compiz crashed with SIGSEGV in nux::Property<bool>::operator=(bool const&) from unity::dash::DashView::AnalyseLensURI(std::string const&) from unity::dash::DashView::OnActivateRequest(_GVariant*)

[Joel Stanley]

[ Impact ]

Certain cases when clicking on Dash items may cause a crash.

[ Test Case ]

It's not entirely clear how the crash is triggered, but no crash should be observed when clicking on Dash entries.

[ Regression Potential ]

The change is small and no regressions should be observed.

Debdiff of the SRU is found here: https://bugs.launchpad.net/unity/+bug/886478/+attachment/4401967/+files/unity.7.2.5.debdiff

-----------------------------------------------------------------------------

Original Description:

Clicked dash, Internet applications.

Opened a new bug as the others appear to suggest a fix is released for those bugs.

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: unity 5.0.0-0ubuntu3
ProcVersionSignature: Ubuntu 3.2.0-3.8-generic 3.2.0-rc4
Uname: Linux 3.2.0-3-generic x86_64
ApportVersion: 1.91-0ubuntu1
Architecture: amd64
Date: Sun Feb 5 14:51:39 2012
EcryptfsInUse: Yes
ExecutablePath: /usr/bin/compiz
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
ProcCmdline: compiz
SegvAnalysis:
 Segfault happened at: 0x7eff5ff51d10 <_ZN3nux8PropertyIbEaSERKb+32>: mov 0x18(%rdi),%rdi
 PC (0x7eff5ff51d10) ok
 source "0x18(%rdi)" (0x000003f0) not located in a known VMA region (needed readable region)!
 destination "%rdi" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
 nux::Property<bool>::operator=(bool const&) () from /usr/lib/compiz/libunityshell.so
 unity::dash::DashView::AnalyseLensURI(std::string const&) () from /usr/lib/compiz/libunityshell.so
 unity::dash::DashView::OnActivateRequest(_GVariant*) () from /usr/lib/compiz/libunityshell.so
 unity::UBusManager::OnCallback(_GVariant*, void*) () from /usr/lib/compiz/libunityshell.so
 ?? () from /usr/lib/compiz/libunityshell.so
Title: compiz crashed with SIGSEGV in nux::Property<bool>::operator=()
UpgradeStatus: Upgraded to precise on 2012-01-29 (6 days ago)
UserGroups: adm admin cdrom dialout libvirtd lpadmin plugdev sambashare sudo usrp video

[Apport retracing service (apport)]

StacktraceTop:
 SpaceLayout (__Nux_LineNumber__=292, __Nux_FileName__=0x7eff6006e1f8 "/usr/include/Nux-2.0/Nux/Layout.h", maxHeight=9, minHeight=9, maxWidth=2, minWidth=2, this=0x353f2c0) at /usr/include/Nux-2.0/Nux/Layout.h:295
 unity::dash::FilterExpanderLabel::BuildLayout (this=0x3d8) at /build/buildd/unity-5.2.0/plugins/unityshell/src/FilterExpanderLabel.cpp:119
 ?? ()
 ?? ()

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Stephen M. Webb (bregma)]

Problem stems from the unchecked use of std::map::operator[](). It is possible to construct scopes that will cause unity to crash.

[Launchpad Janitor (janitor)]

This bug was fixed in the package unity - 7.3.2+15.04.20150330-0ubuntu1

---------------
unity (7.3.2+15.04.20150330-0ubuntu1) vivid; urgency=medium

  [ Andrea Azzarone ]
  * Do not restore focus if a quicklist is opened during launcher key
    navigation. (LP: #932486)
  * Forward first key event that happens on top of the blank window to
    the lockscreen. (LP: #1308265)
  * Hide launcher to avoid damaging window when not needed. Also make
    sure that pressure effect works fine (previous fix has been reverted
    because of this!). (LP: #1301394)
  * Make sure scope_views_[filter.id] exists before using operator[] on
    it. (LP: #926979)
  * Make sure that signals are auto-desconnected when
    XdndStartStopNotifierImp is destroyed. (LP: #1432231)
  * Release pointer barrier if launcher is in lock_hide state. (LP:
    #1029114)

  [ Sebastien Bacher ]
  * use the new nautilus .desktop name (LP: #1436297)

  [ Stephen M. Webb ]
  * AP tests: accounted for arbitrarily-raised exceptions in checking
    scaled windows (LP: #1436095)
 -- CI Train Bot <email address hidden> Mon, 30 Mar 2015 15:48:47 +0000

[Brian Murray (brian-murray)]

Hello Joel, or anyone else affected,

Accepted unity into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/unity/7.2.5+14.04.20150521.1-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Launchpad Janitor (janitor)]

This bug was fixed in the package unity - 7.2.5+14.04.20150521.1-0ubuntu1

---------------
unity (7.2.5+14.04.20150521.1-0ubuntu1) trusty; urgency=medium

  [ Chris Townsend ]
  * Releasing 7.2.5.
  * Bump version to 7.2.5.
  * Use a 2 second delay before showing the first run shortcut hints to
    workaround a race condition on input handling. (LP: #1313597)

  [ Andrea Azzarone ]
  * Add the possibility to specify the font size and the font weight
    without chaning the default font name. (LP: #886478)
  * Do not restore focus if a quicklist is opened during launcher key
    navigation. (LP: #932486)
  * Draw osk above unity shell. (LP: #1413165)
  * Forward first key event that happens on top of the blank window to
    the lockscreen. (LP: #1308265)
  * Make sure scope_views_[filter.id] exists before using operator[] on
    it. (LP: #926979)
  * Release pointer barrier if launcher is in lock_hide state. (LP:
    #1029114)

  [ Brandon Schaefer ]
  * When we quit the quicklist it would check if the mouse was over the
    launcher, if it wasn't it would fold the launcher. We don't need to
    check this if we are in keynav as we want all the icons to be
    unfolded. (LP: #1246891)

  [ CI Train Bot ]
  * New rebuild forced.

  [ Stephen M. Webb ]
  * AP tests: accounted for arbitrarily-raised exceptions in checking
    scaled windows (LP: #1436095)

 -- CI Train Bot <email address hidden> Thu, 21 May 2015 15:07:15 +0000

[Chris J Arges (arges)]

The verification of the Stable Release Update for unity has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.