Bug 591576 – crashed with SIGSEGV at pango

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 591576 - crashed with SIGSEGV at pango


Summary:	crashed with SIGSEGV at pango


Status:	RESOLVED FIXED

Product:	pango
Classification:	Platform
Component:	general
Version:	1.25.x
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	pango-maint
QA Contact:	pango-maint

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2009-08-12 15:52 UTC by Pedro Villavicencio
Modified:	2009-08-12 19:45 UTC

See Also:
GNOME target:	---
GNOME version:	2.27/2.28

Description Pedro Villavicencio 2009-08-12 15:52:38 UTC

this report has been filed here:

https://bugs.edge.launchpad.net/ubuntu/+source/pango1.0/+bug/411820

"happened while loading the jamendo database with rhythmbox"

".

+ Trace 216902

Thread 1 (process 19407)

#0 _hb_ot_layout_skip_mark
at /build/buildd/pango1.0-1.25.1/pango/opentype/hb-ot-layout.cc line 181
#1 PosLookupSubTable::apply
at /build/buildd/pango1.0-1.25.1/pango/opentype/hb-ot-layout-gpos-private.hh line 917
#2 hb_ot_layout_position_lookup
at /build/buildd/pango1.0-1.25.1/pango/opentype/hb-ot-layout-gpos-private.hh line 1457
#3 _pango_ot_info_position
at /build/buildd/pango1.0-1.25.1/pango/pango-ot-info.c line 573
#4 basic_engine_shape
at /build/buildd/pango1.0-1.25.1/modules/basic/basic-fc.c line 212
#5 pango_shape
#6 shape_run
at /build/buildd/pango1.0-1.25.1/pango/pango-layout.c line 3133
#7 process_item
at /build/buildd/pango1.0-1.25.1/pango/pango-layout.c line 3243
#8 pango_layout_check_lines
at /build/buildd/pango1.0-1.25.1/pango/pango-layout.c line 3538
#9 pango_layout_get_extents_internal
at /build/buildd/pango1.0-1.25.1/pango/pango-layout.c line 2444
#10 pango_layout_get_pixel_extents
at /build/buildd/pango1.0-1.25.1/pango/pango-layout.c line 2648
#11 get_size
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkcellrenderertext.c line 1542
#12 gtk_cell_renderer_text_get_size
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkcellrenderertext.c line 1607
#13 IA__gtk_tree_view_column_cell_get_size
at /build/buildd/gtk+2.0-2.17.6/gtk/gtktreeviewcolumn.c line 2615
#14 validate_row
at /build/buildd/gtk+2.0-2.17.6/gtk/gtktreeview.c line 5654
#15 do_validate_rows
at /build/buildd/gtk+2.0-2.17.6/gtk/gtktreeview.c line 6203
#16 gtk_tree_view_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtktreeview.c line 2049
#17 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#18 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#19 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#20 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#21 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#22 gtk_scrolled_window_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkscrolledwindow.c line 1258
#23 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#24 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#25 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#26 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#27 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#28 gtk_box_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkbox.c line 280
#29 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#30 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#31 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#32 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#33 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#34 gtk_paned_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkpaned.c line 767
#35 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#36 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#37 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#38 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#39 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#40 gtk_box_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkbox.c line 280
#41 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#42 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#43 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#44 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#45 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#46 gtk_box_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkbox.c line 280
#47 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#48 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#49 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#50 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#51 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#52 gtk_notebook_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtknotebook.c line 1832
#53 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#54 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#55 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#56 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#57 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#58 gtk_box_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkbox.c line 280
#59 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#60 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#61 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#62 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#63 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#64 gtk_paned_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkpaned.c line 767
#65 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#66 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#67 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#68 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#69 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#70 gtk_paned_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkpaned.c line 775
#71 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#72 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#73 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#74 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#75 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#76 gtk_box_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkbox.c line 280
#77 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#78 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#79 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#80 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#81 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#82 gtk_window_size_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkwindow.c line 4913
#83 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#84 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3177
#85 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#86 IA__g_signal_emit_by_name
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3074
#87 _gtk_size_group_compute_requisition
at /build/buildd/gtk+2.0-2.17.6/gtk/gtksizegroup.c line 820
#88 gtk_window_compute_configure_request
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkwindow.c line 5782
#89 gtk_window_check_resize
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkwindow.c line 5994
#90 IA__g_closure_invoke
at /build/buildd/glib2.0-2.21.4/gobject/gclosure.c line 767
#91 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3285
#92 IA__g_signal_emit_valist
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 2980
#93 IA__g_signal_emit
at /build/buildd/glib2.0-2.21.4/gobject/gsignal.c line 3037
#94 gtk_container_idle_sizer
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkcontainer.c line 1350
#95 gdk_threads_dispatch
at /build/buildd/gtk+2.0-2.17.6/gdk/gdk.c line 498
#96 IA__g_main_context_dispatch
at /build/buildd/glib2.0-2.21.4/glib/gmain.c line 1960
#97 g_main_context_iterate
at /build/buildd/glib2.0-2.21.4/glib/gmain.c line 2591
#98 IA__g_main_loop_run
at /build/buildd/glib2.0-2.21.4/glib/gmain.c line 2799
#99 IA__gtk_main
at /build/buildd/gtk+2.0-2.17.6/gtk/gtkmain.c line 1205
#100 main
at main.c line 332

Comment 1 Behdad Esfahbod 2009-08-12 19:45:29 UTC

Fixed.  Will be in 1.25.3 tonight.

commit ebdcfbeb5aeb3e827326844f2f942570e503e26a
Author: Behdad Esfahbod <behdad@behdad.org>
Date:   Wed Aug 12 15:40:04 2009 -0400

    [HB] Fix invalid access / overflow on x86-64
    
    Bug 591557 – [HB] crash scrolling the evolution message list
    Bug 591576 – crashed with SIGSEGV at pango