GNOME Bugzilla – Bug 418188
Crash when deleting a selected facet or receptable (UML)
Last modified: 2007-03-28 18:25:00 UTC
Whenever I try to delete a single facet or receptable, dia crashes. Running dia from a terminal gives: ----- $ dia *** glibc detected *** dia: free(): invalid pointer: 0x09886ef0 *** ======= Backtrace: ========= /lib/tls/i686/cmov/libc.so.6[0xb72648bd] /lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb7264a44] /usr/lib/libglib-2.0.so.0(g_free+0x31)[0xb7504b51] dia(diagram_unselect_object+0x2d)[0x805e6fd] dia(diagram_unselect_objects+0x77)[0x805e7d7] dia[0x8065e0e] dia(edit_delete_callback+0x42)[0x806c932] /usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x49)[0xb75d9b29] /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb75cc79b] /usr/lib/libgobject-2.0.so.0[0xb75dcb93] /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x8c7)[0xb75de0b7] /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb75de279] /usr/lib/libgtk-x11-2.0.so.0(_gtk_action_emit_activate+0x55)[0xb79d3935] /usr/lib/libgtk-x11-2.0.so.0[0xb79d5d04] /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb75cc79b] /usr/lib/libgobject-2.0.so.0[0xb75dcb93] /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xb75dde7f] /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb75de279] /usr/lib/libgtk-x11-2.0.so.0(gtk_accel_group_activate+0xd9)[0xb79cf7f9] /usr/lib/libgtk-x11-2.0.so.0(gtk_accel_groups_activate+0xfa)[0xb79cf8fa] /usr/lib/libgtk-x11-2.0.so.0(gtk_window_activate_key+0xda)[0xb7bdb63a] /usr/lib/libgtk-x11-2.0.so.0[0xb7bdb6bc] /usr/lib/libgtk-x11-2.0.so.0(_gtk_marshal_BOOLEAN__BOXED+0x60)[0xb7ab4b00] /usr/lib/libgobject-2.0.so.0[0xb75cafb9] /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x12b)[0xb75cc79b] /usr/lib/libgobject-2.0.so.0[0xb75dd1e3] /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x68f)[0xb75dde7f] /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x29)[0xb75de279] /usr/lib/libgtk-x11-2.0.so.0[0xb7bc85f8] /usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0x1ba)[0xb7aadf2a] /usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x317)[0xb7aaf0f7] /usr/lib/libgdk-x11-2.0.so.0[0xb79387ea] /usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x182)[0xb74fd802] /usr/lib/libglib-2.0.so.0[0xb75007df] /usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1a9)[0xb7500b89] /usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb4)[0xb7aaf574] dia(main+0x3f)[0x809f14f] /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb72138cc] dia[0x805dee1] ======= Memory map: ======== 08048000-080b4000 r-xp 00000000 03:05 1164992 /usr/local/bin/dia 080b4000-080b8000 rw-p 0006b000 03:05 1164992 /usr/local/bin/dia 080b8000-09aad000 rw-p 080b8000 00:00 0 [heap] b3c00000-b3c21000 rw-p b3c00000 00:00 0 b3c21000-b3d00000 ---p b3c21000 00:00 0 b3d6b000-b3d75000 r-xp 00000000 03:05 3736201 /lib/libgcc_s.so.1 b3d75000-b3d76000 rw-p 00009000 03:05 3736201 /lib/libgcc_s.so.1 b3d8d000-b3dbf000 r--p 00000000 03:05 1229335 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf b3dbf000-b3e30000 r--p 00000000 03:05 1229325 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf b3e30000-b3e62000 r--p 00000000 03:05 1229335 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf b3e62000-b3ed3000 r--p 00000000 03:05 1229325 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf b3ed3000-b3f05000 r--p 00000000 03:05 1229335 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf b3f05000-b3f76000 r--p 00000000 03:05 1229325 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf b3f76000-b443a000 r--p 00000000 03:05 1328037 /usr/share/icons/hicolor/icon-theme.cache b443a000-b5c8c000 r--p 00000000 03:05 1425760 /usr/share/icons/crystalsvg/icon-theme.cache b5c8c000-b62e8000 r--p 00000000 03:05 1329836 /usr/share/icons/gnome/icon-theme.cache b62e8000-b6556000 r--p 00000000 03:05 4620312 /usr/share/icons/Tango/icon-theme.cache b6556000-b65b6000 rw-s 00000000 00:07 19562551 /SYSV00000000 (deleted) b65b6000-b65bc000 r-xp 00000000 03:05 740569 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so b65bc000-b65bd000 rw-p 00005000 03:05 740569 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-xpm.so b65bd000-b6629000 r--p 00000000 03:05 1229321 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf b6629000-b665b000 r--p 00000000 03:05 1229335 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSansMono.ttf b665b000-b66cc000 r--p 00000000 03:05 1229325 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf b66cc000-b66fd000 r-xp 00000000 03:05 1002300 /usr/lib/libxslt.so.1.1.17 b66fd000-b66fe000 rw-p 00030000 03:05 1002300 /usr/lib/libxslt.so.1.1.17 b66fe000-b6701000 r-xp 00000000 03:05 1247787 /usr/local/lib/dia/libxslt_filter.so b6701000-b6702000 rw-p 00002000 03:05 1247787 /usr/local/lib/dia/libxslt_filter.so b6702000-b670c000 r-xp 00000000 03:05 1247785 /usr/local/lib/dia/libxfig_filter.so b670c000-b670d000 rw-p 0000a000 03:05 1247785 /usr/local/lib/dia/libxfig_filter.so b670d000-b670f000 rw-p b670d000 00:00 0 b670f000-b6712000 r-xp 00000000 03:05 1247783 /usr/local/lib/dia/libwpg_filter.so b6712000-b6713000 rw-p 00002000 03:05 1247783 /usr/local/lib/dia/libwpg_filter.so b6713000-b6740000 r-xp 00000000 03:05 1247781 /usr/local/lib/dia/libvdx_filter.so b6740000-b6741000 rw-p 0002d000 03:05 1247781 /usr/local/lib/dia/libvdx_filter.so b6741000-b6774000 r-xp 00000000 03:05 1247779 /usr/local/lib/dia/libuml_objects.so b6774000-b677e000 rw-p 00032000 03:05 1247779 /usr/local/lib/dia/libuml_objects.so b677e000-b6782000 r-xp 00000000 03:05 1247777 /usr/local/lib/dia/libsvg_filter.so b6782000-b6783000 rw-p 00004000 03:05 1247777 /usr/local/lib/dia/libsvg_filter.so b6783000-b679c000 r-xp 00000000 03:05 1247775 /usr/local/lib/dia/libstandard_objects.so b679c000-b67a0000 rw-p 00018000 03:05 1247775 /usr/local/lib/dia/libstandard_objects.so b67a0000-b67a4000 r-xp 00000000 03:05 1247773 /usr/local/lib/dia/libshape_filter.so b67a4000-b67a5000 rw-p 00003000 03:05 1247773 /usr/local/lib/dia/libshape_filter.so b67a5000-b67ab000 Killed ------ (Yes, I killed dia myself and that's the complete output I get. As I built it myself and if this is not a known bug or easily fixable, I could try to get a stack-trace while running dia with gdb. Regards, Florian
Confirmed. To reproduce: Add a Receptable object to a new diagram, then delete it. Simple. GDB backtrace:
+ Trace 118946
I guess it's related to this bug: create a UML note object and try to delete it. Dia crashes. Btw: cutting these objects (Ctrl-X) crashes Dia, too. regards, Florian
Caused by my fix of a stranger focus bug. I'd forgotten that Focus objects are part of Text objects, and so shouldn't be free()'ed. Fixed in pre8. Thanks for finding and reporting this bug quickly.
*** Bug 419097 has been marked as a duplicate of this bug. ***
*** Bug 423643 has been marked as a duplicate of this bug. ***