GNOME Bugzilla – Bug 703496
Vino-server crashes with memory corruption
Last modified: 2013-07-03 21:51:57 UTC
So I don't exhaust myself with the description, here is a copy and paste from Launchpad: Vino-server is what is impacted. I believe what triggers this is related to customizing via vino-preferences. Afterwards, vino will not launch the server. A similar bug was reported on Oneiric and older, but I believe the bug report was marked as invalid due to it not having nearly enough info. The notification area icon will not stay. It will appear after startup, and quickly disappear. VNC is COMPLETELY UNUSABLE in every FOSS application I've tried on Ubuntu 13.04. From the GNOME Remote Desktop Client to Remnima, nothing works. Worse yet, none of the proprietary clients/servers such as Splashtop work either. The only remote desktop tool working is Teamviewer, and that runs under WINE. So remote desktop is borked on both my desktop and laptop. I will copy and paste some debug below: /usr/lib/vino/vino-server --sm-disable (vino-server:27458): EggSMClient-CRITICAL **: egg_sm_client_set_mode: assertion `global_client == NULL || global_client_mode == EGG_SM_CLIENT_MODE_DISABLED' failed 01/07/2013 03:01:26 PM Autoprobing TCP port in (all) network interface 01/07/2013 03:01:26 PM Listening IPv6://[::]:5900 01/07/2013 03:01:26 PM Listening IPv4://0.0.0.0:5900 01/07/2013 03:01:26 PM Autoprobing selected port 5900 01/07/2013 03:01:26 PM Advertising security type: 'TLS' (18) 01/07/2013 03:01:26 PM Re-binding socket to listen for VNC connections on TCP port 5900 in (all) interface 01/07/2013 03:01:26 PM Listening IPv6://[::]:5900 01/07/2013 03:01:26 PM Listening IPv4://0.0.0.0:5900 01/07/2013 03:01:26 PM Clearing securityTypes 01/07/2013 03:01:26 PM Advertising security type: 'TLS' (18) 01/07/2013 03:01:26 PM Clearing securityTypes 01/07/2013 03:01:26 PM Advertising security type: 'TLS' (18) 01/07/2013 03:01:26 PM Advertising authentication type: 'No Authentication' (1) 01/07/2013 03:01:26 PM Re-binding socket to listen for VNC connections on TCP port 5900 in (all) interface 01/07/2013 03:01:26 PM Listening IPv6://[::]:5900 01/07/2013 03:01:26 PM Listening IPv4://0.0.0.0:5900 01/07/2013 03:01:26 PM Clearing securityTypes 01/07/2013 03:01:26 PM Clearing authTypes 01/07/2013 03:01:26 PM Advertising security type: 'TLS' (18) 01/07/2013 03:01:26 PM Advertising authentication type: 'VNC Authentication' (2) 01/07/2013 03:01:26 PM Clearing securityTypes 01/07/2013 03:01:26 PM Clearing authTypes 01/07/2013 03:01:26 PM Advertising security type: 'TLS' (18) 01/07/2013 03:01:26 PM Advertising authentication type: 'VNC Authentication' (2) 01/07/2013 03:01:26 PM Advertising security type: 'VNC Authentication' (2) (vino-server:27458): LIBDBUSMENU-GLIB-WARNING **: Trying to remove a child that doesn't believe we're its parent. *** Error in `/usr/lib/vino/vino-server': free(): invalid pointer: 0x00007fdfefbf5798 *** ======= Backtrace: ========= /lib/x86_64-linux-gnu/libc.so.6(+0x80a46)[0x7fdfef8b4a46] /usr/lib/libminiupnpc.so.8(FreeUPNPUrls+0x11)[0x7fdff2494add] /usr/lib/vino/vino-server[0x4165e5] /usr/lib/vino/vino-server[0x41666d] /usr/lib/vino/vino-server[0x416c00] /usr/lib/vino/vino-server[0x416dae] /lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x49b1b)[0x7fdfefc45b1b] /lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_context_dispatch+0x135)[0x7fdfefc44f05] /lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x49248)[0x7fdfefc45248] /lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_loop_run+0x6a)[0x7fdfefc456ba] /usr/lib/vino/vino-server[0x40bdb2] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5)[0x7fdfef855ea5] /usr/lib/vino/vino-server[0x40be99] ======= Memory map: ======== 00400000-00446000 r-xp 00000000 08:06 9420 /usr/lib/vino/vino-server 00646000-00647000 r--p 00046000 08:06 9420 /usr/lib/vino/vino-server 00647000-00649000 rw-p 00047000 08:06 9420 /usr/lib/vino/vino-server 00649000-00656000 rw-p 00000000 00:00 0 01c67000-01e19000 rw-p 00000000 00:00 0 [heap] 7fdfd4000000-7fdfd4022000 rw-p 00000000 00:00 0 7fdfd4022000-7fdfd8000000 ---p 00000000 00:00 0 7fdfd8000000-7fdfd8022000 rw-p 00000000 00:00 0 7fdfd8022000-7fdfdc000000 ---p 00000000 00:00 0 7fdfdedc0000-7fdfdedc5000 r-xp 00000000 08:06 131713 /usr/lib/x86_64-linux-gnu/gtk-3.0/3.0.0/menuproxies/libappmenu.so 7fdfdedc5000-7fdfdefc4000 ---p 00005000 08:06 131713 /usr/lib/x86_64-linux-gnu/gtk-3.0/3.0.0/menuproxies/libappmenu.so 7fdfdefc4000-7fdfdefc5000 r--p 00004000 08:06 131713 /usr/lib/x86_64-linux-gnu/gtk-3.0/3.0.0/menuproxies/libappmenu.so 7fdfdefc5000-7fdfdefc6000 rw-p 00005000 08:06 131713 /usr/lib/x86_64-linux-gnu/gtk-3.0/3.0.0/menuproxies/libappmenu.so 7fdfdefc6000-7fdfdefca000 r-xp 00000000 08:06 134821 /usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so 7fdfdefca000-7fdfdf1ca000 ---p 00004000 08:06 134821 /usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so 7fdfdf1ca000-7fdfdf1cb000 r--p 00004000 08:06 134821 /usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so 7fdfdf1cb000-7fdfdf1cc000 rw-p 00005000 08:06 134821 /usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so 7fdfdf1cc000-7fdfdf1d8000 r-xp 00000000 08:06 3932423 /lib/x86_64-linux-gnu/libnss_files-2.17.so 7fdfdf1d8000-7fdfdf3d7000 ---p 0000c000 08:06 3932423 /lib/x86_64-linux-gnu/libnss_files-2.17.so 7fdfdf3d7000-7fdfdf3d8000 r--p 0000b000 08:06 3932423 /lib/x86_64-linux-gnu/libnss_files-2.17.so 7fdfdf3d8000-7fdfdf3d9000 rw-p 0000c000 08:06 3932423 /lib/x86_64-linux-gnu/libnss_files-2.17.so 7fdfdf3d9000-7fdfdf3e4000 r-xp 00000000 08:06 3932417 /lib/x86_64-linux-gnu/libnss_nis-2.17.so 7fdfdf3e4000-7fdfdf5e3000 ---p 0000b000 08:06 3932417 /lib/x86_64-linux-gnu/libnss_nis-2.17.so 7fdfdf5e3000-7fdfdf5e4000 r--p 0000a000 08:06 3932417 /lib/x86_64-linux-gnu/libnss_nis-2.17.so 7fdfdf5e4000-7fdfdf5e5000 rw-p 0000b000 08:06 3932417 /lib/x86_64-linux-gnu/libnss_nis-2.17.so 7fdfdf5e5000-7fdfdf5fc000 r-xp 00000000 08:06 3932402 /lib/x86_64-linux-gnu/libnsl-2.17.so 7fdfdf5fc000-7fdfdf7fb000 ---p 00017000 08:06 3932402 /lib/x86_64-linux-gnu/libnsl-2.17.so 7fdfdf7fb000-7fdfdf7fc000 r--p 00016000 08:06 3932402 /lib/x86_64-linux-gnu/libnsl-2.17.so 7fdfdf7fc000-7fdfdf7fd000 rw-p 00017000 08:06 3932402 /lib/x86_64-linux-gnu/libnsl-2.17.so 7fdfdf7fd000-7fdfdf7ff000 rw-p 00000000 00:00 0 7fdfdf7ff000-7fdfdf800000 ---p 00000000 00:00 0 7fdfdf800000-7fdfe0000000 rw-p 00000000 00:00 0 7fdfe0000000-7fdfe0021000 rw-p 00000000 00:00 0 7fdfe0021000-7fdfe4000000 ---p 00000000 00:00 0 7fdfe4159000-7fdfe4161000 r-xp 00000000 08:06 3932412 /lib/x86_64-linux-gnu/libnss_compat-2.17.so 7fdfe4161000-7fdfe4360000 ---p 00008000 08:06 3932412 /lib/x86_64-linux-gnu/libnss_compat-2.17.so 7fdfe4360000-7fdfe4361000 r--p 00007000 08:06 3932412 /lib/x86_64-linux-gnu/libnss_compat-2.17.so 7fdfe4361000-7fdfe4362000 rw-p 00008000 08:06 3932412 /lib/x86_64-linux-gnu/libnss_compat-2.17.so 7fdfe4362000-7fdfe4374000 r-xp 00000000 08:06 131186 /usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so 7fdfe4374000-7fdfe4573000 ---p 00012000 08:06 131186 /usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so 7fdfe4573000-7fdfe4575000 r--p 00011000 08:06 131186 /usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so 7fdfe4575000-7fdfe4576000 rw-p 00013000 08:06 131186 /usr/lib/x86_64-linux-gnu/pkcs11/gnome-keyring-pkcs11.so 7fdfe4576000-7fdfe457c000 r-xp 00000000 08:06 19406279 /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0 7fdfe457c000-7fdfe477b000 ---p 00006000 08:06 19406279 /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0 7fdfe477b000-7fdfe477c000 r--p 00005000 08:06 19406279 /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0 7fdfe477c000-7fdfe477d000 rw-p 00006000 08:06 19406279 /usr/lib/x86_64-linux-gnu/libogg.so.0.8.0 7fdfe477d000-7fdfe47a8000 r-xp 00000000 08:06 19406504 /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5 7fdfe47a8000-7fdfe49a8000 ---p 0002b000 08:06 19406504 /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5 7fdfe49a8000-7fdfe49a9000 r--p 0002b000 08:06 19406504 /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5 7fdfe49a9000-7fdfe49aa000 rw-p 0002c000 08:06 19406504 /usr/lib/x86_64-linux-gnu/libvorbis.so.0.4.5 7fdfe49aa000-7fdfe49b3000 r-xp 00000000 08:06 19406215 /usr/lib/x86_64-linux-gnu/libltdl.so.7.3.0 7fdfe49b3000-7fdfe4bb2000 ---p 00009000 08:06 19406215 /usr/lib/x86_64-linux-gnu/libltdl.so.7.3.0Aborted (core dumped) Worst of all, I am now unable to assist a family member with a crashing Windows 7 PC. And I believe running this command on the desktop generated slightly different output. I belive their was a buffer overflow leading to some memory corruption resulting in a crash. My Ubuntu box has been unusable completely in an area for the first time in many years. Please fix this, and also I ask of anyone else to attempt to see if this bug can be triggered on all other supported distros (Precise especially, as well as Quantal and Saucy, which is in development) Some more details: Ubuntu Release: lsb_release -rd Description: Ubuntu 13.04 Release: 13.04 Also, I'm running the 64 bit version. Package version: apt-cache policy vino vino: Installed: 3.6.2-0ubuntu4 Candidate: 3.6.2-0ubuntu4 Version table: *** 3.6.2-0ubuntu4 0 500 http://us.archive.ubuntu.com/ubuntu/ raring/main amd64 Packages 100 /var/lib/dpkg/status What I expected to happen: No crashing on launch from the GUI, terminal, or on startup. What happened: Already described above. In short, Desktop sharing preferences launchable via vino-preferences does not stick in the system tray, nor do any remote desktop clients I've used work on either computer, since the server and client are crashing on both. Please fix this issue. My computer is severely neutered by this. ProblemType: Bug DistroRelease: Ubuntu 13.04 Package: vino 3.6.2-0ubuntu4 Uname: Linux 3.10.0-031000-generic x86_64 ApportVersion: 2.9.2-0ubuntu8.2 Architecture: amd64 Date: Mon Jul 1 15:05:04 2013 InstallationDate: Installed on 2013-03-16 (106 days ago) InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Alpha amd64 (20130316) MarkForUpload: True ProcEnviron: TERM=xterm PATH=(custom, no user) XDG_RUNTIME_DIR=<set> LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: vino UpgradeStatus: No upgrade log present (probably fresh install) See for dependencies: https://launchpadlibrarian.net/143940727/Dependencies.txt
Feel free to change the status. As an incentive, I will offer a $20 bounty if you guys can fix this.
Hi, is there a Launchpad report of this bug, that includes a stack trace of the crash? I am suspicious about: (vino-server:27458): LIBDBUSMENU-GLIB-WARNING **: Trying to remove a child that doesn't believe we're its parent. as that looks like an Ubuntu-specific thing, so a stack trace with debugging information would be useful to figure that out.
Sure thing: https://bugs.launchpad.net/ubuntu/+source/vino/+bug/1196668 If you need more info I'll get some debug packages.
Thanks. Yes, I will need to see a stack trace, so if you could install the relevant debug packages and get a full trace, please paste it here.
Well, in this case, what command should I run to make it the most useful for you? Referencing https://wiki.ubuntu.com/DebuggingProgramCrash for what packages I need (already have these installed) and http://www.piware.de/2011/08/apport-retrace-made-useful/ for examples, I have a general idea of what I need to do. But could you give me a copy and paste of what I should put in the terminal?
You can probably just run "gdb /usr/lib/vino/vino-server", type "run", press Return, wait until it crashes and then type "bt full", press Return and paste the output into Bugzilla. Other than that, I do not use Ubuntu and so distribution-specific questions should be asked on the distribution-specific support channel, such as Launchpad or an Ubuntu IRC channel or mailing list.
gdb output: GNU gdb (GDB) 7.5.91.20130417-cvs-ubuntu Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/vino/vino-server...(no debugging symbols found)...done. (gdb) run Starting program: /usr/lib/vino/vino-server warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". [New Thread 0x7fffead5e700 (LWP 30486)] [New Thread 0x7fffea55d700 (LWP 30487)] (vino-server:30482): EggSMClient-CRITICAL **: egg_sm_client_set_mode: assertion `global_client == NULL || global_client_mode == EGG_SM_CLIENT_MODE_DISABLED' failed [New Thread 0x7fffe3fff700 (LWP 30488)] 03/07/2013 03:42:49 PM Autoprobing TCP port in (all) network interface 03/07/2013 03:42:49 PM Listening IPv6://[::]:5900 03/07/2013 03:42:49 PM Listening IPv4://0.0.0.0:5900 03/07/2013 03:42:49 PM Autoprobing selected port 5900 03/07/2013 03:42:49 PM Advertising security type: 'TLS' (18) 03/07/2013 03:42:49 PM Re-binding socket to listen for VNC connections on TCP port 5900 in (all) interface 03/07/2013 03:42:49 PM Listening IPv6://[::]:5900 03/07/2013 03:42:49 PM Listening IPv4://0.0.0.0:5900 03/07/2013 03:42:49 PM Clearing securityTypes 03/07/2013 03:42:49 PM Advertising security type: 'TLS' (18) 03/07/2013 03:42:49 PM Clearing securityTypes 03/07/2013 03:42:49 PM Advertising security type: 'TLS' (18) 03/07/2013 03:42:49 PM Advertising authentication type: 'No Authentication' (1) 03/07/2013 03:42:49 PM Re-binding socket to listen for VNC connections on TCP port 5900 in (all) interface 03/07/2013 03:42:49 PM Listening IPv6://[::]:5900 03/07/2013 03:42:49 PM Listening IPv4://0.0.0.0:5900 03/07/2013 03:42:49 PM Clearing securityTypes 03/07/2013 03:42:49 PM Clearing authTypes 03/07/2013 03:42:49 PM Advertising security type: 'TLS' (18) 03/07/2013 03:42:49 PM Advertising authentication type: 'No Authentication' (1) 03/07/2013 03:42:49 PM Advertising security type: 'No Authentication' (1) (vino-server:30482): LIBDBUSMENU-GLIB-WARNING **: Trying to remove a child that doesn't believe we're its parent. [Thread 0x7fffe3fff700 (LWP 30488) exited] [New Thread 0x7fffe3fff700 (LWP 31412)] [New Thread 0x7fffe2dc5700 (LWP 31413)] (vino-preferences:31411): Gtk-CRITICAL **: gtk_entry_set_text: assertion `text != NULL' failed [Thread 0x7fffe2dc5700 (LWP 31413) exited] ** Message: The desktop sharing service has been disabled, exiting. [Thread 0x7fffe3fff700 (LWP 31412) exited] [Thread 0x7fffead5e700 (LWP 30486) exited] [Thread 0x7ffff7fb49c0 (LWP 30482) exited] [Inferior 1 (process 30482) exited normally]
By the way, this may not be Ubuntu specific. I installed earlier vino from Debian's servers (a bleeding edge build) after the initial Ubuntu crash in order to see if a fix had landed upstream, or this was Ubuntu specific, and I still get errors when configuring the preferences dialogue. The bug occurs when changing preferences via vino-preferences, and causes vino-server to crash.
So is this Ubuntu-specific, and if so what's causing it? Is there another package that's causing this mess?
According to the output, Vino is disabled, and therefore exits immediately. You need to enable it in the preferences.
Funny thing is, Vino is enabled. But it's like the GUI isn't working.
If you run: gsettings get org.gnome.Vino enabled do you get a result of "true" or "false"? If you get false, try enabling Vino in the preferences and then running it in gdb again.
I'm getting "true" as the result back.
OK, just paste the stack trace here when you manage to reproduce it.
Ah, I guess that the session manager is autostarting Vino when the GSettings key is enabled, so you can't then start it in gdb. You will have to use whatever tool Ubuntu provides to be able to get a stack trace from a process that crashes when the session is running.
Created attachment 248356 [details] Here. This should be a full stack trace.
Thanks. The following line:
+ Trace 232186
shows that this is a patched version of Vino, as Vino bundles that library and does not link to a system version by default. I do not support that configuration, so please continue to report any Vino bugs that you find in Ubuntu on Launchpad.
Thanks anyway for your assistance. I will try to get ahold of someone that works with Ubuntu on Ubuntu's IRC channels and see if anyone can look into this.