Bug 636322 – rhythmbox assert failure: *** glibc detected *** /usr/bin/rhythmbox: corrupted double-linked list: 0x00007f46306757d0 ***

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 636322 - rhythmbox assert failure: *** glibc detected *** /usr/bin/rhythmbox: corrupted double-linked list: 0x00007f46306757d0 ***


Summary:	rhythmbox assert failure: * glibc detected * /usr/bin/rhythmbox: corrupte...


Status:	RESOLVED INCOMPLETE

Product:	rhythmbox
Classification:	Other
Component:	general
Version:	0.13.x
Hardware:	Other Linux

Importance:	High critical
Target Milestone:	---
Assigned To:	RhythmBox Maintainers
QA Contact:	RhythmBox Maintainers

URL:
Whiteboard:

Depends on:
Blocks:

Reported:	2010-12-02 20:02 UTC by Cristian Aravena Romero
Modified:	2010-12-29 23:28 UTC

See Also:
GNOME target:	---
GNOME version:	---

Attachments
Valgrind4.log (195.99 KB, application/x-lzma) 2010-12-03 01:48 UTC, Cristian Aravena Romero	Details

Description Cristian Aravena Romero 2010-12-02 20:02:33 UTC

Open bug in launchpad.net:
https://bugs.launchpad.net/bugs/684400

"Open Banshee
Close Banshee
Open Rhythmbox
Close Rhythmbox
Open Apport -> 100% Reproducible"

+ Trace 224941

#0 raise
at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
#1 abort
at abort.c line 92
#2 __libc_message
at ../sysdeps/unix/sysv/linux/libc_fatal.c line 189
#3 malloc_printerr
at malloc.c line 6283
#4 _int_free
at malloc.c line 4964
#5 __libc_free
at malloc.c line 3738
#6 g_hash_table_remove_all_nodes
at /build/buildd/glib2.0-2.26.1/glib/ghash.c line 491
#7 g_hash_table_remove_all
at /build/buildd/glib2.0-2.26.1/glib/ghash.c line 1169
#8 g_hash_table_destroy
at /build/buildd/glib2.0-2.26.1/glib/ghash.c line 876
#9 rb_refstring_system_shutdown
from /usr/lib/librhythmbox-core.so.1
#10 main

Comment 1 Cristian Aravena Romero 2010-12-02 20:35:48 UTC

Valgrind:

"==15838== Invalid read of size 4
==15838== at 0x9DD26BE: PyObject_Realloc (obmalloc.c:1154)
==15838== by 0x9E5F1D8: _PyObject_GC_Resize (gcmodule.c:1396)
==15838== by 0x9DB788C: PyFrame_New (frameobject.c:655)
==15838== by 0x9E313B2: PyEval_EvalFrameEx (ceval.c:3825)
==15838== by 0x9E31467: PyEval_EvalFrameEx (ceval.c:3836)
==15838== by 0x9E31467: PyEval_EvalFrameEx (ceval.c:3836)
==15838== by 0x9E31467: PyEval_EvalFrameEx (ceval.c:3836)
==15838== by 0x9E328AF: PyEval_EvalCodeEx (ceval.c:3000)
==15838== by 0x9E30BEA: PyEval_EvalFrameEx (ceval.c:3846)
==15838== by 0x9E328AF: PyEval_EvalCodeEx (ceval.c:3000)
==15838== by 0x9E30BEA: PyEval_EvalFrameEx (ceval.c:3846)
==15838== by 0x9E328AF: PyEval_EvalCodeEx (ceval.c:3000)
==15838== by 0x9E30BEA: PyEval_EvalFrameEx (ceval.c:3846)
==15838== by 0x9E328AF: PyEval_EvalCodeEx (ceval.c:3000)
==15838== by 0x9DB862F: function_call (funcobject.c:524)
==15838== by 0x9D8ABB2: PyObject_Call (abstract.c:2492)
==15838== by 0x9D9C5BE: instancemethod_call (classobject.c:2579)
==15838== by 0x9D8ABB2: PyObject_Call (abstract.c:2492)
==15838== by 0x9DF166F: slot_tp_init (typeobject.c:5632)
==15838== by 0x9DE7957: type_call (typeobject.c:742)
==15838== by 0x9D8ABB2: PyObject_Call (abstract.c:2492)
==15838== by 0x9D8ED25: PyObject_CallFunctionObjArgs (abstract.c:2723)
==15838== by 0x9E2D713: PyEval_EvalFrameEx (ceval.c:4361)
==15838== by 0x9E328AF: PyEval_EvalCodeEx (ceval.c:3000)
==15838== by 0x9E32981: PyEval_EvalCode (ceval.c:541)
==15838== by 0x9E43DD1: PyImport_ExecCodeModuleEx (import.c:677)
==15838== by 0x9E4671D: load_source_module (import.c:1017)
==15838== by 0x9E475C4: import_submodule (import.c:2592)
==15838== by 0x9E47843: load_next (import.c:2412)
==15838== by 0x9E47EA4: import_module_level (import.c:2133)
==15838== by 0x9E48403: PyImport_ImportModuleLevel (import.c:2185)
==15838== by 0x9E2A76E: builtin___import__ (bltinmodule.c:48)
==15838== by 0x9D8ABB2: PyObject_Call (abstract.c:2492)
==15838== by 0x9E2ACC2: PyEval_CallObjectWithKeywords (ceval.c:3619)
==15838== by 0x9E2E777: PyEval_EvalFrameEx (ceval.c:2159)
==15838== by 0x9E328AF: PyEval_EvalCodeEx (ceval.c:3000)
==15838== by 0x9E32981: PyEval_EvalCode (ceval.c:541)
==15838== by 0x9E43DD1: PyImport_ExecCodeModuleEx (import.c:677)
==15838== by 0x9E4671D: load_source_module (import.c:1017)
==15838== by 0x9E475C4: import_submodule (import.c:2592)
==15838== Address 0x1b52d020 is not stack'd, malloc'd or (recently) free'd"

https://bugs.launchpad.net/rhythmbox/+bug/684400/+attachment/1753390/+files/valgrind2.log.lzma

Comment 2 Jonathan Matthew 2010-12-02 21:49:56 UTC

Thanks for taking the time to report this bug.
Unfortunately, that stack trace is missing some elements that will help a lot to solve the problem, so it will be hard for the developers to fix that crash. Can you get us a stack trace with debugging symbols? Please see http://live.gnome.org/GettingTraces for more information on how to do so and reopen this bug or report a new one. Thanks in advance!

Comment 3 Cristian Aravena Romero 2010-12-02 23:00:25 UTC

Jonathan: What symbols?

Comment 4 Cristian Aravena Romero 2010-12-03 01:48:19 UTC

Created attachment 175751 [details]
Valgrind4.log

Comment 5 Cristian Aravena Romero 2010-12-03 17:26:01 UTC

.
Hilo 6 (Thread 12637):

+ Trace 224960

#0 pthread_cond_wait
from /lib/libpthread.so.0
#1 WebCore::IconDatabase::syncThreadMainLoop
at ../WebCore/loader/icon/IconDatabase.cpp line 1412
#2 WebCore::IconDatabase::iconDatabaseSyncThread
at ../WebCore/loader/icon/IconDatabase.cpp line 1030
#3 start_thread
from /lib/libpthread.so.0
#4 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 112
#5 ??
#0 pthread_cond_wait
from /lib/libpthread.so.0
#1 WTF::TCMalloc_PageHeap::scavengerThread
at ../JavaScriptCore/wtf/FastMalloc.cpp line 2378
#2 WTF::TCMalloc_PageHeap::runScavengerThread
at ../JavaScriptCore/wtf/FastMalloc.cpp line 1501
#3 start_thread
from /lib/libpthread.so.0
#4 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 112
#5 ??
#0 pthread_cond_timedwait
from /lib/libpthread.so.0
#1 g_cond_timed_wait_posix_impl
at /build/buildd/glib2.0-2.26.1/gthread/gthread-posix.c line 242
#2 g_async_queue_pop_intern_unlocked
at /build/buildd/glib2.0-2.26.1/glib/gasyncqueue.c line 423
#3 g_async_queue_timed_pop
at /build/buildd/glib2.0-2.26.1/glib/gasyncqueue.c line 549
#4 g_thread_pool_wait_for_new_pool
at /build/buildd/glib2.0-2.26.1/glib/gthreadpool.c line 175
#5 g_thread_pool_thread_proxy
at /build/buildd/glib2.0-2.26.1/glib/gthreadpool.c line 378
#6 g_thread_create_proxy
at /build/buildd/glib2.0-2.26.1/glib/gthread.c line 1897
#7 start_thread
from /lib/libpthread.so.0
#8 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 112
#9 ??
#0 __poll
at ../sysdeps/unix/sysv/linux/poll.c line 87
#1 g_main_context_poll
at /build/buildd/glib2.0-2.26.1/glib/gmain.c line 3093
#2 g_main_context_iterate
at /build/buildd/glib2.0-2.26.1/glib/gmain.c line 2775
#3 g_main_loop_run
at /build/buildd/glib2.0-2.26.1/glib/gmain.c line 2988
#4 gdbus_shared_thread_func
at /build/buildd/glib2.0-2.26.1/gio/gdbusprivate.c line 277
#5 g_thread_create_proxy
at /build/buildd/glib2.0-2.26.1/glib/gthread.c line 1897
#6 start_thread
from /lib/libpthread.so.0
#7 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 112
#8 ??
#0 __poll
at ../sysdeps/unix/sysv/linux/poll.c line 87
#1 socket_do_iteration
at dbus-transport-socket.c line 1125
#2 _dbus_transport_do_iteration
at dbus-transport.c line 980
#3 _dbus_connection_do_iteration_unlocked
at dbus-connection.c line 1206
#4 _dbus_connection_block_pending_call
at dbus-connection.c line 2412
#5 dbus_connection_send_with_reply_and_block
at dbus-connection.c line 3559
#6 rb_metadata_load
from /usr/lib/librhythmbox-core.so.1
#7 ??
from /usr/lib/librhythmbox-core.so.1
#8 g_thread_create_proxy
at /build/buildd/glib2.0-2.26.1/glib/gthread.c line 1897
#9 start_thread
from /lib/libpthread.so.0
#10 clone
at ../sysdeps/unix/sysv/linux/x86_64/clone.S line 112
#11 ??
#0 raise
at ../nptl/sysdeps/unix/sysv/linux/raise.c line 64
#1 abort
at abort.c line 92
#2 __libc_message
at ../sysdeps/unix/sysv/linux/libc_fatal.c line 189
#3 malloc_printerr
at malloc.c line 6283
#4 _int_free
at malloc.c line 4964
#5 __libc_free
at malloc.c line 3738
#6 g_hash_table_remove_all_nodes
at /build/buildd/glib2.0-2.26.1/glib/ghash.c line 491
#7 g_hash_table_remove_all
at /build/buildd/glib2.0-2.26.1/glib/ghash.c line 1169
#8 g_hash_table_destroy
at /build/buildd/glib2.0-2.26.1/glib/ghash.c line 876
#9 rb_refstring_system_shutdown
from /usr/lib/librhythmbox-core.so.1
#10 main

Comment 6 Cristian Aravena Romero 2010-12-08 01:25:18 UTC

ping =)

Comment 7 Jonathan Matthew 2010-12-28 02:47:07 UTC

Valgrind output would be useful here, but the valgrind output you have provided shows a completely different problem.

Comment 8 Cristian Aravena Romero 2010-12-29 23:28:56 UTC

Problem:

1) Open Rhythmbox
2) add many files
3) Close rhythmbox (not full load files)
4) Open apport