run pinta open file tring to select rectangle application is crashed

[Qwerity]

I am using Ubuntu Bionic 18.04

there is cmd output

~$ pinta
free(): invalid pointer
Stacktrace:

  at <unknown> <0xffffffff>
  at (wrapper managed-to-native) GLib.SList.g_free (intptr) <0x0005f>
  at GLib.ListBase.Empty () <0x0013c>
  at GLib.ListBase.Dispose (bool) <0x0000f>
  at GLib.ListBase.Finalize () <0x0001d>
  at (wrapper runtime-invoke) object.runtime_invoke_virtual_void__this__ (object,intptr,intptr,intptr) <0x00068>

Native stacktrace:

 /usr/bin/mono(+0xc8514) [0x5592eea01514]
 /lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fef3a18f890]
 /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xc7) [0x7fef39bb2e97]
 /lib/x86_64-linux-gnu/libc.so.6(abort+0x141) [0x7fef39bb4801]
 /lib/x86_64-linux-gnu/libc.so.6(+0x89897) [0x7fef39bfd897]
 /lib/x86_64-linux-gnu/libc.so.6(+0x9090a) [0x7fef39c0490a]
 /lib/x86_64-linux-gnu/libc.so.6(cfree+0x4cc) [0x7fef39c0be1c]
 [0x410e4070]

Debug info from gdb:

[New LWP 1408]
[New LWP 1409]
[New LWP 1410]
[New LWP 1411]
[New LWP 1414]
[New LWP 1433]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007fef39c88bf9 in __GI___poll (fds=0x7fef18013730, nfds=5, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
29 ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
  Id Target Id Frame
* 1 Thread 0x7fef3ad2a780 (LWP 1407) "Main" 0x00007fef39c88bf9 in __GI___poll (fds=0x7fef18013730, nfds=5, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
  2 Thread 0x7fef38bff700 (LWP 1408) "SGen worker" 0x00007fef3a18a9f3 in futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x5592eeef4a08) at ../sysdeps/unix/sysv/linux/futex-internal.h:88
  3 Thread 0x7fef36834700 (LWP 1409) "Finalizer" 0x00007fef3a18f23a in __waitpid (pid=1434, stat_loc=0x7fef3683276c, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:30
  4 Thread 0x7fef2786c700 (LWP 1410) "gmain" 0x00007fef39c88bf9 in __GI___poll (fds=0x5592ef401440, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  5 Thread 0x7fef2706b700 (LWP 1411) "gdbus" 0x00007fef39c88bf9 in __GI___poll (fds=0x5592ef259460, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  6 Thread 0x7fef12192700 (LWP 1414) "threaded-ml" 0x00007fef39c88bf9 in __GI___poll (fds=0x7fef04007030, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  7 Thread 0x7fef11991700 (LWP 1433) "pool" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38

Thread 7 (Thread 0x7fef11991700 (LWP 1433)):
#0 0x00007fef39c8f839 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007fef2f6c4f2a in g_cond_wait_until () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fef2f6524f1 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fef2f652aac in g_async_queue_timeout_pop () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007fef2f6a78ae in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007fef2f6a6e05 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#6 0x00007fef3a1846db in start_thread (arg=0x7fef11991700) at pthread_create.c:463
#7 0x00007fef39c9588f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 6 (Thread 0x7fef12192700 (LWP 1414)):
#0 0x00007fef39c88bf9 in __GI___poll (fds=0x7fef04007030, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fef12de2451 in () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#2 0x00007fef12dd3e10 in pa_mainloop_poll () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#3 0x00007fef12dd44a0 in pa_mainloop_iterate () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#4 0x00007fef12dd4530 in pa_mainloop_run () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#5 0x00007fef12de2399 in () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#6 0x00007fef12b842a8 in () at /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-11.1.so
#7 0x00007fef3a1846db in start_thread (arg=0x7fef12192700) at pthread_create.c:463
#8 0x00007fef39c9588f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 5 (Thread 0x7fef2706b700 (LWP 1411)):
#0 0x00007fef39c88bf9 in __GI___poll (fds=0x5592ef259460, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fef2f67f439 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fef2f67f7d2 in g_main_loop_run () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fef34198e76 in () at /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
#4 0x00007fef2f6a6e05 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007fef3a1846db in start_thread (arg=0x7fef2706b700) at pthread_create.c:463
#6 0x00007fef39c9588f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 4 (Thread 0x7fef2786c700 (LWP 1410)):
#0 0x00007fef39c88bf9 in __GI___poll (fds=0x5592ef401440, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fef2f67f439 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fef2f67f54c in g_main_context_iteration () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fef2f67f591 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007fef2f6a6e05 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007fef3a1846db in start_thread (arg=0x7fef2786c700) at pthread_create.c:463
#6 0x00007fef39c9588f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7fef36834700 (LWP 1409)):
#0 0x00007fef3a18f23a in __waitpid (pid=1434, stat_loc=0x7fef3683276c, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:30
#1 0x00005592eea015f0 in ()
#2 0x00007fef3a18f890 in <signal handler called> () at /lib/x86_64-linux-gnu/libpthread.so.0
#3 0x00007fef39bb2e97 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#4 0x00007fef39bb4801 in __GI_abort () at abort.c:79
#5 0x00007fef39bfd897 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7fef39d2ab9a "%s\n") at ../sysdeps/posix/libc_fatal.c:181
#6 0x00007fef39c0490a in malloc_printerr (str=str@entry=0x7fef39d28d88 "free(): invalid pointer") at malloc.c:5350
#7 0x00007fef39c0be1c in _int_free (have_lock=0, p=0x5592ef9fb3a0, av=0x7fef39f5fc40 <main_arena>) at malloc.c:4157
#8 0x00007fef39c0be1c in __GI___libc_free (mem=0x5592ef9fb3b0) at malloc.c:3124
#9 0x00000000410e4070 in ()
#10 0x00005592ef9fb3b0 in ()
#11 0x00005592ef036190 in ()
#12 0x00005592ef036190 in ()
#13 0x0000000000000000 in ()

Thread 2 (Thread 0x7fef38bff700 (LWP 1408)):
#0 0x00007fef3a18a9f3 in futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x5592eeef4a08) at ../sysdeps/unix/sysv/linux/futex-internal.h:88
#1 0x00007fef3a18a9f3 in __pthread_cond_wait_common (abstime=0x0, mutex=0x5592eeef4a20, cond=0x5592eeef49e0) at pthread_cond_wait.c:502
#2 0x00007fef3a18a9f3 in __pthread_cond_wait (cond=0x5592eeef49e0, mutex=0x5592eeef4a20) at pthread_cond_wait.c:655
#3 0x00005592eeb89863 in ()
#4 0x00007fef3a1846db in start_thread (arg=0x7fef38bff700) at pthread_create.c:463
#5 0x00007fef39c9588f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7fef3ad2a780 (LWP 1407)):
#0 0x00007fef39c88bf9 in __GI___poll (fds=0x7fef18013730, nfds=5, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fef2f67f439 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fef2f67f7d2 in g_main_loop_run () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fef35903a37 in gtk_main () at /usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#4 0x00000000410cdbea in ()
#5 0x00007ffd7450e510 in ()
#6 0x00007ffd7450e500 in ()
#7 0x00007fef38c00950 in ()
#8 0x00007fef38c00d60 in ()
#9 0x00007fef38c00db0 in ()
#10 0x00005592ef068e20 in ()
#11 0x0000000040fa86d0 in ()
#12 0x00007ffd7450e090 in ()
#13 0x00007ffd7450df40 in ()
#14 0x00000000410cdb7c in ()
#15 0x00007ffd7450e090 in ()
#16 0x0000000040fa8688 in ()
#17 0x00007fef38c021f0 in ()
#18 0x00007fef38c00788 in ()
#19 0x00007fef38c021f0 in ()
#20 0x00007fef3ac24130 in ()
#21 0x00007fef38c00788 in ()
#22 0x00007fef38c021f0 in ()
#23 0x00007fef3ac20130 in ()
#24 0x00007fef38c00788 in ()
#25 0x00007fef38c021f0 in ()
#26 0x00007fef3ac18130 in ()
#27 0x00007fef38c00400 in ()
#28 0x0000000000000000 in ()

=================================================================
Got a SIGABRT while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

Aborted

[Gregory (gmarthews-1)]

This is an 18.04 bug - starts up OK, but then the moment you try to do a couple of things like highlight and crop, then it simply exits.

[Qwerity (qwerity)]

thanks for reply,

I will wait the fix!

On Wed, May 9, 2018 at 4:51 PM Gregory <email address hidden> wrote:

> This is an 18.04 bug - starts up OK, but then the moment you try to do a
> couple of things like highlight and crop, then it simply exits.
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1767961
>
> Title:
> run pinta open file tring to select rectangle application is crashed
>
> Status in Pinta:
> New
>
> Bug description:
> I am using Ubuntu Bionic 18.04
>
> there is cmd output
>
>
> ~$ pinta
> free(): invalid pointer
> Stacktrace:
>
> at <unknown> <0xffffffff>
> at (wrapper managed-to-native) GLib.SList.g_free (intptr) <0x0005f>
> at GLib.ListBase.Empty () <0x0013c>
> at GLib.ListBase.Dispose (bool) <0x0000f>
> at GLib.ListBase.Finalize () <0x0001d>
> at (wrapper runtime-invoke) object.runtime_invoke_virtual_void__this__
> (object,intptr,intptr,intptr) <0x00068>
>
> Native stacktrace:
>
> /usr/bin/mono(+0xc8514) [0x5592eea01514]
> /lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7fef3a18f890]
> /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xc7) [0x7fef39bb2e97]
> /lib/x86_64-linux-gnu/libc.so.6(abort+0x141) [0x7fef39bb4801]
> /lib/x86_64-linux-gnu/libc.so.6(+0x89897) [0x7fef39bfd897]
> /lib/x86_64-linux-gnu/libc.so.6(+0x9090a) [0x7fef39c0490a]
> /lib/x86_64-linux-gnu/libc.so.6(cfree+0x4cc) [0x7fef39c0be1c]
> [0x410e4070]
>
> Debug info from gdb:
>
> [New LWP 1408]
> [New LWP 1409]
> [New LWP 1410]
> [New LWP 1411]
> [New LWP 1414]
> [New LWP 1433]
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library
> "/lib/x86_64-linux-gnu/libthread_db.so.1".
> 0x00007fef39c88bf9 in __GI___poll (fds=0x7fef18013730, nfds=5,
> timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
> 29 ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
> Id Target Id Frame
> * 1 Thread 0x7fef3ad2a780 (LWP 1407) "Main" 0x00007fef39c88bf9 in
> __GI___poll (fds=0x7fef18013730, nfds=5, timeout=500) at
> ../sysdeps/unix/sysv/linux/poll.c:29
> 2 Thread 0x7fef38bff700 (LWP 1408) "SGen worker" 0x00007fef3a18a9f3
> in futex_wait_cancelable (private=<optimized out>, expected=0,
> futex_word=0x5592eeef4a08) at ../sysdeps/unix/sysv/linux/futex-internal.h:88
> 3 Thread 0x7fef36834700 (LWP 1409) "Finalizer" 0x00007fef3a18f23a
> in __waitpid (pid=1434, stat_loc=0x7fef3683276c, options=0) at
> ../sysdeps/unix/sysv/linux/waitpid.c:30
> 4 Thread 0x7fef2786c700 (LWP 1410) "gmain" 0x00007fef39c88bf9 in
> __GI___poll (fds=0x5592ef401440, nfds=2, timeout=-1) at
> ../sysdeps/unix/sysv/linux/poll.c:29
> 5 Thread 0x7fef2706b700 (LWP 1411) "gdbus" 0x00007fef39c88bf9 in
> __GI___poll (fds=0x5592ef259460, nfds=3, timeout=-1) at
> ../sysdeps/unix/sysv/linux/poll.c:29
> 6 Thread 0x7fef12192700 (LWP 1414) "threaded-ml" 0x00007fef39c88bf9
> in __GI___poll (fds=0x7fef04007030, nfds=3, timeout=-1) at
> ../sysdeps/unix/sysv/linux/poll.c:29
> 7 Thread 0x7fef11991700 (LWP 1433) "pool" syscall () at
> ../sysdeps/unix/sysv/linux/x86_64/syscall.S...

[Cameron White (cameronwhite91)]

Do you have steps to reliably reproduce this? I set up an 18.04 VM and haven't seen any crashes from selections, cropping, etc

[Max Markmanrud (max-markmanrud)]

I'm also seeing this on Ubuntu 18.04 - same stack trace.

Here's my steps to reproduce:
 - build from source
 - launch Pinta
 - File > Open > select a file
 - try drawing using default tool
 - crash within ~5 seconds

[Ross Jordan (n0v0cane)]

I also hit this, with a consistent repro:

1) Launch Pinta
2) File > Open > select a file (I'm opening a jpg image)
3) Choose rectangle select tool from Tools grid
4) Attempt to select a rectangle in the image using the select tool

Results in crash almost immediately with the following debug spew:

free(): invalid pointer
Stacktrace:

  at <unknown> <0xffffffff>
  at (wrapper managed-to-native) GLib.SList.g_free (intptr) <0x0005f>
  at GLib.ListBase.Empty () <0x0013c>
  at GLib.ListBase.Dispose (bool) <0x0000f>
  at GLib.ListBase.Finalize () <0x0001d>
  at (wrapper runtime-invoke) object.runtime_invoke_virtual_void__this__ (object,intptr,intptr,intptr) <0x00068>

Native stacktrace:

 /usr/bin/mono(+0xc8514) [0x5565eb610514]
 /lib/x86_64-linux-gnu/libpthread.so.0(+0x12890) [0x7f73b7283890]
 /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xc7) [0x7f73b6ca6e97]
 /lib/x86_64-linux-gnu/libc.so.6(abort+0x141) [0x7f73b6ca8801]
 /lib/x86_64-linux-gnu/libc.so.6(+0x89897) [0x7f73b6cf1897]
 /lib/x86_64-linux-gnu/libc.so.6(+0x9090a) [0x7f73b6cf890a]
 /lib/x86_64-linux-gnu/libc.so.6(cfree+0x4cc) [0x7f73b6cffe1c]
 [0x40c69270]

Debug info from gdb:

[New LWP 16118]
[New LWP 16119]
[New LWP 16120]
[New LWP 16121]
[New LWP 16152]