Copy and paste to a new document causes a segmentation fault

[Danny Staple]

Binary package hint: tcm

While attempting to get more information for #184567, I tried to determine the behaviour of copying, creating a new document in the same instance (and thus closing the original document), then pasting in this new document.
This immediately causes a segmentation fault.

No core dump file or apport file is left behind currently and there is no debug package available so no backtrace yet, but I am able to reproduce this 100%.

[Danny Staple (danny-orionrobots)]

Ran in gdb for getting backtrace for this:

Program received signal SIGSEGV, Segmentation fault.
0x0814f25d in ShapeView::Snap (this=0x84d9a00, i=290) at shapeview.c:73
73 int ShapeView::Snap(int i) {return viewer->Snap(i);}
(gdb) bt
#0 0x0814f25d in ShapeView::Snap (this=0x84d9a00, i=290) at shapeview.c:73
#1 0x0814e91d in Shape::SnapPosition (this=0x84e6430) at shape.c:207
#2 0x08136ecc in GShape::SnapPosition (this=0x84e6430) at gshape.c:174
#3 0x0814d915 in Shape::SetPosition (this=0x84e6430, pos=0x84e64c8, snap=true)
    at shape.c:165
#4 0x08143127 in NodeShape::SetPosition (this=0x84e6430, pos=0x84e64c8,
    snap=true) at nodeshape.c:489
#5 0x0814607f in NodeShape (this=0x84e6430, c=@0x84e8078, st=0x0)
    at nodeshape.c:69
#6 0x08074714 in Box (this=0x84e6430) at box.h:28
#7 0x08074748 in Box::Clone (this=0x84e8078) at box.h:38
#8 0x08152880 in Shapes::CloneShape (this=0x84e5438, s=0x84e8078)
    at shapes.c:48
#9 0x08152984 in Shapes (this=0x84e5438, shapes=@0x84e53b8) at shapes.c:37
#10 0x081753d7 in Buffer::GetShapesCopy (this=0x83896e0) at buffer.c:82
#11 0x08148806 in PasteShapesCmd (this=0x84e65e8, v=0x845aa60)
    at pasteshapescmd.c:43
#12 0x0811efab in DiagramViewer::Paste (this=0x83534f8) at diagramviewer.c:515
#13 0x0811c34c in DiagramStubs::PasteCB (cd=0x83534f8) at diagramstubs.c:100
#14 0xb7def40b in XtCallCallbackList () from /usr/lib/libXt.so.6
#15 0xb7ed66e2 in ?? () from /usr/lib/libXm.so.2
#16 0x084b13d0 in ?? ()
#17 0x084b17d0 in ?? ()
---Type <return> to continue, or q <return> to quit---
#18 0xbf995acc in ?? ()
#19 0x00000000 in ?? ()

[Danny Staple (danny-orionrobots)]

Backtrace with dbgsym for libxt and lesstif installed:

#0 0x0814f25d in ShapeView::Snap (this=0x84da338, i=390) at shapeview.c:73
#1 0x0814e91d in Shape::SnapPosition (this=0x84e0a40) at shape.c:207
#2 0x08136ecc in GShape::SnapPosition (this=0x84e0a40) at gshape.c:174
#3 0x0814d915 in Shape::SetPosition (this=0x84e0a40, pos=0x84e0ad8, snap=true)
    at shape.c:165
#4 0x08143127 in NodeShape::SetPosition (this=0x84e0a40, pos=0x84e0ad8,
    snap=true) at nodeshape.c:489
#5 0x0814607f in NodeShape (this=0x84e0a40, c=@0x84e8a38, st=0x0)
    at nodeshape.c:69
#6 0x08074714 in Box (this=0x84e0a40) at box.h:28
#7 0x08074748 in Box::Clone (this=0x84e8a38) at box.h:38
#8 0x08152880 in Shapes::CloneShape (this=0x8329608, s=0x84e8a38)
    at shapes.c:48
#9 0x08152984 in Shapes (this=0x8329608, shapes=@0x84e5d50) at shapes.c:37
#10 0x081753d7 in Buffer::GetShapesCopy (this=0x8389878) at buffer.c:82
#11 0x08148806 in PasteShapesCmd (this=0x84e6ed8, v=0x84e7818)
    at pasteshapescmd.c:43
#12 0x0811efab in DiagramViewer::Paste (this=0x83536b0) at diagramviewer.c:515
#13 0x0811c34c in DiagramStubs::PasteCB (cd=0x83536b0) at diagramstubs.c:100
#14 0xb7de140b in XtCallCallbackList (widget=0x84b1c20, callbacks=0x84b2020,
    call_data=0xbffdf11c) at ../../src/Callback.c:617
#15 0xb7ec86e2 in ButtonUp (w=0x84b1c20, event=0xbffdf5d8, params=0x0,
    num_params=0xb7e24d78) at ../../../lib/Xm-2.1/PushB.c:1331
---Type <return> to continue, or q <return> to quit---
#16 0xb7e184c1 in HandleActions (w=0x84b1c20, event=0xbffdf5d8,
    stateTree=0x83212d0, accelWidget=0x0, procs=0x83223dc, actions=0xb7e24d70)
    at ../../src/TMstate.c:636
#17 0xb7e1889b in HandleSimpleState (w=0x84b1c20, tmRecPtr=0x84b1c50,
    curEventPtr=0xbffdf278) at ../../src/TMstate.c:875
#18 0xb7e18e98 in _XtTranslateEvent (w=0x84b1c20, event=0xbffdf5d8)
    at ../../src/TMstate.c:1093
#19 0xb7def672 in XtDispatchEventToWidget (widget=0x84b1c20, event=0xbffdf5d8)
    at ../../src/Event.c:898
#20 0xb7defe8a in _XtDefaultDispatcher (event=0xbffdf5d8)
    at ../../src/Event.c:1359
#21 0xb7deecf7 in XtDispatchEvent (event=0xbffdf5d8) at ../../src/Event.c:1415
#22 0xb7deeeac in XtAppMainLoop (app=0x82dc4d8) at ../../src/Event.c:1552
#23 0x0819ec84 in Application::HandleEvents (this=0x82cf060)
    at application.c:189
#24 0x0804e16d in main (argc=1, argv=0xbffdf794) at tcmd.c:110

[Daniel T Chen (crimsun)]

Is this symptom still reproducible in 8.10 or 9.04?

[Pedro Villavicencio (pedro)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to New. Thanks again!.

[Danny Staple (danny-orionrobots)]

I have tried this again in Ubuntu 9.04 - it still occurs.
Steps to try this:
* Start TCM
* Open TERD
* Create a few entities
* Drag a rectangle across them to select them.
* Copy them using either CTRL-C or the menu.
* Still inside TERD, hit file, then new, and say no to the save first dialog.
* On the blank document paste the copied buffer.
* The TERD instace of TCM will crash. The Menu instance of TCM will still be open.
* Nothing left in home directory, dir TCM started in or /var/crash.

This is still clearly reproducible.

[Benjamin Rogers (rogers-benjamin-charles)]

Is this symptom still reproducible in 11.10?

[Launchpad Janitor (janitor)]

[Expired for tcm (Ubuntu) because there has been no activity for 60 days.]