Bug 596413 – crash in _gtk_rbtree_reorder

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 596413 - crash in _gtk_rbtree_reorder


Summary:	crash in _gtk_rbtree_reorder


Status:	RESOLVED DUPLICATE of bug 596580

Product:	gtk+
Classification:	Platform
Component:	Widget: GtkTreeView
Version:	2.17.x
Hardware:	Other All

Importance:	Normal critical
Target Milestone:	---
Assigned To:	gtktreeview-bugs
QA Contact:	gtktreeview-bugs

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2009-09-26 09:30 UTC by Rod Butcher
Modified:	2009-09-30 08:05 UTC

See Also:
GNOME target:	---
GNOME version:	2.27/2.28

Description Rod Butcher 2009-09-26 09:30:32 UTC

Version: 2.27.92

What were you doing when the application crashed?
Displayed : http://en.wikipedia.org/wiki/Battle_of_Mouquet_Farm


Distribution: Mandriva Linux release 2008.1 (Official) for x86_64
Gnome Release: 2.27.5 2009-08-02 (GNOME.Org)
BugBuddy Version: 2.27.1

System: Linux 2.6.30.4 #1 SMP Mon Aug 3 00:35:47 EST 2009 x86_64
X Vendor: The X.Org Foundation
X Vendor Release: 10400090
Selinux: No
Accessibility: Enabled
GTK+ Theme: Clearlooks-Olive
Icon Theme: oxygen
GTK+ Modules: gnomebreakpad

Memory status: size: 758730752 vsize: 758730752 resident: 188289024 share: 32681984 rss: 188289024 rss_rlim: 18446744073709551615
CPU usage: start_time: 1253949194 rtime: 22626 utime: 20628 stime: 1998 cutime:0 cstime: 3 timeout: 0 it_real_value: 0 frequency: 100

Backtrace was generated from '/usr/bin/epiphany'

[Thread debugging using libthread_db enabled]
[New Thread 0x7f7bb9cb2760 (LWP 16174)]
[New Thread 0x7f7ba8a55950 (LWP 16175)]
0x00007f7bad23982f in waitpid () from /lib64/libpthread.so.0

+ Trace 217860

Thread 1 (Thread 0x7f7bb9cb2760 (LWP 16174))

#0 waitpid
from /lib64/libpthread.so.0
#1 IA__g_spawn_sync
at gspawn.c line 386
#2 IA__g_spawn_command_line_sync
at gspawn.c line 700
#3 run_bug_buddy
at gnome-breakpad.cc line 369
#4 check_if_gdb
at gnome-breakpad.cc line 440
#5 bugbuddy_segv_handle
at gnome-breakpad.cc line 223
#6 <signal handler called>
#7 _gtk_rbtree_reorder
at gtkrbtree.c line 929
#8 gtk_tree_view_rows_reordered
at gtktreeview.c line 8584
#9 _gtk_marshal_VOID__BOXED_BOXED_POINTER
at gtkmarshalers.c line 1347
#10 IA__g_closure_invoke
at gclosure.c line 767
#11 signal_emit_unlocked_R
at gsignal.c line 3247
#12 IA__g_signal_emit_valist
at gsignal.c line 2980
#13 IA__g_signal_emit
at gsignal.c line 3037
#14 IA__gtk_tree_model_rows_reordered
at gtktreemodel.c line 1565
#15 gtk_tree_model_filter_rows_reordered
at gtktreemodelfilter.c line 2021
#16 _gtk_marshal_VOID__BOXED_BOXED_POINTER
at gtkmarshalers.c line 1347
#17 IA__g_closure_invoke
at gclosure.c line 767
#18 signal_emit_unlocked_R
at gsignal.c line 3247
#19 IA__g_signal_emit_valist
at gsignal.c line 2980
#20 IA__g_signal_emit
at gsignal.c line 3037
#21 IA__gtk_tree_model_rows_reordered
at gtktreemodel.c line 1565
#22 gtk_tree_model_sort_row_changed
at gtktreemodelsort.c line 558
#23 _gtk_marshal_VOID__BOXED_BOXED
at gtkmarshalers.c line 1309
#24 IA__g_closure_invoke
at gclosure.c line 767
#25 signal_emit_unlocked_R
at gsignal.c line 3247
#26 IA__g_signal_emit_valist
at gsignal.c line 2980
#27 IA__g_signal_emit
at gsignal.c line 3037
#28 IA__gtk_tree_model_row_changed
at gtktreemodel.c line 1478
#29 root_child_changed_cb
at ephy-completion-model.c line 173
#30 callback
at ephy-node.c line 145
#31 IA__g_hash_table_foreach
at ghash.c line 1211
#32 ephy_node_emit_signal
at ephy-node.c line 188
#33 child_changed
at ephy-node.c line 428
#34 IA__g_hash_table_foreach
at ghash.c line 1211
#35 ephy_node_set_property_internal
at ephy-node.c line 463
#36 ephy_node_set_property_int
at ephy-node.c line 653
#37 ephy_history_visited
at ephy-history.c line 780
#38 impl_add_page
at ephy-history.c line 849
#39 ephy_marshal_BOOLEAN__STRING_BOOLEAN_BOOLEAN
at ephy-marshal.c line 280
#40 g_type_class_meta_marshal
at gclosure.c line 878
#41 IA__g_closure_invoke
at gclosure.c line 767
#42 signal_emit_unlocked_R
at gsignal.c line 3285
#43 IA__g_signal_emit_valist
at gsignal.c line 2990
#44 IA__g_signal_emit
at gsignal.c line 3037
#45 ephy_history_add_page
at ephy-history.c line 829
#46 load_status_changed_cb
at ephy-embed.c line 249
#47 IA__g_cclosure_marshal_VOID__PARAM
at gmarshal.c line 531
#48 IA__g_closure_invoke
at gclosure.c line 767
#49 signal_emit_unlocked_R
at gsignal.c line 3247
#50 IA__g_signal_emit_valist
at gsignal.c line 2980
#51 IA__g_signal_emit
at gsignal.c line 3037
#52 g_object_dispatch_properties_changed
at gobject.c line 770
#53 g_object_notify_dispatcher
at gobject.c line 312
#54 g_object_notify_queue_thaw
at gobjectnotifyqueue.c line 125
#55 IA__g_object_notify
at gobject.c line 857
#56 WebKit::FrameLoaderClient::dispatchDidCommitLoad
at WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp line 702
#57 WebCore::FrameLoader::dispatchDidCommitLoad
at WebCore/loader/FrameLoader.cpp line 5185
#58 WebCore::FrameLoader::receivedFirstData
at WebCore/loader/FrameLoader.cpp line 856
#59 WebCore::FrameLoader::setEncoding
at WebCore/loader/FrameLoader.cpp line 1784
#60 WebKit::FrameLoaderClient::committedLoad
at WebKit/gtk/WebCoreSupport/FrameLoaderClientGtk.cpp line 148
#61 WebCore::DocumentLoader::commitLoad
at WebCore/loader/DocumentLoader.cpp line 342
#62 WebCore::ResourceLoader::didReceiveData
at WebCore/loader/ResourceLoader.cpp line 248
#63 WebCore::MainResourceLoader::didReceiveData
at WebCore/loader/MainResourceLoader.cpp line 352
#64 gotChunkCallback
at WebCore/platform/network/soup/ResourceHandleSoup.cpp line 280
#65 IA__g_cclosure_marshal_VOID__BOXED
at gmarshal.c line 566
#66 IA__g_closure_invoke
at gclosure.c line 767
#67 signal_emit_unlocked_R
at gsignal.c line 3247
#68 IA__g_signal_emit_valist
at gsignal.c line 2980
#69 IA__g_signal_emit
at gsignal.c line 3037
#70 soup_message_got_chunk
at soup-message.c line 871
#71 io_handle_sniffing
at soup-message-io.c line 257
#72 read_body_chunk
at soup-message-io.c line 388
#73 io_read
at soup-message-io.c line 849
#74 IA__g_cclosure_marshal_VOID__VOID
at gmarshal.c line 77
#75 IA__g_closure_invoke
at gclosure.c line 767
#76 signal_emit_unlocked_R
at gsignal.c line 3247
#77 IA__g_signal_emit_valist
at gsignal.c line 2980
#78 IA__g_signal_emit
at gsignal.c line 3037
#79 socket_read_watch
at soup-socket.c line 1189
#80 g_io_unix_dispatch
at giounix.c line 162
#81 g_main_dispatch
at gmain.c line 1960
#82 IA__g_main_context_dispatch
at gmain.c line 2513
#83 g_main_context_iterate
at gmain.c line 2591
#84 IA__g_main_loop_run
at gmain.c line 2799
#85 IA__gtk_main
at gtkmain.c line 1205
#86 main
at ephy-main.c line 782



----------- .xsession-errors (107 sec old) ---------------------
konqueror(19990) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(12781) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(1747) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(19990) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(3451) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(12781) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(1747) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(19990) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(3451) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(12781) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(3451) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(1747) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(19990) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(3451) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
konqueror(12781) KParts::BrowserExtension::slotSetActionText: BrowserExtension::slotSetActionText  paste   "Paste Clipboard Contents..."
--------------------------------------------------

Comment 1 Reinout van Schouwen 2009-09-27 19:58:03 UTC

Another GTKTreeView problem-- what GTK+ version are you compiling Epiphany against?

Comment 2 Rod Butcher 2009-09-28 04:58:09 UTC

gtk version is 2.17.9

Comment 3 Reinout van Schouwen 2009-09-28 09:19:44 UTC

Moving over to GTK+ then, let's see what they can make of it.

Comment 4 Kristian Rietveld 2009-09-28 09:26:18 UTC

I think Xan pointed me at these issues at a recent conference.  This is probably due to the recent filter model changes.  If anyone sees how to reliably reproduce this issue, it would be good to know.

Other than that, a back trace that also contains all values for local variables would also be of use.

Comment 5 Kristian Rietveld 2009-09-30 08:05:56 UTC

This crash most likely occurs due to a mismatch between the length of the level currently known in the rbtree and the length of the new_order array provided.  Because of this, I am fairly confident that this is a duplicate of bug 596580, which also suffers from incorrect level lengths.

*** This bug has been marked as a duplicate of bug 596580 ***