  • #39 ??
  • #40 ??
  • #41 ??
  • #42 ??
  • #43 ??
  • #44 g_free
    from /usr/lib/libglib-2.0.so.0




------- Bug moved to this database by unknown@bugzilla.gnome.org 2005-05-02 16:11 UTC -------


Unknown version 2.10.0 in product nautilus.  Setting version to "2.10.x".
The original reporter of this bug does not have
   an account here. Reassigning to the person who moved
   it here, unknown@bugzilla.gnome.org.
   Previous reporter was brouits@free.fr.

Comment 1 Olav Vitters 2005-05-02 17:57:59 UTC
Thanks for the bug report. Unfortunately, that stack trace is not very useful in
determining the cause of the crash. Can you get us one with debugging symbols?
Please see http://live.gnome.org/GettingTraces for more information on how to do so.

Comment 2 Vijaykumar Patwari 2005-05-09 09:51:05 UTC
I was able to reproduce this bug sometime back with 'smb', with 2.6 version of
nautilus and gnome-vfs. 

As i remember, funtion eel/eel-stock-dialog.c (timed_wait_free) is being called
twice. Once from,
cancel_rename_callback->cancel_rename->eel_timed_wait_stop->timed_wait_free.

And second call from, 
timed_wait_dialog_destroy_callback->timed_wait_free.

Second will assert and lead to crash.

Since the code for this cancel operation is not much changed, looks like bug is
still vaild for current soruces. Not sure though.

I'm pasting the stack trace (nautilus 2.6, gnome-vfs 2.6), hope it helps.

  • #0 timed_wait_free
    at eel-stock-dialogs.c line 124
  • #1 timed_wait_dialog_destroy_callback
    at eel-stock-dialogs.c line 183
  • #2 g_cclosure_marshal_VOID__VOID
    at gmarshal.c line 77
  • #3 g_closure_invoke
    at gclosure.c line 437
  • #4 signal_emit_unlocked_R
    at gsignal.c line 2478
  • #5 g_signal_emit_valist
    at gsignal.c line 2237
  • #6 g_signal_emit
    at gsignal.c line 2281
  • #7 gtk_object_dispose
    at gtkobject.c line 376
  • #8 gtk_widget_dispose
    at gtkwidget.c line 6386
  • #9 gtk_window_dispose
    at gtkwindow.c line 1778
  • #10 g_object_run_dispose
    at gobject.c line 602
  • #11 gtk_object_destroy
    at gtkobject.c line 361
  • #12 gtk_widget_destroy
    at gtkwidget.c line 1913
  • #13 trash_dialog_response_callback
    at eel-stock-dialogs.c line 192
  • #14 g_cclosure_marshal_VOID__INT
    at gmarshal.c line 216
  • #15 g_closure_invoke
    at gclosure.c line 437
  • #16 signal_emit_unlocked_R
    at gsignal.c line 2478
  • #17 g_signal_emit_valist
    at gsignal.c line 2237
  • #18 g_signal_emit
    at gsignal.c line 2281
  • #19 gtk_dialog_response
    at gtkdialog.c line 852
  • #20 action_widget_activated
    at gtkdialog.c line 549
  • #21 g_cclosure_marshal_VOID__VOID
    at gmarshal.c line 77
  • #22 g_closure_invoke
    at gclosure.c line 437
  • #23 signal_emit_unlocked_R
    at gsignal.c line 2478
  • #24 g_signal_emit_valist
    at gsignal.c line 2237
  • #25 g_signal_emit
    at gsignal.c line 2281
  • #26 gtk_button_clicked
    at gtkbutton.c line 717
  • #27 gtk_real_button_released
    at gtkbutton.c line 1218
  • #28 g_cclosure_marshal_VOID__VOID
    at gmarshal.c line 77
  • #29 g_type_class_meta_marshal
    at gclosure.c line 514
  • #30 g_closure_invoke
    at gclosure.c line 437
  • #31 signal_emit_unlocked_R
    at gsignal.c line 2408
  • #32 g_signal_emit_valist
    at gsignal.c line 2237
  • #33 g_signal_emit
    at gsignal.c line 2281
  • #34 gtk_button_released
    at gtkbutton.c line 709
  • #35 gtk_button_button_release
    at gtkbutton.c line 1134
  • #36 _gtk_marshal_BOOLEAN__BOXED
    at gtkmarshalers.c line 82
  • #37 g_type_class_meta_marshal
    at gclosure.c line 514
  • #38 g_closure_invoke
    at gclosure.c line 437
  • #39 signal_emit_unlocked_R
    at gsignal.c line 2516
  • #40 g_signal_emit_valist
    at gsignal.c line 2247
  • #41 g_signal_emit
    at gsignal.c line 2281
  • #42 gtk_widget_event_internal
    at gtkwidget.c line 3564
  • #43 gtk_propagate_event
    at gtkmain.c line 2345
  • #44 gtk_main_do_event
    at gtkmain.c line 1583
  • #45 gdk_event_dispatch
    at gdkevents-x11.c line 2186
  • #46 g_main_context_dispatch
    at gmain.c line 1942
  • #47 g_main_context_iterate
    at gmain.c line 2573
  • #48 g_main_loop_run
    at gmain.c line 2777
  • #49 gtk_main
    at gtkmain.c line 1173
  • #50 main
    at nautilus-main.c line 355

Re-opening the bug atm.
Comment 3 Teppo Turtiainen 2005-07-04 05:30:41 UTC
According to simple-dup-finder this is a duplicate of bug 91468, but since that
was closed without a resolution I don't want to mark this as a duplicate.
Comment 4 Martin Wehner 2005-08-19 22:59:16 UTC
Nice info here, confirming.
Comment 5 Christian Neumair 2006-01-11 20:35:06 UTC
The problem is probably that a delayed close (timed_wait_delayed_close_timeout_callback) was already launched and the user pressed cancel afterwards, so both handlers ran.
Comment 6 Alexander Larsson 2006-01-12 12:09:44 UTC
Created attachment 57221 [details] [review]
Possible fix

I think this patch might fix it. Anyone want to verify it?
Comment 7 Alexander Larsson 2006-01-12 14:32:36 UTC
I'm pretty sure this is right, so I'm commiting it. I'd still like someone to verify it though.
Comment 8 Christian Neumair 2006-03-18 11:50:52 UTC
No response, marking as FIXED.