After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 418188 - Crash when deleting a selected facet or receptable (UML)
Crash when deleting a selected facet or receptable (UML)
Status: RESOLVED FIXED
Product: dia
Classification: Other
Component: general
0.96-pre7
Other Linux
: Normal critical
: ---
Assigned To: Dia maintainers
Dia maintainers
: 419097 423643 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2007-03-14 11:58 UTC by Florian Schricker
Modified: 2007-03-28 18:25 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Florian Schricker 2007-03-14 11:58:10 UTC
Whenever I try to delete a single facet or receptable, dia crashes. Running dia from a terminal gives:


-----
$ dia
*** glibc detected *** dia: free(): invalid pointer: 0x09886ef0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb72648bd]
/lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb7264a44]
/usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb7504b51]
dia(diagram_unselect_object+0x2d)[0x805e6fd]
dia(diagram_unselect_objects+0x77)[0x805e7d7]
dia[0x8065e0e]
dia(edit_delete_callback+0x42)[0x806c932]
/usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x49)[0xb75d9b29]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb75cc79b]
/usr/lib/libgobject-2.0.so.0[0xb75dcb93]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x8c7)[0xb75de0b7]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb75de279]
/usr/lib/libgtk-x11-2.0.so.0(_gtk_action_emit_activate+0x55)[0xb79d3935]
/usr/lib/libgtk-x11-2.0.so.0[0xb79d5d04]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb75cc79b]
/usr/lib/libgobject-2.0.so.0[0xb75dcb93]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xb75dde7f]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb75de279]
/usr/lib/libgtk-x11-2.0.so.0(gtk_accel_group_activate+0xd9)[0xb79cf7f9]
/usr/lib/libgtk-x11-2.0.so.0(gtk_accel_groups_activate+0xfa)[0xb79cf8fa]
/usr/lib/libgtk-x11-2.0.so.0(gtk_window_activate_key+0xda)[0xb7bdb63a]
/usr/lib/libgtk-x11-2.0.so.0[0xb7bdb6bc]
/usr/lib/libgtk-x11-2.0.so.0(_gtk_marshal_BOOLEAN__BOXED+0x60)[0xb7ab4b00]
/usr/lib/libgobject-2.0.so.0[0xb75cafb9]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb75cc79b]
/usr/lib/libgobject-2.0.so.0[0xb75dd1e3]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xb75dde7f]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb75de279]
/usr/lib/libgtk-x11-2.0.so.0[0xb7bc85f8]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0x1ba)[0xb7aadf2a]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x317)[0xb7aaf0f7]
/usr/lib/libgdk-x11-2.0.so.0[0xb79387ea]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x182)[0xb74fd802]
/usr/lib/libglib-2.0.so.0[0xb75007df]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xb7500b89]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0xb7aaf574]
dia(main+0x3f)[0x809f14f]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb72138cc]
dia[0x805dee1]
======= Memory map: ========
08048000-080b4000 r-xp 00000000 03:05 1164992    /usr/local/bin/dia
080b4000-080b8000 rw-p 0006b000 03:05 1164992    /usr/local/bin/dia
080b8000-09aad000 rw-p 080b8000 00:00 0          [heap]
b3c00000-b3c21000 rw-p b3c00000 00:00 0 
b3c21000-b3d00000 ---p b3c21000 00:00 0 
b3d6b000-b3d75000 r-xp 00000000 03:05 3736201    /lib/libgcc_s.so.1
b3d75000-b3d76000 rw-p 00009000 03:05 3736201    /lib/libgcc_s.so.1
b3d8d000-b3dbf000 r--p 00000000 03:05 1229335    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b3dbf000-b3e30000 r--p 00000000 03:05 1229325    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b3e30000-b3e62000 r--p 00000000 03:05 1229335    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b3e62000-b3ed3000 r--p 00000000 03:05 1229325    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b3ed3000-b3f05000 r--p 00000000 03:05 1229335    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b3f05000-b3f76000 r--p 00000000 03:05 1229325    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b3f76000-b443a000 r--p 00000000 03:05 1328037    /usr/share/icons/hicolor/icon-theme.cache
b443a000-b5c8c000 r--p 00000000 03:05 1425760    /usr/share/icons/crystalsvg/icon-theme.cache
b5c8c000-b62e8000 r--p 00000000 03:05 1329836    /usr/share/icons/gnome/icon-theme.cache
b62e8000-b6556000 r--p 00000000 03:05 4620312    /usr/share/icons/Tango/icon-theme.cache
b6556000-b65b6000 rw-s 00000000 00:07 19562551   /SYSV00000000 (deleted)
b65b6000-b65bc000 r-xp 00000000 03:05 740569     /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b65bc000-b65bd000 rw-p 00005000 03:05 740569     /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so
b65bd000-b6629000 r--p 00000000 03:05 1229321    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf
b6629000-b665b000 r--p 00000000 03:05 1229335    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf
b665b000-b66cc000 r--p 00000000 03:05 1229325    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b66cc000-b66fd000 r-xp 00000000 03:05 1002300    /usr/lib/libxslt.so.1.1.17
b66fd000-b66fe000 rw-p 00030000 03:05 1002300    /usr/lib/libxslt.so.1.1.17
b66fe000-b6701000 r-xp 00000000 03:05 1247787    /usr/local/lib/dia/libxslt_filter.so
b6701000-b6702000 rw-p 00002000 03:05 1247787    /usr/local/lib/dia/libxslt_filter.so
b6702000-b670c000 r-xp 00000000 03:05 1247785    /usr/local/lib/dia/libxfig_filter.so
b670c000-b670d000 rw-p 0000a000 03:05 1247785    /usr/local/lib/dia/libxfig_filter.so
b670d000-b670f000 rw-p b670d000 00:00 0 
b670f000-b6712000 r-xp 00000000 03:05 1247783    /usr/local/lib/dia/libwpg_filter.so
b6712000-b6713000 rw-p 00002000 03:05 1247783    /usr/local/lib/dia/libwpg_filter.so
b6713000-b6740000 r-xp 00000000 03:05 1247781    /usr/local/lib/dia/libvdx_filter.so
b6740000-b6741000 rw-p 0002d000 03:05 1247781    /usr/local/lib/dia/libvdx_filter.so
b6741000-b6774000 r-xp 00000000 03:05 1247779    /usr/local/lib/dia/libuml_objects.so
b6774000-b677e000 rw-p 00032000 03:05 1247779    /usr/local/lib/dia/libuml_objects.so
b677e000-b6782000 r-xp 00000000 03:05 1247777    /usr/local/lib/dia/libsvg_filter.so
b6782000-b6783000 rw-p 00004000 03:05 1247777    /usr/local/lib/dia/libsvg_filter.so
b6783000-b679c000 r-xp 00000000 03:05 1247775    /usr/local/lib/dia/libstandard_objects.so
b679c000-b67a0000 rw-p 00018000 03:05 1247775    /usr/local/lib/dia/libstandard_objects.so
b67a0000-b67a4000 r-xp 00000000 03:05 1247773    /usr/local/lib/dia/libshape_filter.so
b67a4000-b67a5000 rw-p 00003000 03:05 1247773    /usr/local/lib/dia/libshape_filter.so
b67a5000-b67ab000 
Killed
------

(Yes, I killed dia myself and that's the complete output I get. As I built it myself and if this is not a known bug or easily fixable, I could try to get a stack-trace while running dia with gdb.


Regards,
Florian
Comment 1 Lars Clausen 2007-03-15 21:43:39 UTC
Confirmed.  To reproduce:

Add a Receptable object to a new diagram, then delete it.  Simple.

GDB backtrace:

  • #0 __kernel_vsyscall
  • #1 raise
    from /lib/tls/i686/cmov/libc.so.6
  • #2 abort
    from /lib/tls/i686/cmov/libc.so.6
  • #3 __fsetlocking
    from /lib/tls/i686/cmov/libc.so.6
  • #4 malloc_usable_size
    from /lib/tls/i686/cmov/libc.so.6
  • #5 free
    from /lib/tls/i686/cmov/libc.so.6
  • #6 g_free
    from /usr/lib/libglib-2.0.so.0
  • #7 diagram_unselect_object
    at diagram.c line 649
  • #8 diagram_unselect_objects
    at diagram.c line 668
  • #9 delete_objects_apply
    at undo.c line 576
  • #10 edit_delete_callback
    at commands.c line 482
  • #11 g_cclosure_marshal_VOID__VOID
    from /usr/lib/libgobject-2.0.so.0
  • #12 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #13 g_signal_stop_emission
    from /usr/lib/libgobject-2.0.so.0
  • #14 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #15 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #16 _gtk_action_emit_activate
    from /usr/lib/libgtk-x11-2.0.so.0
  • #17 gtk_action_unblock_activate_from
  • #18 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #19 g_signal_stop_emission
    from /usr/lib/libgobject-2.0.so.0
  • #20 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #21 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #22 gtk_accel_group_activate
    from /usr/lib/libgtk-x11-2.0.so.0
  • #23 gtk_accel_groups_activate
    from /usr/lib/libgtk-x11-2.0.so.0
  • #24 gtk_window_activate_key
    from /usr/lib/libgtk-x11-2.0.so.0
  • #25 gtk_window_activate_key
    from /usr/lib/libgtk-x11-2.0.so.0
  • #26 _gtk_marshal_BOOLEAN__BOXED
    from /usr/lib/libgtk-x11-2.0.so.0
  • #27 g_cclosure_new_swap
    from /usr/lib/libgobject-2.0.so.0
  • #28 g_closure_invoke
    from /usr/lib/libgobject-2.0.so.0
  • #29 g_signal_stop_emission
    from /usr/lib/libgobject-2.0.so.0
  • #30 g_signal_emit_valist
    from /usr/lib/libgobject-2.0.so.0
  • #31 g_signal_emit
    from /usr/lib/libgobject-2.0.so.0
  • #32 gtk_widget_activate
    from /usr/lib/libgtk-x11-2.0.so.0
  • #33 gtk_propagate_event
    from /usr/lib/libgtk-x11-2.0.so.0
  • #34 gtk_main_do_event
    from /usr/lib/libgtk-x11-2.0.so.0
  • #35 _gdk_events_queue
    from /usr/lib/libgdk-x11-2.0.so.0
  • #36 g_main_context_dispatch
    from /usr/lib/libglib-2.0.so.0
  • #37 g_main_context_check
    from /usr/lib/libglib-2.0.so.0
  • #38 g_main_loop_run
    from /usr/lib/libglib-2.0.so.0
  • #39 gtk_main
    from /usr/lib/libgtk-x11-2.0.so.0
  • #40 main
    at main.c line 40

Comment 2 Florian Schricker 2007-03-16 11:19:00 UTC
I guess it's related to this bug: create a UML note object and try to delete it. Dia crashes.

Btw: cutting these objects (Ctrl-X) crashes Dia, too.

regards,
Florian
Comment 3 Lars Clausen 2007-03-16 17:21:21 UTC
Caused by my fix of a stranger focus bug.  I'd forgotten that Focus objects are part of Text objects, and so shouldn't be free()'ed.  Fixed in pre8.  Thanks for finding and reporting this bug quickly.
Comment 4 Lars Clausen 2007-03-17 06:37:15 UTC
*** Bug 419097 has been marked as a duplicate of this bug. ***
Comment 5 Hans Breuer 2007-03-28 18:25:00 UTC
*** Bug 423643 has been marked as a duplicate of this bug. ***