bluetooth-applet crashed with SIGSEGV in disconnect_callback()

[Steve Langasek]

pulseaudio was failing to see my paired headset, so I was poking around in the applet menu, resulting in a crash.

ProblemType: Crash
DistroRelease: Ubuntu 12.10
Package: gnome-bluetooth 3.4.1-0ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-24.39-generic 3.2.16
Uname: Linux 3.2.0-24-generic x86_64
ApportVersion: 2.2.5-0ubuntu1
Architecture: amd64
CheckboxSubmission: 017452a27eca3c8b498abbfa5ef91db9
CheckboxSystem: ecaaad6fa1e0799a0aa1126bf620f39e
Date: Fri Jun 22 11:36:27 2012
ExecutablePath: /usr/bin/bluetooth-applet
InstallationMedia: Ubuntu 10.04.1 LTS "Lucid Lynx" - Release amd64 (20100816.1)
ProcCmdline: bluetooth-applet
SegvAnalysis:
 Segfault happened at: 0x7f03a4d93770: mov 0x8(%rax),%rcx
 PC (0x7f03a4d93770) ok
 source "0x8(%rax)" (0x00000008) not located in a known VMA region (needed readable region)!
 destination "%rcx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: gnome-bluetooth
StacktraceTop:
 ?? () from /usr/lib/libgnome-bluetooth.so.10
 g_simple_async_result_complete (simple=0x1f9ace0) at /build/buildd/glib2.0-2.33.2/./gio/gsimpleasyncresult.c:767
 reply_cb (connection=<optimized out>, res=0x1f7d190, user_data=user_data@entry=0x1f9ace0) at /build/buildd/glib2.0-2.33.2/./gio/gdbusproxy.c:2614
 g_simple_async_result_complete (simple=0x1f7d190) at /build/buildd/glib2.0-2.33.2/./gio/gsimpleasyncresult.c:767
 g_dbus_connection_call_done (source=0x1f37910, result=<optimized out>, user_data=user_data@entry=0x1fae240) at /build/buildd/glib2.0-2.33.2/./gio/gdbusconnection.c:5290
Title: bluetooth-applet crashed with SIGSEGV in g_simple_async_result_complete()
UpgradeStatus: Upgraded to quantal on 2012-06-11 (11 days ago)
UserGroups: adm admin cdrom dialout libvirtd lpadmin mythtv plugdev sambashare src sudo

[Apport retracing service (apport)]

StacktraceTop:
 disconnect_callback (proxy=0x1ff2c00, res=<optimized out>, conndata=conndata@entry=0x20d6e00) at bluetooth-client.c:1653
 g_simple_async_result_complete (simple=0x1f9ace0) at /build/buildd/glib2.0-2.33.2/./gio/gsimpleasyncresult.c:767
 reply_cb (connection=<optimized out>, res=0x1f7d190, user_data=user_data@entry=0x1f9ace0) at /build/buildd/glib2.0-2.33.2/./gio/gdbusproxy.c:2614
 g_simple_async_result_complete (simple=0x1f7d190) at /build/buildd/glib2.0-2.33.2/./gio/gsimpleasyncresult.c:767
 g_dbus_connection_call_done (source=0x1f37910, result=<optimized out>, user_data=user_data@entry=0x1fae240) at /build/buildd/glib2.0-2.33.2/./gio/gdbusconnection.c:5290

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Steve Langasek (vorlon)]

I just reproduced this by chance. It was triggered when I selected 'disconnect' on the paired headset. (I don't normally do that; normally I either unpair from the headset side or I disable the bluetooth interface entirely.)

[Jahrome (jahrome)]

I can reproduce it too when I disconnect my bt headset.