Bug 357406 – Crash in libsvg theme engine

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 357406 - Crash in libsvg theme engine


Summary:	Crash in libsvg theme engine


Status:	RESOLVED FIXED

Product:	librsvg
Classification:	Core
Component:	general
Version:	2.16.x
Hardware:	Other All

Importance:	High critical
Target Milestone:	---
Assigned To:	librsvg maintainers
QA Contact:	librsvg maintainers

URL:
Whiteboard:

Duplicates:	357857 364603 365988 368990 371143 372257 373438 374559 375825 378670 379404 379771 381873 383937 384478 384544 384877 387664 389091 393703 393794 394176 394177 395615 396091 400971 400991 402263 403671 404199 408465 408793 408810 410249 414482 416314 417048 423138 426482 432264 (view as bug list)
Depends on:
Blocks:

Reported:	2006-09-24 03:59 UTC by rabbi.hawai
Modified:	2007-04-22 17:54 UTC

See Also:
GNOME target:	---
GNOME version:	2.15/2.16

Description rabbi.hawai 2006-09-24 03:59:12 UTC

Version: 2.16.0

What were you doing when the application crashed?



Distribution: Ubuntu 6.10 (edgy)
Gnome Release: 2.16.0 2006-09-04 (Ubuntu)
BugBuddy Version: 2.16.0

Memory status: size: 36130816 vsize: 0 resident: 36130816 share: 0 rss: 15278080 rss_rlim: 0
CPU usage: start_time: 1159070335 rtime: 0 utime: 274 stime: 0 cutime:230 cstime: 0 timeout: 44 it_real_value: 0 frequency: 0

Backtrace was generated from '/usr/bin/gnome-theme-manager'

(no debugging symbols found)
Using host libthread_db library "/lib/tls/i686/cmov/libthread_db.so.1".
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread -1225128272 (LWP 7987)]
(no debugging symbols found)
0xffffe410 in __kernel_vsyscall ()

+ Trace 73102

Thread 1 (Thread -1225128272 (LWP 7987))

#0 __kernel_vsyscall
#1 __waitpid_nocancel
from /lib/tls/i686/cmov/libpthread.so.0
#2 gnome_gtk_module_info_get
from /usr/lib/libgnomeui-2.so.0
#3 <signal handler called>
#4 strcmp
from /lib/tls/i686/cmov/libc.so.6
#5 g_str_equal
from /usr/lib/libglib-2.0.so.0
#6 g_hash_table_lookup
from /usr/lib/libglib-2.0.so.0
#7 g_quark_from_static_string
from /usr/lib/libglib-2.0.so.0
#8 rsvg_error_quark
from /usr/lib/librsvg-2.so.2
#9 rsvg_error_quark
from /usr/lib/librsvg-2.so.2
#10 rsvg_handle_write
from /usr/lib/librsvg-2.so.2
#11 theme_pixbuf_render
from /usr/lib/gtk-2.0/2.10.0/engines/libsvg.so
#12 g_cache_insert
from /usr/lib/libglib-2.0.so.0
#13 theme_pixbuf_get_pixbuf
from /usr/lib/gtk-2.0/2.10.0/engines/libsvg.so
#14 theme_pixbuf_render
from /usr/lib/gtk-2.0/2.10.0/engines/libsvg.so
#15 rsvg_style_register_type
from /usr/lib/gtk-2.0/2.10.0/engines/libsvg.so
#16 rsvg_style_register_type
from /usr/lib/gtk-2.0/2.10.0/engines/libsvg.so
#17 gtk_paint_box
from /usr/lib/libgtk-x11-2.0.so.0
#18 gtk_range_get_adjustment
from /usr/lib/libgtk-x11-2.0.so.0
#19 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#20 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#21 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#22 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#23 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#24 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#25 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#26 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#27 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#28 _gtk_scrolled_window_get_scrollbar_spacing
from /usr/lib/libgtk-x11-2.0.so.0
#29 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#30 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#31 gtk_scrolled_window_new
from /usr/lib/libgtk-x11-2.0.so.0
#32 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#33 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#34 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#35 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#36 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#37 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#38 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#39 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#40 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#41 gtk_box_pack_start_defaults
from /usr/lib/libgtk-x11-2.0.so.0
#42 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#43 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#44 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#45 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#46 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#47 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#48 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#49 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#50 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#51 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#52 gtk_notebook_new
from /usr/lib/libgtk-x11-2.0.so.0
#53 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#54 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#55 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#56 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#57 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#58 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#59 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#60 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#61 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#62 gtk_box_pack_start_defaults
from /usr/lib/libgtk-x11-2.0.so.0
#63 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#64 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#65 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#66 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#67 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#68 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#69 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#70 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#71 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#72 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#73 gtk_container_propagate_expose
from /usr/lib/libgtk-x11-2.0.so.0
#74 gtk_button_box_set_child_size
from /usr/lib/libgtk-x11-2.0.so.0
#75 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#76 gtk_container_forall
from /usr/lib/libgtk-x11-2.0.so.0
#77 gtk_window_new
from /usr/lib/libgtk-x11-2.0.so.0
#78 _gtk_marshal_BOOLEAN__BOXED
from /usr/lib/libgtk-x11-2.0.so.0
#79 g_value_set_boxed
from /usr/lib/libgobject-2.0.so.0
#80 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#81 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#82 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#83 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#84 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#85 gtk_main_do_event
from /usr/lib/libgtk-x11-2.0.so.0
#86 gdk_window_is_viewable
from /usr/lib/libgdk-x11-2.0.so.0
#87 gdk_window_process_updates
from /usr/lib/libgdk-x11-2.0.so.0
#88 _gtk_range_get_wheel_delta
from /usr/lib/libgtk-x11-2.0.so.0
#89 g_cclosure_marshal_VOID__VOID
from /usr/lib/libgobject-2.0.so.0
#90 g_closure_invoke
from /usr/lib/libgobject-2.0.so.0
#91 g_signal_chain_from_overridden
from /usr/lib/libgobject-2.0.so.0
#92 g_signal_emit_valist
from /usr/lib/libgobject-2.0.so.0
#93 g_signal_emit
from /usr/lib/libgobject-2.0.so.0
#94 gtk_adjustment_value_changed
from /usr/lib/libgtk-x11-2.0.so.0
#95 gtk_adjustment_set_value
from /usr/lib/libgtk-x11-2.0.so.0
#96 gtk_tree_view_get_path_at_pos
from /usr/lib/libgtk-x11-2.0.so.0
#97 gtk_tree_view_set_fixed_height_mode
from /usr/lib/libgtk-x11-2.0.so.0
#98 gtk_tree_view_set_fixed_height_mode
from /usr/lib/libgtk-x11-2.0.so.0
#99 gtk_tree_view_set_fixed_height_mode
from /usr/lib/libgtk-x11-2.0.so.0
#100 g_source_is_destroyed
from /usr/lib/libglib-2.0.so.0
#101 g_main_context_dispatch
from /usr/lib/libglib-2.0.so.0
#102 g_main_context_check
from /usr/lib/libglib-2.0.so.0
#103 g_main_loop_run
from /usr/lib/libglib-2.0.so.0
#104 gtk_main
from /usr/lib/libgtk-x11-2.0.so.0
#105 main
#0 __kernel_vsyscall

Comment 1 Elijah Newren 2006-09-26 18:37:06 UTC

Looks like a crash in the theme code.  What theme are you using?

Comment 2 Elijah Newren 2006-09-26 18:37:28 UTC

*** Bug 357857 has been marked as a duplicate of this bug. ***

Comment 3 Thomas Wood 2006-09-30 17:03:43 UTC

Looks like the theme was using libsvg.so, so re-assigning to librsvg.

Comment 4 Dominic Lachowicz 2006-09-30 20:05:58 UTC

Someone is using the rsvg GTK+ theme engine? What theme is doing this?

It's pretty hard to imagine that there is a bug in rsvg_error_quark() though.

Comment 5 André Klapper 2006-10-05 14:03:20 UTC

*** Bug 359889 has been marked as a duplicate of this bug. ***

Comment 6 juhanfg 2006-10-05 14:16:11 UTC

I found the same bug. In my system it occured when changing themes to a theme called MilkMint. i hope this helps a bit.

Comment 7 Dominic Lachowicz 2006-10-05 16:24:53 UTC

I just downloaded MilkMint from here: http://art.gnome.org/themes/gtk2/771/

Looking through its .gtkrc, it appears as though it is built upon the Smooth theme engine (though it does use some SVG icons). This leaves me puzzled as to why the GTK+ SVG theme engine ("/usr/lib/gtk-2.0/2.10.0/engines/libsvg.so") is being loaded.

The stack looks massively corrupt. rsvg_style_register_type() doesn't call itself, nor does it call theme_pixbuf_render().

http://cvs.gnome.org/viewcvs/librsvg/gtk-engine/svg-draw.c?rev=1.3&view=markup

Comment 8 Karsten Bräckelmann 2006-11-01 19:01:08 UTC

*** Bug 368990 has been marked as a duplicate of this bug. ***

Comment 9 Karsten Bräckelmann 2006-11-01 19:05:59 UTC

*** Bug 365988 has been marked as a duplicate of this bug. ***

Comment 10 Karsten Bräckelmann 2006-11-01 19:06:06 UTC

*** Bug 364603 has been marked as a duplicate of this bug. ***

Comment 11 Dominic Lachowicz 2006-11-01 19:18:36 UTC

I have a wild guess that this is because librsvg's RsvgHandle object is now a proper GObject in 2.16, registered via g_type_register_static(). However, the type is ultimately instantiated from a plugin, which would call g_type_module_register_type(). Maybe this is causing wonky-ness.

See also bug 362217.

CC'ing Tim Janik, since GObject is a black box to me.

Comment 12 Tim Janik 2006-11-02 00:36:47 UTC

(In reply to comment #11)
> I have a wild guess that this is because librsvg's RsvgHandle object is now a
> proper GObject in 2.16, registered via g_type_register_static(). However, the
> type is ultimately instantiated from a plugin, which would call
> g_type_module_register_type(). Maybe this is causing wonky-ness.

why using g_type_register_static() in unloadable modules can't work has been adressed in this thread:
  http://mail.gnome.org/archives/desktop-devel-list/2006-November/msg00009.html

Comment 13 Dominic Lachowicz 2006-11-03 01:34:36 UTC

I believe that this is now fixed in 2.16.1, which will be out shortly.

Comment 14 Thomas Wood 2006-11-06 08:38:54 UTC

*** Bug 371143 has been marked as a duplicate of this bug. ***

Comment 15 Thomas Wood 2006-11-07 23:26:33 UTC

*** Bug 372257 has been marked as a duplicate of this bug. ***

Comment 16 Thomas Wood 2006-11-10 16:45:12 UTC

*** Bug 373438 has been marked as a duplicate of this bug. ***

Comment 17 Thomas Wood 2006-11-13 08:38:55 UTC

*** Bug 374559 has been marked as a duplicate of this bug. ***

Comment 18 André Klapper 2006-11-16 10:31:54 UTC

*** Bug 375825 has been marked as a duplicate of this bug. ***

Comment 19 Mariano Suárez-Alvarez 2006-11-24 00:09:34 UTC

*** Bug 378670 has been marked as a duplicate of this bug. ***

Comment 20 Thomas Wood 2006-11-26 11:53:40 UTC

*** Bug 379404 has been marked as a duplicate of this bug. ***

Comment 21 Thomas Wood 2006-11-27 14:16:19 UTC

*** Bug 379771 has been marked as a duplicate of this bug. ***

Comment 22 André Klapper 2006-12-05 01:14:44 UTC

*** Bug 381873 has been marked as a duplicate of this bug. ***

Comment 23 André Klapper 2006-12-10 19:22:50 UTC

*** Bug 383937 has been marked as a duplicate of this bug. ***

Comment 24 Mariano Suárez-Alvarez 2006-12-10 20:17:24 UTC

*** Bug 384478 has been marked as a duplicate of this bug. ***

Comment 25 Christian Kirbach 2006-12-10 22:46:25 UTC

*** Bug 384544 has been marked as a duplicate of this bug. ***

Comment 26 Bruno Boaventura 2006-12-12 04:47:49 UTC

*** Bug 384877 has been marked as a duplicate of this bug. ***

Comment 27 Christian Kirbach 2006-12-19 21:52:32 UTC

*** Bug 387664 has been marked as a duplicate of this bug. ***

Comment 28 Fabio Marzocca 2006-12-24 10:25:58 UTC

*** Bug 389091 has been marked as a duplicate of this bug. ***

Comment 29 palfrey 2007-01-07 18:30:46 UTC

*** Bug 393794 has been marked as a duplicate of this bug. ***

Comment 30 palfrey 2007-01-07 18:30:53 UTC

*** Bug 393703 has been marked as a duplicate of this bug. ***

Comment 31 Alex Lancaster 2007-01-09 00:27:05 UTC

*** Bug 394176 has been marked as a duplicate of this bug. ***

Comment 32 palfrey 2007-01-12 01:20:48 UTC

*** Bug 395615 has been marked as a duplicate of this bug. ***

Comment 33 palfrey 2007-01-12 01:20:54 UTC

*** Bug 394177 has been marked as a duplicate of this bug. ***

Comment 34 André Klapper 2007-01-18 23:42:14 UTC

*** Bug 396091 has been marked as a duplicate of this bug. ***

Comment 35 Jens Granseuer 2007-01-26 14:39:16 UTC

*** Bug 400991 has been marked as a duplicate of this bug. ***

Comment 36 André Klapper 2007-01-29 02:04:32 UTC

*** Bug 400971 has been marked as a duplicate of this bug. ***

Comment 37 Jens Granseuer 2007-01-29 22:59:21 UTC

*** Bug 402263 has been marked as a duplicate of this bug. ***

Comment 38 Jens Granseuer 2007-02-02 21:24:44 UTC

*** Bug 403671 has been marked as a duplicate of this bug. ***

Comment 39 Jens Granseuer 2007-02-04 10:34:39 UTC

*** Bug 404199 has been marked as a duplicate of this bug. ***

Comment 40 Jens Granseuer 2007-02-16 17:49:14 UTC

*** Bug 408465 has been marked as a duplicate of this bug. ***

Comment 41 Susana 2007-02-17 13:50:04 UTC

*** Bug 408793 has been marked as a duplicate of this bug. ***

Comment 42 Susana 2007-02-17 13:51:11 UTC

*** Bug 408810 has been marked as a duplicate of this bug. ***

Comment 43 Jens Granseuer 2007-02-21 15:48:35 UTC

*** Bug 410249 has been marked as a duplicate of this bug. ***

Comment 44 Jens Granseuer 2007-03-04 11:31:49 UTC

*** Bug 414482 has been marked as a duplicate of this bug. ***

Comment 45 Bruno Boaventura 2007-03-09 22:12:28 UTC

*** Bug 416314 has been marked as a duplicate of this bug. ***

Comment 46 Jens Granseuer 2007-03-11 12:16:22 UTC

*** Bug 417048 has been marked as a duplicate of this bug. ***

Comment 47 Jens Granseuer 2007-03-27 19:26:29 UTC

*** Bug 423138 has been marked as a duplicate of this bug. ***

Comment 48 Jens Granseuer 2007-04-05 16:15:23 UTC

*** Bug 426482 has been marked as a duplicate of this bug. ***

Comment 49 Pedro Villavicencio 2007-04-22 17:54:43 UTC

*** Bug 432264 has been marked as a duplicate of this bug. ***