/usr/sbin/unity-greeter:*** Error in `/usr/sbin/unity-greeter': free(): invalid pointer: ADDR ***

[errors.ubuntu.com bug bridge]

The Ubuntu Error Tracker has been receiving reports about a problem regarding unity-greeter. This problem was most recently seen with version 14.04.1-0ubuntu1, the problem page at https://errors.ubuntu.com/problem/f182d58458c2d4d6242ca43f778cd0f42e6aec24 contains more details.

[Sebastien Bacher (seb128)]

the reports on e.u.c started on the 25, the new greeter was uploaded 10 days before that ... the stacktrace are non debug ones but seems to happen in GTK code...

could be a new issue in that gtk update?
https://launchpad.net/ubuntu/+source/gtk+3.0/3.8.7-0ubuntu1

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Sebastien Bacher (seb128)]

Having a valgrind log a debug backtrace here would help.

GTK was updated on friday and reported started on monday, either nobody upgraded/rebooted/used their computer during the w.e (which is possible) or it's another update on monday which created the issue.

We recently had a report where unity-greeter wouldn't handle well buggy indicators, and we had an indicators landing yesterday, the issue could eventually be due to that as well...

Robert, Michael, do you have any idea about the issue?

[Florian Boucault (fboucault)]

$ sudo apt-get remove --purge indicator-datetime

fixes it for me

[Florian Boucault (fboucault)]

I had installed indicator-datetime 13.10.0+14.04.20131125-0ubuntu1 from trusty-proposed

[Sebastien Bacher (seb128)]

Debug stacktrace of the issue:

(gdb) bt
#0 0xb7730424 in __kernel_vsyscall ()
#1 0xb6860aff in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#2 0xb6864083 in __GI_abort () at abort.c:90
#3 0xb689da95 in __libc_message (do_abort=do_abort@entry=2,
    fmt=fmt@entry=0xb69a10d0 "*** Error in `%s': %s: 0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
#4 0xb68a87c2 in malloc_printerr (action=<optimized out>,
    str=<optimized out>, ptr=0xb6da0463 <g_str_equal+35>) at malloc.c:4923
#5 0xb68a9510 in _int_free (av=0x8b000000, p=0xb6da045b <g_str_equal+27>,
    have_lock=0) at malloc.c:3779
#6 0xb6db65d0 in g_free (mem=0xb6da0463 <g_str_equal+35>)
    at /build/buildd/glib2.0-2.38.1/./glib/gmem.c:197
#7 0xb6d943eb in g_datalist_clear (datalist=datalist@entry=0x8613790)
    at /build/buildd/glib2.0-2.38.1/./glib/gdataset.c:277
#8 0xb6e7f92e in g_object_finalize (object=0x8613788)
    at /build/buildd/glib2.0-2.38.1/./gobject/gobject.c:1024
#9 0xb746335c in gtk_widget_finalize (object=0x8613788)
    at /tmp/build/gtk+3/310/build-area/gtk+3.0-3.10.4/./gtk/gtkwidget.c:11515
#10 0xb6e80088 in g_object_unref (_object=0x8613788)
    at /build/buildd/glib2.0-2.38.1/./gobject/gobject.c:3197
#11 0xb6e8207f in g_object_run_dispose (object=object@entry=0x8613788)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.38.1/./gobject/gobject.c:1069
#12 0xb7463ff1 in gtk_widget_destroy (widget=0x8613788)
    at /tmp/build/gtk+3/310/build-area/gtk+3.0-3.10.4/./gtk/gtkwidget.c:4268
#13 0xb7338f00 in gtk_menu_shell_tracker_remove_func (position=0,
    user_data=0x84b36c0)
    at /tmp/build/gtk+3/310/build-area/gtk+3.0-3.10.4/./gtk/gtkmenushell.c:2043
#14 0xb733bf15 in gtk_menu_tracker_remove_items (tracker=0xb5554f38,
    tracker=0xb5554f38, n_items=1, offset=0, change_point=0xb555217c)
    at /tmp/build/gtk+3/310/build-area/gtk+3.0-3.10.4/./gtk/gtkmenutracker.c:257
#15 gtk_menu_tracker_model_changed (model=0x8643920, position=0, removed=1,
    added=0, user_data=0xb5554f38)
    at /tmp/build/gtk+3/310/build-area/gtk+3.0-3.10.4/./gtk/gtkmenutracker.c:354
#16 0xb66043c6 in ffi_call_SYSV () at ../src/x86/sysv.S:65
#17 0xb660414b in ffi_call (cif=<optimized out>, cif@entry=0xbf956624,
    fn=<optimized out>, rvalue=<optimized out>, avalue=<optimized out>,
    avalue@entry=0xbf956550) at ../src/x86/ffi.c:411
#18 0xb6e7c129 in g_cclosure_marshal_generic (closure=0x862db70,
    return_gvalue=0x0, n_param_values=4, param_values=0xbf956790,
    invocation_hint=0xbf95673c, marshal_data=0x0)
---Type <return> to continue, or q <return> to quit---
    at /build/buildd/glib2.0-2.38.1/./gobject/gclosure.c:1454
#19 0xb6e7b8ae in g_closure_invoke (closure=0x862db70,
    return_value=return_value@entry=0x0, n_param_values=4,
    param_values=param_values@entry=0xbf956790,
    invocation_hint=invocation_hint@entry=0xbf95673c)
    at /build/buildd/glib2.0-2.38.1/./gobject/gclosure.c:777
#20 0xb6e8ddf9 in signal_emit_unlocked_R (node=node@entry=0x8623680, detail=0,
    instance=0x8643920, emission_return=emission_return@entry=0x0,
 ...

[PS Jenkins bot (ps-jenkins)]

Fix committed into lp:ido at revision None, scheduled for release in ido, milestone Unknown

[Sebastien Bacher (seb128)]

Issue confirmed with trusty-proposed and fix confirmed with ido trunk

[Launchpad Janitor (janitor)]

This bug was fixed in the package ido - 13.10.0+14.04.20131126-0ubuntu1

---------------
ido (13.10.0+14.04.20131126-0ubuntu1) trusty; urgency=low

  [ Lars Uebernickel ]
  * ido_calendar_menu_item_new_from_model: initialize local variables
    with NULL Both of these variables will be passed to g_free() without
    checking whether g_menu_item_get_attribute() failed. (LP: #1255076)

  [ Ubuntu daily release ]
  * Automatic snapshot from revision 160
 -- Ubuntu daily release <email address hidden> Tue, 26 Nov 2013 19:28:37 +0000

[Florian Boucault (fboucault)]

I confirm that the bug has disappeared for me with latest updates from trusty-proposed.

[Sebastien Bacher (seb128)]

Thanks Florian for confirming!