invalid cast followed by double free

[Florian Hars]

gimp crashed when saving a png image, I attach the relevant portions from .xsession-errors

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: gimp 2.6.12-1ubuntu1.1
ProcVersionSignature: Ubuntu 3.2.0-30.48-generic 3.2.27
Uname: Linux 3.2.0-30-generic x86_64
ApportVersion: 2.0.1-0ubuntu13
Architecture: amd64
Date: Mon Sep 17 11:29:45 2012
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
ProcEnviron:
 LANGUAGE=de_DE:en
 TERM=screen
 PATH=(custom, user)
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SourcePackage: gimp
UpgradeStatus: Upgraded to precise on 2012-04-30 (139 days ago)

[Florian Hars (hars)]

I can reliably reproduce the behaviour (the steps are sufficient, but not all may be necessary):

1. Grab a screenshot
2. Crop to a small part of the image
3. File->Save as... and save to a png with default settings
4. Ctrl-Z do undo crop
5. Crop to a different part of the image
6. File->Save as... and save to a png with default settings

The second file will be saved, then gimp crashes.

I attach a gdb backtrace with debug symbols.

[Thomas Hotz (thotz-deactivatedaccount)]

Thank you for reporting this bug to Ubuntu. I can't reproduce this bug on Ubuntu 13.04 with GIMP 2.8.4. I assume this bug is fixed in the 2.8 series of gimp.