Bug 348719 – glibc detected: double free or corruption crash.

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 348719 - glibc detected: double free or corruption crash.


Summary:	glibc detected: double free or corruption crash.


Status:	RESOLVED DUPLICATE of bug 348447

Product:	Pan
Classification:	Other
Component:	general
Version:	pre-1.0 betas
Hardware:	Other All

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Charles Kerr
QA Contact:	Pan QA Team

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2006-07-26 01:11 UTC by alen_williams
Modified:	2006-07-26 05:56 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description alen_williams 2006-07-26 01:11:50 UTC

Steps to reproduce:
As soon as I jump into a group that has lots of headers, crash...

.104 isn't working so well for me!!!

;-)

Stack trace:
[root@einstein /]# more /tmp/pan_backtrace 
Script started on Tue 25 Jul 2006 06:00:23 PM PDT
[root@einstein /]# uname -a
Linux einstein.address4life.com 2.6.15-1.2054_FC5 #1 Tue Mar 14 15:48:33 EST 2006 i686 i686 i386 GNU/Linux
[root@einstein /]# gdb pan
GNU gdb Red Hat Linux (6.3.0.0-1.122rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1".

(gdb) handle SIGUSR1 nostop noprint
Signal        Stop	Print	Pass to program	Description
SIGUSR1       No	No	Yes		User defined signal 1
(gdb) handle SIG32 nostop noprint
Signal        Stop	Print	Pass to program	Description
SIG32         No	No	Yes		Real-time event 32
(gdb) run
Starting program: /usr/bin/pan 
Reading symbols from shared object read from target memory...done.
Loaded system supplied DSO at 0x287000
[Thread debugging using libthread_db enabled]
[New Thread -1208621392 (LWP 31200)]
*** glibc detected *** /usr/bin/pan: double free or corruption (fasttop): 0x08585cc8 ***
======= Backtrace: =========
/lib/libc.so.6[0x8d6f18]
/lib/libc.so.6(__libc_free+0x79)[0x8da41d]
/usr/bin/pan[0x80e3c30]
/usr/bin/pan[0x80e4555]
/usr/bin/pan[0x80dd640]
/usr/bin/pan[0x80def8e]
/usr/bin/pan[0x80f6834]
/usr/bin/pan[0x80d487e]
/usr/bin/pan[0x8080e40]
/usr/bin/pan[0x805b1c8]
/usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x49)[0xced1c9]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x11d)[0xcdff6d]
/usr/lib/libgobject-2.0.so.0[0xcf0a3d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x8c7)[0xcf1f47]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xcf2109]
/usr/lib/libgtk-x11-2.0.so.0[0x7cf4255]
/usr/lib/libgtk-x11-2.0.so.0(gtk_action_activate+0x88)[0x7cf50f8]
/usr/bin/pan[0x80710ac]
/usr/lib/libglib-2.0.so.0[0xc667a1]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x16d)[0xc6815d]
/usr/lib/libglib-2.0.so.0[0xc6b3ef]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xc6b799]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0x7dc95d4]
/usr/bin/pan[0x80654fc]
/usr/bin/pan[0x806613a]
/lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4]
/usr/bin/pan(__gxx_personality_v0+0x30d)[0x8057161]
======= Memory map: ========
00111000-00198000 r-xp 00000000 fd:03 175073184  /usr/lib/libgdk-x11-2.0.so.0.800.17
00198000-0019b000 rwxp 00087000 fd:03 175073184  /usr/lib/libgdk-x11-2.0.so.0.800.17
0019b000-001a4000 r-xp 00000000 fd:03 154894377  /lib/libnss_files-2.4.so
001a4000-001a5000 r-xp 00008000 fd:03 154894377  /lib/libnss_files-2.4.so
001a5000-001a6000 rwxp 00009000 fd:03 154894377  /lib/libnss_files-2.4.so
001a6000-001a7000 r-xp 00000000 fd:03 175145143  /usr/lib/gconv/ISO8859-1.so
001a7000-001a9000 rwxp 00000000 fd:03 175145143  /usr/lib/gconv/ISO8859-1.so
001a9000-001b9000 r-xp 00000000 fd:03 175445857  /usr/lib/gtk-2.0/2.4.0/engines/libclearlooks.so
001b9000-001ba000 rwxp 0000f000 fd:03 175445857  /usr/lib/gtk-2.0/2.4.0/engines/libclearlooks.so
001ba000-001bc000 r-xp 00000000 fd:03 175446858  /usr/lib/pango/1.5.0/modules/pango-basic-fc.so
001bc000-001bd000 rwxp 00002000 fd:03 175446858  /usr/lib/pango/1.5.0/modules/pango-basic-fc.so
001f0000-0022c000 r-xp 00000000 fd:03 175070292  /usr/lib/libpango-1.0.so.0.1200.2
0022c000-0022e000 rwxp 0003b000 fd:03 175070292  /usr/lib/libpango-1.0.so.0.1200.2
00287000-00288000 r-xp 00287000 00:00 0          [vdso]
002bc000-002c4000 r-xp 00000000 fd:03 175073171  /usr/lib/libpangocairo-1.0.so.0.1200.2
002c4000-002c5000 rwxp 00007000 fd:03 175073171  /usr/lib/libpangocairo-1.0.so.0.1200.2
002c7000-00339000 r-xp 00000000 fd:03 154897397  /lib/libdbus-1.so.2.0.0
00339000-0033a000 rwxp 00072000 fd:03 154897397  /lib/libdbus-1.so.2.0.0
0033c000-003a0000 r-xp 00000000 fd:03 175073241  /usr/lib/libgnomevfs-2.so.0.1400.1
003a0000-003a5000 rwxp 00064000 fd:03 175073241  /usr/lib/libgnomevfs-2.so.0.1400.1
003a7000-003b6000 r-xp 00000000 fd:03 175072375  /usr/lib/libavahi-client.so.3.1.1
003b6000-003b7000 rwxp 0000e000 fd:03 175072375  /usr/lib/libavahi-client.so.3.1.1
003e8000-003fd000 r-xp 00000000 fd:03 175073246  /usr/lib/libgnome-2.so.0.1401.0
003fd000-003fe000 rwxp 00015000 fd:03 175073246  /usr/lib/libgnome-2.so.0.1401.0
00481000-00486000 r-xp 00000000 fd:03 175073067  /usr/lib/libgtkspell.so.0.0.0
00486000-00487000 rwxp 00004000 fd:03 175073067  /usr/lib/libgtkspell.so.0.0.0
00487000-00569000 r-xp 00000000 fd:03 175051527  /usr/lib/libstdc++.so.6.0.8
00569000-0056d000 r-xp 000e2000 fd:03 175051527  /usr/lib/libstdc++.so.6.0.8
0056d000-0056e000 rwxp 000e6000 fd:03 175051527  /usr/lib/libstdc++.so.6.0.8
0056e000-00574000 rwxp 0056e000 00:00 0 
005e7000-00601000 r-xp 00000000 fd:03 175067573  /usr/lib/libatk-1.0.so.0.1114.0
00601000-00603000 rwxp 00019000 fd:03 175067573  /usr/lib/libatk-1.0.so.0.1114.0
00605000-0061c000 r-xp 00000000 fd:03 175065643  /usr/lib/libgdk_pixbuf-2.0.so.0.800.17
0061c000-0061d000 rwxp 00016000 fd:03 175065643  /usr/lib/libgdk_pixbuf-2.0.so.0.800.17
0062a000-00639000 r-xp 00000000 fd:03 154894405  /lib/libresolv-2.4.so
00639000-0063a000 r-xp 0000e000 fd:03 154894405  /lib/libresolv-2.4.so
0063a000-0063b000 rwxp 0000f000 fd:03 154894405  /lib/libresolv-2.4.so
0063b000-0063d000 rwxp 0063b000 00:00 0 
0063f000-00650000 r-xp 00000000 fd:03 154895865  /lib/libnsl-2.4.so
00650000-00651000 r-xp 00010000 fd:03 154895865  /lib/libnsl-2.4.so
00651000-00652000 rwxp 00011000 fd:03 154895865  /lib/libnsl-2.4.so
00652000-00654000 rwxp 00652000 00:00 0 
0066f000-0078e000 r-xp 00000000 fd:03 154895854  /lib/libcrypto.so.0.9.8a
0078e000-007a1000 rwxp 0011e000 fd:03 154895854  /lib/libcrypto.so.0.9.8a
007a1000-007a4000 rwxp 007a1000 00:00 0 
007a6000-007a8000 r-xp 00000000 fd:03 154895853  /lib/libcom_err.so.2.1
007a8000-007a9000 rwxp 00001000 fd:03 154895853  /lib/libcom_err.so.2.1
007ab000-007cf000 r-xp 00000000 fd:03 175051961  /usr/lib/libk5crypto.so.3.0
007cf000-007d0000 rwxp 00024000 fd:03 175051961  /usr/lib/libk5crypto.so.3.0
007d2000-007ea000 r-xp 00000000 fd:03 175051985  /usr/lib/libgssapi_krb5.so.2.2
007ea000-007eb000 rwxp 00017000 fd:03 175051985  /usr/lib/libgssapi_krb5.so.2.2
007ed000-007f0000 r-xp 00000000 fd:03 175051957  /usr/lib/libkrb5support.so.0.0
007f0000-007f1000 rwxp 00002000 fd:03 175051957  /usr/lib/libkrb5support.so.0.0
007f3000-00834000 r-xp 00000000 fd:03 154895855  /lib/libssl.so.0.9.8a
00834000-00838000 rwxp 00040000 fd:03 154895855  /lib/libssl.so.0.9.8a
0083a000-00841000 r-xp 00000000 fd:03 175057532  /usr/lib/libpopt.so.0.0.0
00841000-00842000 rwxp 00006000 fd:03 175057532  /usr/lib/libpopt.so.0.0.0
00844000-00848000 r-xp 00000000 fd:03 175061823  /usr/lib/libgthread-2.0.so.0.1000.2
00848000-00849000 rwxp 00003000 fd:03 175061823  /usr/lib/libgthread-2.0.so.0.1000.2
0084b000-0084e000 r-xp 00000000 fd:03 154895864  /lib/libcap.so.1.10
0084e000-0084f000 rwxp 00002000 fd:03 154895864  /lib/libcap.so.1.10
00856000-0086f000 r-xp 00000000 fd:03 154895844  /lib/ld-2.4.so
0086f000-00870000 r-xp 00018000 fd:03 154895844  /lib/ld-2.4.so
00870000-00871000 rwxp 00019000 fd:03 154895844  /lib/ld-2.4.so
00873000-0099f000 r-xp 00000000 fd:03 154895845  /lib/libc-2.4.so
0099f000-009a2000 r-xp 0012b000 fd:03 154895845  /lib/libc-2.4.so
009a2000-009a3000 rwxp 0012e000 fd:03 154895845  /lib/libc-2.4.so
009a3000-009a6000 rwxp 009a3000 00:00 0 
009a8000-009cb000 r-xp 00000000 fd:03 154895846  /lib/libm-2.4.so
009cb000-009cc000 r-xp 00022000 fd:03 154895846  /lib/libm-2.4.so
009cc000-009cd000 rwxp 00023000 fd:03 154895846  /lib/libm-2.4.so
009cf000-009d1000 r-xp 00000000 fd:03 154895847  /lib/libdl-2.4.so
009d1000-009d2000 r-xp 00001000 fd:03 154895847  /lib/libdl-2.4.so
009d2000-009d3000 rwxp 00002000 fd:03 154895847  /lib/libdl-2.4.so
009d5000-009e7000 r-xp 00000000 fd:03 175047460  /usr/lib/libz.so.1.2.3
009e7000-009e8000 rwxp 00011000 fd:03 175047460  /usr/lib/libz.so.1.2.3
009ea000-009ef000 r-xp 00000000 fd:03 175051493  /usr/lib/libXdmcp.so.6.0.0
009ef000-009f0000 rwxp 00004000 fd:03 175051493  /usr/lib/libXdmcp.so.6.0.0
009f2000-009f4000 r-xp 00000000 fd:03 175051467  /usr/lib/libXau.so.6.0.0
009f4000-009f5000 rwxp 00001000 fd:03 175051467  /usr/lib/libXau.so.6.0.0
009f7000-00af0000 r-xp 00000000 fd:03 175051494  /usr/lib/libX11.so.6.2.0
00af0000-00af4000 rwxp 000f9000 fd:03 175051494  /usr/lib/libX11.so.6.2.0
00af6000-00b05000
Program received signal SIGABRT, Aborted.
[Switching to Thread -1208621392 (LWP 31200)]
0x00287402 in __kernel_vsyscall ()
(gdb) thread apply all bt

+ Trace 69631

Thread 1 (Thread -1208621392 (LWP 31200))

#0 __kernel_vsyscall
#1 raise
from /lib/libc.so.6
#2 abort
from /lib/libc.so.6
#3 __libc_message
from /lib/libc.so.6
#4 _int_free
from /lib/libc.so.6
#5 free
from /lib/libc.so.6
#6 std::__insertion_sort<__gnu_cxx::__normal_iterator<pan::Xref::Target*, std::vector<pan::Xref::Target, std::allocator<pan::Xref::Target> > >, std::less<pan::Xref::Target> >
at ../../pan/general/quark.h line 108
#7 std::__final_insertion_sort<__gnu_cxx::__normal_iterator<pan::Xref::Target*, std::vector<pan::Xref::Target, std::allocator<pan::Xref::Target> > >, std::less<pan::Xref::Target> >
at /usr/lib/gcc/i386-redhat-linux/4.1.0/../../../../include/c++/4.1.0/bits/stl_algo.h line 2382
#8 pan::DataImpl::load_headers
at /usr/lib/gcc/i386-redhat-linux/4.1.0/../../../../include/c++/4.1.0/bits/stl_algo.h line 2750
#9 pan::DataImpl::ref_group
at headers.cc line 191
#10 MyTree
at my-tree.cc line 167
#11 pan::DataImpl::group_get_articles
at headers.cc line 1143
#12 pan::HeaderPane::set_group
at header-pane.cc line 702
#13 pan::GUI::do_read_selected_group
at gui.cc line 1124
#14 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#15 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#16 g_signal_override_class_closure
from /usr/lib/libgobject-2.0.so.0
#17 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#18 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#19 gtk_accessible_connect_widget_destroyed
from /usr/lib/libgtk-x11-2.0.so.0
#20 gtk_action_activate
from /usr/lib/libgtk-x11-2.0.so.0
#21 (anonymous namespace)::on_row_activated_idle
at group-pane.cc line 215
#22 g_list_remove_link
from /usr/lib/libglib-2.0.so.0
#23 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#24 g_main_context_check
from /usr/lib/libglib-2.0.so.0
#25 g_main_loop_run
from /usr/lib/libglib-2.0.so.0
#26 gtk_main
from /usr/lib/libgtk-x11-2.0.so.0
#27 (anonymous namespace)::run_pan_in_window
at pan.cc line 106
#28 main
at pan.cc line 250

The program is running.  Exit anyway? (y or n) y
[root@einstein /]# 
Script done on Tue 25 Jul 2006 06:04:43 PM PDT
[root@einstein /]# 


Other information:

Comment 1 Charles Kerr 2006-07-26 04:40:28 UTC

Alen, the patch in the comments section of #348447 fixes this bug.

Thanks for the backtrace!  Keep up the good work!

*** This bug has been marked as a duplicate of 348447 ***

Comment 2 alen_williams 2006-07-26 05:56:24 UTC

Yep, the patch fixed it.

Thanks.