Bug 660888 – nautilus crashed during file renaming, with SIGSEGV in icon_rename_ended_cb()

After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.

Bug 660888 - nautilus crashed during file renaming, with SIGSEGV in icon_rename_ended_cb()


Summary:	nautilus crashed during file renaming, with SIGSEGV in icon_rename_ended_cb()


Status:	RESOLVED INCOMPLETE

Product:	nautilus
Classification:	Core
Component:	Crashers
Version:	3.2.x
Hardware:	Other Linux

Importance:	Normal critical
Target Milestone:	---
Assigned To:	Nautilus Maintainers
QA Contact:	Nautilus Maintainers

URL:
Whiteboard:

Duplicates:	678553 (view as bug list)
Depends on:
Blocks:

Reported:	2011-10-04 14:46 UTC by Pedro Villavicencio
Modified:	2013-01-08 10:06 UTC

See Also:
GNOME target:	---
GNOME version:	3.1/3.2

Description Pedro Villavicencio 2011-10-04 14:46:15 UTC

this report has been filed here:

https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/864438

"I was trying to rename a folder, and Nautilus crashed. It occurred more than once in a row."

".

+ Trace 228678

Thread 1 (Thread 0x7f21eb8af960 (LWP 6535))

#0 g_type_check_instance_is_a
at /build/buildd/glib2.0-2.30.0/./gobject/gtype.c line 3952
#1 icon_rename_ended_cb
at nautilus-icon-view.c line 1984
#2 ffi_call_unix64
at ../src/x86/unix64.S line 75
#3 ffi_call
at ../src/x86/ffi64.c line 486
#4 g_cclosure_marshal_generic
at /build/buildd/glib2.0-2.30.0/./gobject/gclosure.c line 1147
#5 g_closure_invoke
at /build/buildd/glib2.0-2.30.0/./gobject/gclosure.c line 774
#6 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.30.0/./gobject/gsignal.c line 3272
#7 g_signal_emit_valist
at /build/buildd/glib2.0-2.30.0/./gobject/gsignal.c line 3003
#8 g_signal_emit
at /build/buildd/glib2.0-2.30.0/./gobject/gsignal.c line 3060
#9 end_renaming_mode
at nautilus-icon-container.c line 8338
#10 icon_toggle_selected
at nautilus-icon-container.c line 448
#11 icon_set_selected
at nautilus-icon-container.c line 492
#12 select_one_unselect_others
at nautilus-icon-container.c line 2358
#13 unselect_all
at nautilus-icon-container.c line 2371
#14 button_press_event
at nautilus-icon-container.c line 4295
#15 _gtk_marshal_BOOLEAN__BOXED
at /build/buildd/gtk+3.0-3.2.0/./gtk/gtkmarshalers.c line 85
#16 g_closure_invoke
at /build/buildd/glib2.0-2.30.0/./gobject/gclosure.c line 774
#17 signal_emit_unlocked_R
at /build/buildd/glib2.0-2.30.0/./gobject/gsignal.c line 3310
#18 g_signal_emit_valist
at /build/buildd/glib2.0-2.30.0/./gobject/gsignal.c line 3013
#19 g_signal_emit
at /build/buildd/glib2.0-2.30.0/./gobject/gsignal.c line 3060
#20 gtk_widget_event_internal
at /build/buildd/gtk+3.0-3.2.0/./gtk/gtkwidget.c line 6132
#21 gtk_propagate_event
at /build/buildd/gtk+3.0-3.2.0/./gtk/gtkmain.c line 2629
#22 gtk_main_do_event
at /build/buildd/gtk+3.0-3.2.0/./gtk/gtkmain.c line 1894
#23 gdk_event_source_dispatch
at /build/buildd/gtk+3.0-3.2.0/./gdk/x11/gdkeventsource.c line 360
#24 g_main_dispatch
at /build/buildd/glib2.0-2.30.0/./glib/gmain.c line 2441
#25 g_main_context_dispatch
at /build/buildd/glib2.0-2.30.0/./glib/gmain.c line 3011
#26 g_main_context_iterate
at /build/buildd/glib2.0-2.30.0/./glib/gmain.c line 3089
#27 g_main_loop_run
at /build/buildd/glib2.0-2.30.0/./glib/gmain.c line 3297
#28 gtk_main
at /build/buildd/gtk+3.0-3.2.0/./gtk/gtkmain.c line 1367
#29 g_application_run
at /build/buildd/glib2.0-2.30.0/./gio/gapplication.c line 1323
#30 main
at nautilus-main.c line 102

Comment 1 William Jon McCann 2012-09-05 00:51:27 UTC

This is odd because the canvas/icon view holds a ref for the file so it won't get disposed while in use within the canvas container.

And we only release that ref:
if (nautilus_canvas_container_remove (get_canvas_container (canvas_view),
					      NAUTILUS_CANVAS_ICON_DATA (file))) {
		nautilus_file_unref (file);
	}


and container_remove calls:
	end_renaming_mode (container, FALSE);

Which emits the end rename signal.

Very odd. Any tips on how to reproduce this? Does this still occur?

Comment 2 William Jon McCann 2012-09-05 02:08:27 UTC

*** Bug 678553 has been marked as a duplicate of this bug. ***

Comment 3 Tobias Mueller 2013-01-08 10:06:32 UTC

Closing this bug report as no further information has been provided. Please feel free to reopen this bug if you can provide the information asked for.
Thanks!