GNOME Bugzilla – Bug 484988
rhythmbox crashes on exit with libsoup >2.2.101
Last modified: 2007-11-25 11:11:39 UTC
Version: 0.10.1 What were you doing when the application crashed? Distribution: Debian lenny/sid Gnome Release: 2.20.0 2007-09-21 (Debian) BugBuddy Version: 2.20.0 System: Linux 2.6.22-2-686 #1 SMP Fri Aug 31 00:24:01 UTC 2007 i686 X Vendor: The X.Org Foundation X Vendor Release: 10400000 Selinux: No Accessibility: Disabled GTK+ Theme: Toxig Icon Theme: Neu Memory status: size: 108437504 vsize: 108437504 resident: 44474368 share: 20754432 rss: 44474368 rss_rlim: 4294967295 CPU usage: start_time: 1191916156 rtime: 22305 utime: 21176 stime: 1129 cutime:3 cstime: 14 timeout: 0 it_real_value: 0 frequency: 100 Backtrace was generated from '/usr/bin/rhythmbox' Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread 0xb6c666c0 (LWP 22865)] [New Thread 0xb38fdb90 (LWP 22879)] 0xffffe410 in __kernel_vsyscall ()
+ Trace 168971
Thread 1 (Thread 0xb6c666c0 (LWP 22865))
----------- .xsession-errors (151277 sec old) --------------------- Selected video codec: [ffodivx] vfm: ffmpeg (FFmpeg MPEG-4) ========================================================================== ========================================================================== Opening audio decoder: [mp3lib] MPEG layer-2, layer-3 AUDIO: 48000 Hz, 2 ch, s16le, 128.0 kbit/8.33% (ratio: 16000->192000) Selected audio codec: [mp3] afm: mp3lib (mp3lib MPEG layer-2, layer-3) ========================================================================== AO: [oss] 48000Hz 2ch s16le (2 bytes per sample) Starting playback... VDec: vo config request - 640 x 352 (preferred colorspace: Planar YV12) VDec: using Planar YV12 as output csp (no 0) Movie-Aspect is 1.82:1 - prescaling to correct movie aspect. VO: [xv] 640x352 => 640x352 Planar YV12 A: 0.1 V: 0.0 A-V: 0.087 ct: 0.000 1/ 1 ??% ??% ??,?% 0 0 A: 0.1 V: 0.0 A-V: 0.104 ct: 0.003 2/ 2 ??% ??% ??,?% 0 0 A: 0.2 V: 0.1 A-V: 0.071 ct: 0.0 ...Too much output, ignoring rest... --------------------------------------------------
*** Bug 485116 has been marked as a duplicate of this bug. ***
*** Bug 485363 has been marked as a duplicate of this bug. ***
*** Bug 485584 has been marked as a duplicate of this bug. ***
*** Bug 485657 has been marked as a duplicate of this bug. ***
*** Bug 485765 has been marked as a duplicate of this bug. ***
*** Bug 486533 has been marked as a duplicate of this bug. ***
*** Bug 487305 has been marked as a duplicate of this bug. ***
Is it an incompatibility with glib 2.14.x issue? I'm getting the on exit crash in latest trunk svn (0.11.2svn) and I updated to gnome 2.20.0 around 5 days ago.
*** Bug 487006 has been marked as a duplicate of this bug. ***
*** Bug 487007 has been marked as a duplicate of this bug. ***
*** Bug 487334 has been marked as a duplicate of this bug. ***
*** Bug 485306 has been marked as a duplicate of this bug. ***
*** Bug 487364 has been marked as a duplicate of this bug. ***
A similar bug was reported to Debian in http://bugs.debian.org/446288 Claudio Saavedra pointed out that it only happens with the last.fm plugin enabled; "The crash seems to happen when the last.fm plugin is activated, and more specifically, after this plugin has authenticated against the audioscrobbler server. Another way to trigger the crash is to wait for the plugin to authenticate, and then disable it."
*** Bug 488444 has been marked as a duplicate of this bug. ***
Commenting out the code that cleans up the libsoup session in rb_audioscrobbler_dispose seems to stop it crashing.
Downgrading to libsoup 2.2.100 also stops it crashing.
Seems to have been introduced with this change: http://svn.gnome.org/viewvc/libsoup/trunk/libsoup/soup-session-async.c?r1=857&r2=922
*** Bug 488225 has been marked as a duplicate of this bug. ***
w.r.t. bug 488444, which has been marked a dup of this bug I moved all plugins out of tree $ mv /usr/lib/rhythmbox /tmp started rb, and clicked on close. rb still segfaulted and opened up again :(
*** Bug 488049 has been marked as a duplicate of this bug. ***
*** Bug 488144 has been marked as a duplicate of this bug. ***
*** Bug 488341 has been marked as a duplicate of this bug. ***
*** Bug 489274 has been marked as a duplicate of this bug. ***
*** Bug 488322 has been marked as a duplicate of this bug. ***
*** Bug 489568 has been marked as a duplicate of this bug. ***
*** Bug 489152 has been marked as a duplicate of this bug. ***
*** Bug 489583 has been marked as a duplicate of this bug. ***
*** Bug 489621 has been marked as a duplicate of this bug. ***
*** Bug 489645 has been marked as a duplicate of this bug. ***
*** Bug 489691 has been marked as a duplicate of this bug. ***
*** Bug 489537 has been marked as a duplicate of this bug. ***
*** Bug 489585 has been marked as a duplicate of this bug. ***
*** Bug 489860 has been marked as a duplicate of this bug. ***
*** Bug 489740 has been marked as a duplicate of this bug. ***
*** Bug 489998 has been marked as a duplicate of this bug. ***
*** Bug 490038 has been marked as a duplicate of this bug. ***
*** Bug 490276 has been marked as a duplicate of this bug. ***
*** Bug 490287 has been marked as a duplicate of this bug. ***
*** Bug 489808 has been marked as a duplicate of this bug. ***
*** Bug 489822 has been marked as a duplicate of this bug. ***
*** Bug 490078 has been marked as a duplicate of this bug. ***
*** Bug 490250 has been marked as a duplicate of this bug. ***
*** Bug 490264 has been marked as a duplicate of this bug. ***
*** Bug 490453 has been marked as a duplicate of this bug. ***
*** Bug 490636 has been marked as a duplicate of this bug. ***
*** Bug 490707 has been marked as a duplicate of this bug. ***
Created attachment 97997 [details] stacktrace from Latest crash. I attached a stacktrace from my crash on exit.
Reassigning to libsoup.
Thanks to Hussam I've identified that this crash is due to libsoup potentially corrupting the stack. The call to g_object_add_weak_pointer is not matched with a call to g_object_remove_weak_pointer in the case where the object is not disposed in the idle callback. This means that when the object is actually finally disposed that address on the stack is rewritten to NULL causing this crash.
Created attachment 98014 [details] [review] Patch to fix.
Created attachment 98015 [details] [review] Patch to fix Actually include the bug number in the ChangeLog. Too early in the morning ;-)
*** Bug 490883 has been marked as a duplicate of this bug. ***
*** Bug 490966 has been marked as a duplicate of this bug. ***
*** Bug 490722 has been marked as a duplicate of this bug. ***
*** Bug 490752 has been marked as a duplicate of this bug. ***
*** Bug 490865 has been marked as a duplicate of this bug. ***
Doh. Fixed in head and will go out shortly as part of 2.2.103.
*** Bug 491656 has been marked as a duplicate of this bug. ***
*** Bug 491593 has been marked as a duplicate of this bug. ***
*** Bug 491339 has been marked as a duplicate of this bug. ***
*** Bug 491999 has been marked as a duplicate of this bug. ***
*** Bug 492519 has been marked as a duplicate of this bug. ***
*** Bug 492630 has been marked as a duplicate of this bug. ***
*** Bug 492778 has been marked as a duplicate of this bug. ***
*** Bug 492786 has been marked as a duplicate of this bug. ***
*** Bug 492874 has been marked as a duplicate of this bug. ***
*** Bug 493640 has been marked as a duplicate of this bug. ***
*** Bug 492958 has been marked as a duplicate of this bug. ***
*** Bug 493023 has been marked as a duplicate of this bug. ***
*** Bug 493195 has been marked as a duplicate of this bug. ***
*** Bug 493394 has been marked as a duplicate of this bug. ***
*** Bug 493872 has been marked as a duplicate of this bug. ***
*** Bug 493155 has been marked as a duplicate of this bug. ***
*** Bug 494019 has been marked as a duplicate of this bug. ***
*** Bug 494300 has been marked as a duplicate of this bug. ***
*** Bug 494340 has been marked as a duplicate of this bug. ***
*** Bug 494294 has been marked as a duplicate of this bug. ***
*** Bug 493235 has been marked as a duplicate of this bug. ***
*** Bug 493387 has been marked as a duplicate of this bug. ***
*** Bug 493648 has been marked as a duplicate of this bug. ***
*** Bug 493908 has been marked as a duplicate of this bug. ***
*** Bug 494523 has been marked as a duplicate of this bug. ***
*** Bug 494647 has been marked as a duplicate of this bug. ***
*** Bug 494693 has been marked as a duplicate of this bug. ***
*** Bug 494730 has been marked as a duplicate of this bug. ***
*** Bug 494914 has been marked as a duplicate of this bug. ***
*** Bug 494974 has been marked as a duplicate of this bug. ***
*** Bug 495069 has been marked as a duplicate of this bug. ***
*** Bug 495170 has been marked as a duplicate of this bug. ***
*** Bug 495398 has been marked as a duplicate of this bug. ***
*** Bug 494708 has been marked as a duplicate of this bug. ***
*** Bug 494820 has been marked as a duplicate of this bug. ***
*** Bug 495554 has been marked as a duplicate of this bug. ***
*** Bug 495624 has been marked as a duplicate of this bug. ***
*** Bug 495662 has been marked as a duplicate of this bug. ***
*** Bug 495773 has been marked as a duplicate of this bug. ***
*** Bug 495925 has been marked as a duplicate of this bug. ***
*** Bug 495979 has been marked as a duplicate of this bug. ***
*** Bug 496000 has been marked as a duplicate of this bug. ***
*** Bug 496292 has been marked as a duplicate of this bug. ***
*** Bug 496480 has been marked as a duplicate of this bug. ***
*** Bug 496562 has been marked as a duplicate of this bug. ***
*** Bug 496976 has been marked as a duplicate of this bug. ***
*** Bug 497848 has been marked as a duplicate of this bug. ***
*** Bug 497888 has been marked as a duplicate of this bug. ***