Bug 665016 – Crash in magazine_chain_pop_head() at gslice.c:488

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 665016 - Crash in magazine_chain_pop_head() at gslice.c:488


Summary:	Crash in magazine_chain_pop_head() at gslice.c:488


Status:	RESOLVED DUPLICATE of bug 668930

Product:	pango
Classification:	Platform
Component:	general
Version:	1.29.x
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	pango-maint
QA Contact:	pango-maint

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2011-11-28 09:25 UTC by Christian Kirbach
Modified:	2012-01-30 20:55 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description Christian Kirbach 2011-11-28 09:25:59 UTC

Hi

I am on Fedora 16. Ever since switching from the open source ATI display drivers to ATI's proprietary, I am facing regular crashes, altough not reproducible at will.
It seems to happen when clutter becomes active, e.g.
- entering or leaving the gnome-shell overview screen
- moving windows

Not sure who the culprit is, but pango is the last calling g_slice_alloc().




Missing separate debuginfo for 
Try: yum --disablerepo='*' --enablerepo='*-debuginfo' install /usr/lib/debug/.build-id/fe/57e25ea156eaeac8ded7ea7a503b29ae91a4f1 /var/cache/abrt-di/usr/lib/debug/.build-id/fe/57e25ea156eaeac8ded7ea7a503b29ae91a4f1
[New LWP 1351]
[New LWP 1561]
[New LWP 1525]
[New LWP 1369]
[New LWP 1368]
[New LWP 1367]
[New LWP 1366]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/bin/gnome-shell'.
Program terminated with signal 11, Segmentation fault.

+ Trace 229151

Thread 2 (Thread 0x7f0e02fff700 (LWP 1561))

#0 read
at ../sysdeps/unix/syscall-template.S line 82
#1 read
at /usr/include/bits/unistd.h line 45
#2 unix_signal_helper_thread
at gmain.c line 4551
#3 g_thread_create_proxy
at gthread.c line 1962
#4 start_thread
at pthread_create.c line 309
#5 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 115

Thread 1 (Thread 0x7f0e228369c0 (LWP 1351))

#0 magazine_chain_pop_head
at gslice.c line 488
#1 thread_memory_magazine1_alloc
at gslice.c line 795
#2 g_slice_alloc
at gslice.c line 833
#3 pango_layout_get_iter
at pango-layout.c line 5541
#4 pango_layout_index_to_line_and_extents
at pango-layout.c line 1623
#5 pango_layout_get_cursor_pos
at pango-layout.c line 2253
#6 clutter_text_position_to_coords
at ./clutter-text.c line 894
#7 clutter_text_ensure_cursor_position
at ./clutter-text.c line 941
#8 clutter_text_paint
at ./clutter-text.c line 2054
#9 st_im_text_paint
at st/st-im-text.c line 160
#10 g_closure_invoke
at gclosure.c line 774
#11 signal_emit_unlocked_R
at gsignal.c line 3310
#12 g_signal_emit_valist
at gsignal.c line 3003
#13 g_signal_emit
at gsignal.c line 3060
#14 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#15 clutter_actor_paint
at ./clutter-actor.c line 2987
#16 st_entry_paint
at st/st-entry.c line 525
#17 g_closure_invoke
at gclosure.c line 774
#18 signal_emit_unlocked_R
at gsignal.c line 3310
#19 g_signal_emit_valist
at gsignal.c line 3003
#20 g_signal_emit
at gsignal.c line 3060
#21 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#22 clutter_actor_paint
at ./clutter-actor.c line 2987
#23 g_closure_invoke
at gclosure.c line 774
#24 signal_emit_unlocked_R
at gsignal.c line 3310
#25 g_signal_emit_valist
at gsignal.c line 3003
#26 g_signal_emit
at gsignal.c line 3060
#27 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#28 clutter_actor_paint
at ./clutter-actor.c line 2987
#29 shell_generic_container_paint
at shell-generic-container.c line 140
#30 g_closure_invoke
at gclosure.c line 774
#31 signal_emit_unlocked_R
at gsignal.c line 3310
#32 g_signal_emit_valist
at gsignal.c line 3003
#33 g_signal_emit
at gsignal.c line 3060
#34 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#35 clutter_actor_paint
at ./clutter-actor.c line 2987
#36 st_box_layout_paint
at st/st-box-layout.c line 952
#37 g_closure_invoke
at gclosure.c line 774
#38 signal_emit_unlocked_R
at gsignal.c line 3310
#39 g_signal_emit_valist
at gsignal.c line 3003
#40 g_signal_emit
at gsignal.c line 3060
#41 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#42 clutter_actor_paint
at ./clutter-actor.c line 2987
#43 g_list_foreach
at glist.c line 938
#44 g_closure_invoke
at gclosure.c line 774
#45 signal_emit_unlocked_R
at gsignal.c line 3310
#46 g_signal_emit_valist
at gsignal.c line 3003
#47 g_signal_emit
at gsignal.c line 3060
#48 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#49 clutter_actor_paint
at ./clutter-actor.c line 2987
#50 g_list_foreach
at glist.c line 938
#51 clutter_group_real_paint
at ./clutter-group.c line 281
#52 g_closure_invoke
at gclosure.c line 774
#53 signal_emit_unlocked_R
at gsignal.c line 3310
#54 g_signal_emit_valist
at gsignal.c line 3003
#55 g_signal_emit
at gsignal.c line 3060
#56 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#57 clutter_actor_paint
at ./clutter-actor.c line 2987
#58 shell_generic_container_paint
at shell-generic-container.c line 140
#59 g_closure_invoke
at gclosure.c line 774
#60 signal_emit_unlocked_R
at gsignal.c line 3310
#61 g_signal_emit_valist
at gsignal.c line 3003
#62 g_signal_emit
at gsignal.c line 3060
#63 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#64 clutter_actor_paint
at ./clutter-actor.c line 2987
#65 g_list_foreach
at glist.c line 938
#66 clutter_group_real_paint
at ./clutter-group.c line 281
#67 clutter_stage_paint
at ./clutter-stage.c line 634
#68 g_closure_invoke
at gclosure.c line 774
#69 signal_emit_unlocked_R
at gsignal.c line 3310
#70 g_signal_emit_valist
at gsignal.c line 3003
#71 g_signal_emit
at gsignal.c line 3060
#72 clutter_actor_continue_paint
at ./clutter-actor.c line 3045
#73 clutter_actor_paint
at ./clutter-actor.c line 2987
#74 _clutter_stage_do_paint
at ./clutter-stage.c line 574
#75 clutter_stage_cogl_redraw
at cogl/clutter-stage-cogl.c line 453
#76 clutter_stage_do_redraw
at ./clutter-stage.c line 1023
#77 _clutter_stage_do_update
at ./clutter-stage.c line 1079
#78 clutter_clock_dispatch
at ./clutter-master-clock.c line 384
#79 g_main_dispatch
at gmain.c line 2425
#80 g_main_context_dispatch
at gmain.c line 2995
#81 g_main_context_iterate
at gmain.c line 3073
#82 g_main_loop_run
at gmain.c line 3281
#83 meta_run
at core/main.c line 555
#84 main
at main.c line 571

Comment 1 Christian Kirbach 2011-11-28 09:30:21 UTC

Name       : clutter
Architektur : x86_64
Version    : 1.8.2


Name       : gnome-shell
Architektur : x86_64
Version    : 3.2.1

Name       : pango
Architektur : x86_64
Version    : 1.29.4

Name       : glib
Architektur : x86_64
Epoch       : 1
Version    : 1.2.10

Comment 2 Christian Kirbach 2012-01-30 20:41:29 UTC

Hi

I forgot to reference to the Fedora bug:
https://bugzilla.redhat.com/show_bug.cgi?id=702257

There are already 60 people on CC on that bug.

I am currently clarifying whether Bug 668930 is a duplicate.

Comment 3 Owen Taylor 2012-01-30 20:55:16 UTC

Very likely (these backtraces can be caused by different forms of memory corruption, but the fact you hit this with when you installed the Catalyst drivers implies it's the same problem as the other bug. Duplicating on the bug that has more information and cross-references.

*** This bug has been marked as a duplicate of bug 668930 ***