shotwell crashed with SIGSEGV in g_menu_model_get_n_items()

[Ken Sharp]

If I crop an image then save and exit, I receive a segfault. Simply opening an closing an image doesn't seem to trigger the issue.

Launchpad suggests Bug #1723181 but that is marked as long fixed.

ProblemType: Crash
DistroRelease: Ubuntu 18.04
Package: shotwell 0.28.4-0ubuntu1
ProcVersionSignature: Ubuntu 5.0.0-20.21~18.04.1-generic 5.0.8
Uname: Linux 5.0.0-20-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.9-0ubuntu7.7
Architecture: amd64
CrashCounter: 1
CurrentDesktop: MATE
Date: Tue Aug 6 11:51:03 2019
ExecutablePath: /usr/bin/shotwell
ExecutableTimestamp: 1542019411
InstallationDate: Installed on 2019-06-09 (57 days ago)
InstallationMedia: Ubuntu-MATE 18.04.2 LTS "Bionic Beaver" - Release amd64 (20190210)
ProcCmdline: shotwell tree.png
ProcCwd: /tmp
SegvAnalysis:
 Segfault happened at: 0x7fa64cd9f7e0 <g_menu_model_get_n_items>: mov (%rdi),%rax
 PC (0x7fa64cd9f7e0) ok
 source "(%rdi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rax" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: shotwell
StacktraceTop:
 g_menu_model_get_n_items () at /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
 () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
 () at /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
 () at /usr/lib/x86_64-linux-gnu/gtk-3.0/modules/libappmenu-gtk-module.so
 () at /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: shotwell crashed with SIGSEGV in g_menu_model_get_n_items()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip kvm lpadmin plugdev sambashare sudo wireshark

[Apport retracing service (apport)]

StacktraceTop:
 g_menu_model_get_n_items (model=0x0) at ../../../../gio/gmenumodel.c:494
 gtk_application_window_update_shell_shows_app_menu (window=0x56120f1aa3f0, settings=<optimized out>) at ../../../../gtk/gtkapplicationwindow.c:322
 gtk_application_window_real_realize (widget=0x56120f1aa3f0) at ../../../../gtk/gtkapplicationwindow.c:683
 hijacked_application_window_realize (widget=0x56120f1aa3f0) at ./src/hijack.c:122
 _g_closure_invoke_va (closure=0x56120eeead20, return_value=0x0, instance=0x56120f1aa3f0, args=0x7ffc4af177a0, n_params=0, param_types=0x0) at ../../../../gobject/gclosure.c:867

[Sebastien Bacher (seb128)]

Indeed the upstream fix didn't seem to do the job, we are still getting report in from current 0.28 or from 0.30.2

[Jens Georg (yg-jensge)]

This is a slightly different workflow than the other bug, maybe there is another code-path having the same issue

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Sebastien Bacher (seb128)]

The newer duplicate is also describing it was triggered by doing croping