Bug 441812 – Seg fault when pasting into a layer with a mask

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 441812 - Seg fault when pasting into a layer with a mask


Summary:	Seg fault when pasting into a layer with a mask


Status:	RESOLVED DUPLICATE of bug 441878

Product:	GIMP
Classification:	Other
Component:	General
Version:	2.3.x
Hardware:	Other Linux

Importance:	Normal normal
Target Milestone:	---
Assigned To:	GIMP Bugs
QA Contact:	GIMP Bugs

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2007-05-28 13:05 UTC by Norm Murray
Modified:	2008-01-15 14:12 UTC

See Also:
GNOME target:	---
GNOME version:	---

Description Norm Murray 2007-05-28 13:05:34 UTC

I seem to be able to reproducibly crash GIMP 2.3.17 when pasting onto either the base layer or layer mask of a image. 

Image is 4368x2912 pixels. Has 4 layers, the top two with masks. Copy the second layer (without mask) and paste onto the third with the layer set to edit mask or not and it's seg faulting - reproduced within a gdb run so have a stack trace available attached below. 

Layer 4 with maks, mode overlay
Layer 3 with mask, mode overlay
Layer 2 mode normal, not visible
Layer 1 (background) is normal mode



$ gdb gimp
GNU gdb Red Hat Linux (6.5-15.fc6rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1".

(gdb) run

Starting program: /usr/bin/gimp 
[Thread debugging using libthread_db enabled]
[New Thread -1208334656 (LWP 11029)]
This is a development version of GIMP.  Debug messages may appear here.

[New Thread -1210434672 (LWP 11055)]
[New Thread -1220924528 (LWP 11056)]
(null): image-type contains unrecognizable parts:'+'

Program received signal SIGSEGV, Segmentation fault.

+ Trace 136440

Thread NaN (LWP 11029)

#0 _int_malloc
from /lib/libc.so.6
#1 malloc
from /lib/libc.so.6
#2 g_malloc
from /lib/libglib-2.0.so.0
#3 gtk_label_set_justify
from /usr/lib/libgtk-x11-2.0.so.0
#4 gtk_label_set_use_underline
from /usr/lib/libgtk-x11-2.0.so.0
#5 gtk_label_new
from /usr/lib/libgtk-x11-2.0.so.0
#6 g_object_newv
from /lib/libgobject-2.0.so.0
#7 g_object_new_valist
from /lib/libgobject-2.0.so.0
#8 g_object_new
from /lib/libgobject-2.0.so.0
#9 gtk_action_new
from /usr/lib/libgtk-x11-2.0.so.0
#10 gimp_action_connect_proxy
at gimpaction.c line 215
#11 gtk_action_create_menu_item
from /usr/lib/libgtk-x11-2.0.so.0
#12 gtk_ui_manager_new_merge_id
from /usr/lib/libgtk-x11-2.0.so.0
#13 gtk_ui_manager_new_merge_id
from /usr/lib/libgtk-x11-2.0.so.0
#14 gtk_ui_manager_new_merge_id
from /usr/lib/libgtk-x11-2.0.so.0
#15 gtk_ui_manager_new_merge_id
from /usr/lib/libgtk-x11-2.0.so.0
#16 gtk_ui_manager_remove_ui
from /usr/lib/libgtk-x11-2.0.so.0
#17 gimp_ui_manager_entry_ensure
at gimpuimanager.c line 756
#18 gimp_ui_manager_get_widget
at gimpuimanager.c line 360
#19 gtk_ui_manager_get_widget
from /usr/lib/libgtk-x11-2.0.so.0
#20 gimp_ui_manager_ui_popup
at gimpuimanager.c line 586
#21 gimp_editor_popup_menu
at gimpeditor.c line 443
#22 g_value_set_static_boxed
from /lib/libgobject-2.0.so.0
#23 g_closure_invoke
from /lib/libgobject-2.0.so.0
#24 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#25 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#26 g_signal_emit
from /lib/libgobject-2.0.so.0
#27 gimp_container_view_context_item
at gimpcontainerview.c line 760
#28 gimp_container_tree_view_button_press
#29 gtk_marshal_BOOLEAN__VOID
from /usr/lib/libgtk-x11-2.0.so.0
#30 g_closure_invoke
from /lib/libgobject-2.0.so.0
#31 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#32 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#33 g_signal_emit
from /lib/libgobject-2.0.so.0
#34 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#35 gtk_propagate_event
from /usr/lib/libgtk-x11-2.0.so.0
#36 gtk_main_do_event
from /usr/lib/libgtk-x11-2.0.so.0
#37 gdk_add_client_message_filter
from /usr/lib/libgdk-x11-2.0.so.0
#38 g_main_context_dispatch
from /lib/libglib-2.0.so.0
#39 g_main_context_check
from /lib/libglib-2.0.so.0
#40 g_main_loop_run
from /lib/libglib-2.0.so.0
#41 app_run
at app.c line 245
#42 main
at main.c line 384
#43 __libc_start_main
from /lib/libc.so.6
#44 _start

Comment 1 Norm Murray 2007-05-28 13:15:14 UTC

Hmmm... it's even worse - just tried again with a much simpler image 377x233 (default) white background. 

Open image, duplicate layer, scribble on the background, copy and paste onto the background copy layer, click the anchor icon and crash with this trace:
$ gdb gimp
GNU gdb Red Hat Linux (6.5-15.fc6rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1".

(gdb) run
Starting program: /usr/bin/gimp 
[Thread debugging using libthread_db enabled]
[New Thread -1208285504 (LWP 11249)]
This is a development version of GIMP.  Debug messages may appear here.

[New Thread -1210385520 (LWP 11275)]
[New Thread -1220875376 (LWP 11276)]
(null): image-type contains unrecognizable parts:'+'

Program received signal SIGSEGV, Segmentation fault.

+ Trace 136441

Thread NaN (LWP 11249)

#0 pango_layout_iter_free
from /usr/lib/libpango-1.0.so.0
#1 g_slist_foreach
from /lib/libglib-2.0.so.0
#2 pango_layout_line_unref
from /usr/lib/libpango-1.0.so.0
#3 pango_layout_iter_free
from /usr/lib/libpango-1.0.so.0
#4 pango_layout_set_text
from /usr/lib/libpango-1.0.so.0
#5 g_object_unref
from /lib/libgobject-2.0.so.0
#6 gtk_item_factory_new
from /usr/lib/libgtk-x11-2.0.so.0
#7 gtk_label_set_justify
from /usr/lib/libgtk-x11-2.0.so.0
#8 gtk_label_set_text
from /usr/lib/libgtk-x11-2.0.so.0
#9 gimp_histogram_editor_info_update
at gimphistogrameditor.c line 462
#10 gimp_histogram_editor_layer_changed
at gimphistogrameditor.c line 338
#11 g_cclosure_marshal_VOID__VOID
from /lib/libgobject-2.0.so.0
#12 g_closure_invoke
from /lib/libgobject-2.0.so.0
#13 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#14 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#15 g_signal_emit
from /lib/libgobject-2.0.so.0
#16 gimp_image_set_active_layer
at gimpimage.c line 2568
#17 floating_sel_activate_drawable
at gimplayer-floating-sel.c line 190
#18 gimp_image_remove_layer
at gimpimage.c line 2913
#19 floating_sel_anchor
at gimplayer-floating-sel.c line 158
#20 layers_anchor_cmd_callback
at layers-commands.c line 416
#21 g_cclosure_marshal_VOID__VOID
from /lib/libgobject-2.0.so.0
#22 g_closure_invoke
from /lib/libgobject-2.0.so.0
#23 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#24 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#25 g_signal_emit
from /lib/libgobject-2.0.so.0
#26 gtk_widget_get_action
from /usr/lib/libgtk-x11-2.0.so.0
#27 gtk_action_activate
from /usr/lib/libgtk-x11-2.0.so.0
#28 g_cclosure_marshal_VOID__VOID
from /lib/libgobject-2.0.so.0
#29 g_closure_invoke
from /lib/libgobject-2.0.so.0
#30 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#31 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#32 g_signal_emit
from /lib/libgobject-2.0.so.0
#33 gtk_button_clicked
from /usr/lib/libgtk-x11-2.0.so.0
#34 gtk_button_set_alignment
from /usr/lib/libgtk-x11-2.0.so.0
#35 g_cclosure_marshal_VOID__VOID
from /lib/libgobject-2.0.so.0
#36 g_value_set_static_boxed
from /lib/libgobject-2.0.so.0
#37 g_closure_invoke
from /lib/libgobject-2.0.so.0
#38 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#39 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#40 g_signal_emit
from /lib/libgobject-2.0.so.0
#41 gtk_button_released
from /usr/lib/libgtk-x11-2.0.so.0
#42 gtk_button_released
from /usr/lib/libgtk-x11-2.0.so.0
#43 gimp_button_button_release
at gimpbutton.c line 153
#44 gtk_marshal_BOOLEAN__VOID
from /usr/lib/libgtk-x11-2.0.so.0
#45 g_value_set_static_boxed
from /lib/libgobject-2.0.so.0
#46 g_closure_invoke
from /lib/libgobject-2.0.so.0
#47 g_signal_chain_from_overridden
from /lib/libgobject-2.0.so.0
#48 g_signal_emit_valist
from /lib/libgobject-2.0.so.0
#49 g_signal_emit
from /lib/libgobject-2.0.so.0
#50 gtk_widget_get_default_style
from /usr/lib/libgtk-x11-2.0.so.0
#51 gtk_propagate_event
from /usr/lib/libgtk-x11-2.0.so.0
#52 gtk_main_do_event
from /usr/lib/libgtk-x11-2.0.so.0
#53 gdk_add_client_message_filter
from /usr/lib/libgdk-x11-2.0.so.0
#54 g_main_context_dispatch
from /lib/libglib-2.0.so.0
#55 g_main_context_check
from /lib/libglib-2.0.so.0
#56 g_main_loop_run
from /lib/libglib-2.0.so.0
#57 app_run
at app.c line 245
#58 main
at main.c line 384
#59 __libc_start_main
from /lib/libc.so.6
#60 _start

Comment 2 Michael Natterer 2007-05-28 21:03:38 UTC

I can't reproduce this. The histogram dialog from the second stack
trace also doesn't cause any problems here.

Comment 3 Sven Neumann 2007-05-29 10:01:36 UTC

I was able to reproduce it but the problem is fixed now due to the changes made for bug #441878. I am closing this report as a duplicate.

*** This bug has been marked as a duplicate of 441878 ***