Bug 580326 – Crash when browsing sites with special characters in the title

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 580326 - Crash when browsing sites with special characters in the title


Summary:	Crash when browsing sites with special characters in the title


Status:	RESOLVED DUPLICATE of bug 556132

Product:	gnome-panel
Classification:	Other
Component:	window selector
Version:	2.24.x
Hardware:	Other All

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Panel Maintainers
QA Contact:	Panel Maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2009-04-26 19:32 UTC by Arun Raghavan
Modified:	2009-04-27 17:15 UTC

See Also:
GNOME target:	---
GNOME version:	2.23/2.24

Description Arun Raghavan 2009-04-26 19:32:33 UTC

Steps to reproduce:
Open http://www.univie.ac.at/strv-astronomie/StV_Astronomie/Semester.html in a browser window (tried on Firefox and Epiphany).

Stack trace:
Output from gdb:

Program received signal SIGSEGV, Segmentation fault.

+ Trace 214820

Thread 3050006336 (LWP 16728)

#0 __kernel_vsyscall
#1 __waitpid_nocancel
from /lib/libpthread.so.0
#2 IA__g_spawn_sync
at gspawn.c line 382
#3 IA__g_spawn_command_line_sync
at gspawn.c line 694
#4 run_bug_buddy
at gnome-breakpad.cc line 223
#5 check_if_gdb
at gnome-breakpad.cc line 292
#6 bugbuddy_segv_handle
at gnome-breakpad.cc line 84
#7 <signal handler called>
#8 pango_layout_check_lines
at pango-layout.c line 4852
#9 pango_layout_get_extents_internal
at pango-layout.c line 2443
#10 gtk_label_size_request
at gtklabel.c line 2521
#11 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#12 g_type_class_meta_marshal
at gclosure.c line 878
#13 IA__g_closure_invoke
at gclosure.c line 767
#14 signal_emit_unlocked_R
at gsignal.c line 3174
#15 IA__g_signal_emit_valist
at gsignal.c line 2977
#16 IA__g_signal_emit_by_name
at gsignal.c line 3071
#17 do_size_request
at gtksizegroup.c line 620
#18 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#19 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#20 gtk_hbox_size_request
at gtkhbox.c line 97
#21 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#22 g_type_class_meta_marshal
at gclosure.c line 878
#23 IA__g_closure_invoke
at gclosure.c line 767
#24 signal_emit_unlocked_R
at gsignal.c line 3174
#25 IA__g_signal_emit_valist
at gsignal.c line 2977
#26 IA__g_signal_emit_by_name
at gsignal.c line 3071
#27 do_size_request
at gtksizegroup.c line 620
#28 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#29 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#30 gtk_button_size_request
at gtkbutton.c line 1135
#31 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#32 g_type_class_meta_marshal
at gclosure.c line 878
#33 IA__g_closure_invoke
at gclosure.c line 767
#34 signal_emit_unlocked_R
at gsignal.c line 3174
#35 IA__g_signal_emit_valist
at gsignal.c line 2977
#36 IA__g_signal_emit_by_name
at gsignal.c line 3071
#37 do_size_request
at gtksizegroup.c line 620
#38 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#39 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#40 wnck_tasklist_size_request
at tasklist.c line 1325
#41 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#42 g_type_class_meta_marshal
at gclosure.c line 878
#43 IA__g_closure_invoke
at gclosure.c line 767
#44 signal_emit_unlocked_R
at gsignal.c line 3174
#45 IA__g_signal_emit_valist
at gsignal.c line 2977
#46 IA__g_signal_emit_by_name
at gsignal.c line 3071
#47 do_size_request
at gtksizegroup.c line 620
#48 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#49 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#50 gtk_event_box_size_request
at gtkeventbox.c line 500
#51 panel_applet_size_request
at panel-applet.c line 726
#52 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#53 g_type_class_meta_marshal
at gclosure.c line 878
#54 IA__g_closure_invoke
at gclosure.c line 767
#55 signal_emit_unlocked_R
at gsignal.c line 3174
#56 IA__g_signal_emit_valist
at gsignal.c line 2977
#57 IA__g_signal_emit_by_name
at gsignal.c line 3071
#58 do_size_request
at gtksizegroup.c line 620
#59 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#60 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#61 gtk_window_size_request
at gtkwindow.c line 4740
#62 bonobo_plug_size_request
at bonobo-plug.c line 285
#63 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#64 g_type_class_meta_marshal
at gclosure.c line 878
#65 IA__g_closure_invoke
at gclosure.c line 767
#66 signal_emit_unlocked_R
at gsignal.c line 3174
#67 IA__g_signal_emit_valist
at gsignal.c line 2977
#68 IA__g_signal_emit_by_name
at gsignal.c line 3071
#69 do_size_request
at gtksizegroup.c line 620
#70 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#71 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#72 bonobo_socket_size_request
at bonobo-socket.c line 304
#73 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#74 g_type_class_meta_marshal
at gclosure.c line 878
#75 IA__g_closure_invoke
at gclosure.c line 767
#76 signal_emit_unlocked_R
at gsignal.c line 3174
#77 IA__g_signal_emit_valist
at gsignal.c line 2977
#78 IA__g_signal_emit_by_name
at gsignal.c line 3071
#79 do_size_request
at gtksizegroup.c line 620
#80 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#81 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#82 bonobo_widget_size_request
at bonobo-widget.c line 397
#83 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#84 g_type_class_meta_marshal
at gclosure.c line 878
#85 IA__g_closure_invoke
at gclosure.c line 767
#86 signal_emit_unlocked_R
at gsignal.c line 3174
#87 IA__g_signal_emit_valist
at gsignal.c line 2977
#88 IA__g_signal_emit_by_name
at gsignal.c line 3071
#89 do_size_request
at gtksizegroup.c line 620
#90 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#91 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#92 panel_applet_frame_size_request
at panel-applet-frame.c line 664
#93 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#94 g_type_class_meta_marshal
at gclosure.c line 878
#95 IA__g_closure_invoke
at gclosure.c line 767
#96 signal_emit_unlocked_R
at gsignal.c line 3174
#97 IA__g_signal_emit_valist
at gsignal.c line 2977
#98 IA__g_signal_emit_by_name
at gsignal.c line 3071
#99 do_size_request
at gtksizegroup.c line 620
#100 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#101 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#102 panel_widget_size_request
at panel-widget.c line 1215
#103 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#104 g_type_class_meta_marshal
at gclosure.c line 878
#105 IA__g_closure_invoke
at gclosure.c line 767
#106 signal_emit_unlocked_R
at gsignal.c line 3174
#107 IA__g_signal_emit_valist
at gsignal.c line 2977
#108 IA__g_signal_emit_by_name
at gsignal.c line 3071
#109 do_size_request
at gtksizegroup.c line 620
#110 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#111 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#112 panel_frame_size_request
at panel-frame.c line 49
#113 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#114 g_type_class_meta_marshal
at gclosure.c line 878
#115 IA__g_closure_invoke
at gclosure.c line 767
#116 signal_emit_unlocked_R
at gsignal.c line 3174
#117 IA__g_signal_emit_valist
at gsignal.c line 2977
#118 IA__g_signal_emit_by_name
at gsignal.c line 3071
#119 do_size_request
at gtksizegroup.c line 620
#120 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#121 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#122 gtk_table_size_request
at gtktable.c line 936
#123 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#124 g_type_class_meta_marshal
at gclosure.c line 878
#125 IA__g_closure_invoke
at gclosure.c line 767
#126 signal_emit_unlocked_R
at gsignal.c line 3174
#127 IA__g_signal_emit_valist
at gsignal.c line 2977
#128 IA__g_signal_emit_by_name
at gsignal.c line 3071
#129 do_size_request
at gtksizegroup.c line 620
#130 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#131 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#132 panel_toplevel_size_request
at panel-toplevel.c line 3017
#133 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#134 g_type_class_meta_marshal
at gclosure.c line 878
#135 IA__g_closure_invoke
at gclosure.c line 767
#136 signal_emit_unlocked_R
at gsignal.c line 3174
#137 IA__g_signal_emit_valist
at gsignal.c line 2977
#138 IA__g_signal_emit_by_name
at gsignal.c line 3071
#139 do_size_request
at gtksizegroup.c line 620
#140 _gtk_size_group_compute_requisition
at gtksizegroup.c line 820
#141 IA__gtk_widget_size_request
at gtkwidget.c line 3695
#142 panel_toplevel_check_resize
at panel-toplevel.c line 2993
#143 IA__g_cclosure_marshal_VOID__VOID
at gmarshal.c line 77
#144 g_type_class_meta_marshal
at gclosure.c line 878
#145 IA__g_closure_invoke
at gclosure.c line 767
#146 signal_emit_unlocked_R
at gsignal.c line 3282
#147 IA__g_signal_emit_valist
at gsignal.c line 2977
#148 IA__g_signal_emit
at gsignal.c line 3034
#149 IA__gtk_container_check_resize
at gtkcontainer.c line 1380
#150 gtk_container_idle_sizer
at gtkcontainer.c line 1306
#151 gdk_threads_dispatch
at gdk.c line 473
#152 g_idle_dispatch
at gmain.c line 4235
#153 IA__g_main_context_dispatch
at gmain.c line 2144
#154 g_main_context_iterate
at gmain.c line 2778
#155 IA__g_main_loop_run
at gmain.c line 2986
#156 IA__gtk_main
at gtkmain.c line 1200
#157 main
at main.c line 100



----------- .xsession-errors (18 sec old) ---------------------
** (gedit:15385): WARNING **: Please check the installation of all the Python related packages required by gedit and try again.
** (gedit:15385): WARNING **: Cannot load Python plugin 'Snippets' since gedit was not able to initialize the Python interpreter.
** (gedit:15385): CRITICAL **: gedit_python_module_load: assertion `Py_IsInitialized ()' failed
** (gedit:15385): WARNING **: Cannot load plugin 'snippets' since file '/usr/lib/gedit-2/plugins' cannot be read.
Could not read Rhythmbox database file: Could not find file "/home/arun/.gnome2/rhythmbox/rhythmdb.xml".
(bug-buddy:15400): atk-bridge-WARNING **: AT_SPI_REGISTRY was not started at session startup.
(bug-buddy:15400): atk-bridge-WARNING **: IOR not set.
(bug-buddy:15400): atk-bridge-WARNING **: Could not locate registry
Window manager warning: Attempt to perform window operation 20 on window none when operation 20 on none already in effect
--------------------------------------------------


Other information:
Reported on Gentoo a bug (https://bugs.gentoo.org/show_bug.cgi?id=267560).

The actual line on which this occurs seems to belong to another function (which probably got inlined). The call chain seems to be pango_layout_check_lines() -> process_line() -> pango_layout_line_postprocess() -> zero_line_final_space()

Comment 1 Philip Withnall 2009-04-27 06:10:24 UTC

Thanks for taking the time to report this bug.
This particular bug has already been reported into our bug tracking system, but we are happy to tell you that the problem has already been fixed. It should be solved in the next software version. You may want to check for a software upgrade.


*** This bug has been marked as a duplicate of 556132 ***

Comment 2 Arun Raghavan 2009-04-27 17:04:39 UTC

(In reply to comment #1)
> Thanks for taking the time to report this bug.
> This particular bug has already been reported into our bug tracking system, but
> we are happy to tell you that the problem has already been fixed. It should be
> solved in the next software version. You may want to check for a software
> upgrade.

I don't have access to this bug, for some reason. Will this fix be available on the 2.24.x series? If not, could you point me to the commit that fixed it so that I can try to backport it and make it available on Gentoo?

Comment 3 Philip Withnall 2009-04-27 17:15:18 UTC

(In reply to comment #2)
> I don't have access to this bug, for some reason. Will this fix be available on
> the 2.24.x series? If not, could you point me to the commit that fixed it so
> that I can try to backport it and make it available on Gentoo?

The bug's been marked as private for some reason. It was fixed by the following commit to Pango, which I don't think will be backported to 2.24:

commit dd6ce709db5872132335fef9f75aa16a33d6e5aa
Author: Behdad Esfahbod <behdad@behdad.org>
Date:   Mon Apr 6 19:49:02 2009 -0400

    [layout] Truncate final whitespace in the line before ellipsizing

    Bug 556132 – gnome-panel crashed with SIGSEGV in
    g_cclosure_marshal_VOID__BOXED()

    Not after.  Also fixes invalid memory access in case line was both
    wrapped and ellipsized.

You can see the diff here: http://git.gnome.org/cgit/pango/commit/?id=dd6ce709db5872132335fef9f75aa16a33d6e5aa