GIMP Speicherzugriffsfehler

Bug #1867734 reported by miguel ojeda
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gimp (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

```
GNU Image Manipulation Program version 2.10.14
git-describe: GIMP_2_10_12-511-ga4f55d6c7e
C compiler:
 Using built-in specs.
 COLLECT_GCC=gcc
 COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/9/lto-wrapper
 OFFLOAD_TARGET_NAMES=nvptx-none:hsa
 OFFLOAD_TARGET_DEFAULT=1
 Target: x86_64-linux-gnu
 Configured with: ../src/configure -v --with-pkgversion='Ubuntu 9.2.1-17ubuntu1' --with-bugurl=file:///usr/share/doc/gcc-9/README.Bugs --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++,gm2 --prefix=/usr --with-gcc-major-version-only --program-suffix=-9 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib --with-target-system-zlib=auto --enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none,hsa --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
 Thread model: posix
 gcc version 9.2.1 20191102 (Ubuntu 9.2.1-17ubuntu1)

using babl version 0.1.74 (compiled against version 0.1.72)
using GEGL version 0.4.18 (compiled against version 0.4.18)
using GLib version 2.64.0 (compiled against version 2.62.1)
using GdkPixbuf version 2.40.0 (compiled against version 2.40.0)
using GTK+ version 2.24.32 (compiled against version 2.24.32)
using Pango version 1.44.7 (compiled against version 1.42.3)
using Fontconfig version 2.13.1 (compiled against version 2.13.1)
using Cairo version 1.16.0 (compiled against version 1.16.0)

```
> fatal error: Speicherzugriffsfehler

Stack trace:
```

# Stack traces obtained from PID 11823 - Thread 11823 #

[New LWP 11826]
[New LWP 11827]
[New LWP 11828]
[New LWP 11829]
[New LWP 11830]
[New LWP 11831]
[New LWP 11832]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
__libc_read (nbytes=256, buf=0x7ffe146d5390, fd=16) at ../sysdeps/unix/sysv/linux/read.c:26
  Id Target Id Frame
* 1 Thread 0x7f4b2ebf1e00 (LWP 11823) "gimp-2.10" __libc_read (nbytes=256, buf=0x7ffe146d5390, fd=16) at ../sysdeps/unix/sysv/linux/read.c:26
  2 Thread 0x7f4b2e363700 (LWP 11826) "worker" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  3 Thread 0x7f4b2db62700 (LWP 11827) "worker" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  4 Thread 0x7f4b2d361700 (LWP 11828) "worker" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  5 Thread 0x7f4b1ffff700 (LWP 11829) "gmain" 0x00007f4b2fbe99bf in __GI___poll (fds=0x55f5856fdfd0, nfds=1, timeout=3639) at ../sysdeps/unix/sysv/linux/poll.c:29
  6 Thread 0x7f4b1f7fe700 (LWP 11830) "gdbus" 0x00007f4b2fbe99bf in __GI___poll (fds=0x55f5857160a0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  7 Thread 0x7f4b11450700 (LWP 11831) "async" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
  8 Thread 0x7f4b10c4f700 (LWP 11832) "pool-gimp-2.10" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38

Thread 8 (Thread 0x7f4b10c4f700 (LWP 11832)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
No locals.
#1 0x00007f4b2fedf586 in g_cond_wait_until () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x00007f4b2fe62561 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#3 0x00007f4b2fe62b86 in g_async_queue_timeout_pop () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f4b2febc259 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#5 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#6 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960380618496, -7671304591135155413, 140729241132574, 140729241132575, 140729241132720, 139960380614912, 7718092891428543275, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#7 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 7 (Thread 0x7f4b11450700 (LWP 11831)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
No locals.
#1 0x00007f4b2fedf463 in g_cond_wait () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x000055f583ef3664 in ?? ()
No symbol table info available.
#3 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960389011200, -7671304591135155413, 140729241132894, 140729241132895, 140729241133040, 139960389007616, 7718096189426555691, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#5 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 6 (Thread 0x7f4b1f7fe700 (LWP 11830)):
#0 0x00007f4b2fbe99bf in __GI___poll (fds=0x55f5857160a0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
        sc_ret = <optimized out>
#1 0x00007f4b2fe921ae in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x00007f4b2fe92533 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#3 0x00007f4b30285cba in ?? () from /lib/x86_64-linux-gnu/libgio-2.0.so.0
No symbol table info available.
#4 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#5 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960627750656, -7671304591135155413, 140729241133006, 140729241133007, 140729241133152, 139960627747072, 7718100906374388523, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 5 (Thread 0x7f4b1ffff700 (LWP 11829)):
#0 0x00007f4b2fbe99bf in __GI___poll (fds=0x55f5856fdfd0, nfds=1, timeout=3639) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = 18446744073709551100
        sc_cancel_oldtype = 0
        sc_ret = <optimized out>
#1 0x00007f4b2fe921ae in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x00007f4b2fe922e3 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#3 0x00007f4b2fe92331 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#5 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960636143360, -7671304591135155413, 140729241132574, 140729241132575, 140729241132720, 139960636139776, 7718099806325889835, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 4 (Thread 0x7f4b2d361700 (LWP 11828)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
No locals.
#1 0x00007f4b2fedf463 in g_cond_wait () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x00007f4b303706db in ?? () from /lib/x86_64-linux-gnu/libgegl-0.4.so.0
No symbol table info available.
#3 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960857794304, -7671304591135155413, 140729241132798, 140729241132799, 140729241132944, 139960857790720, 7718140010441005867, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#5 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 3 (Thread 0x7f4b2db62700 (LWP 11827)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
No locals.
#1 0x00007f4b2fedf463 in g_cond_wait () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x00007f4b303706db in ?? () from /lib/x86_64-linux-gnu/libgegl-0.4.so.0
No symbol table info available.
#3 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960866187008, -7671304591135155413, 140729241132798, 140729241132799, 140729241132944, 139960866183424, 7718138910392507179, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#5 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 2 (Thread 0x7f4b2e363700 (LWP 11826)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
No locals.
#1 0x00007f4b2fedf463 in g_cond_wait () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2 0x00007f4b303706db in ?? () from /lib/x86_64-linux-gnu/libgegl-0.4.so.0
No symbol table info available.
#3 0x00007f4b2febb911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4 0x00007f4b2fcd1609 in start_thread (arg=<optimized out>) at pthread_create.c:477
        ret = <optimized out>
        pd = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {139960874579712, -7671304591135155413, 140729241132798, 140729241132799, 140729241132944, 139960874576128, 7718133412297497387, 7718134589552778027}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#5 0x00007f4b2fbf6153 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
No locals.

Thread 1 (Thread 0x7f4b2ebf1e00 (LWP 11823)):
#0 __libc_read (nbytes=256, buf=0x7ffe146d5390, fd=16) at ../sysdeps/unix/sysv/linux/read.c:26
        resultvar = 18446744073709551104
        sc_cancel_oldtype = 0
        __arg3 = <optimized out>
        _a2 = <optimized out>
        sc_ret = <optimized out>
        __value = <optimized out>
        __arg1 = <optimized out>
        _a3 = <optimized out>
        resultvar = <optimized out>
        resultvar = <optimized out>
        __arg2 = <optimized out>
        _a1 = <optimized out>
#1 __libc_read (fd=16, buf=0x7ffe146d5390, nbytes=256) at ../sysdeps/unix/sysv/linux/read.c:24
No locals.
#2 0x00007f4b307f7dd7 in gimp_stack_trace_print () from /lib/libgimpbase-2.0.so.0
No symbol table info available.
#3 0x000055f583c0cf00 in ?? ()
No symbol table info available.
#4 0x000055f583c0d33e in gimp_fatal_error ()
No symbol table info available.
#5 0x000055f583c0d9cd in ?? ()
No symbol table info available.
#6 <signal handler called>
No locals.
#7 0x000055f583fa4d58 in gimp_param_spec_layer_id ()
No symbol table info available.
#8 0x000055f583eb96c7 in gimp_pdb_compat_param_spec ()
No symbol table info available.
#9 0x000055f583ec63a7 in gimp_plug_in_handle_message ()
No symbol table info available.
#10 0x000055f583ed4bb1 in gimp_plug_in_manager_call_query ()
No symbol table info available.
#11 0x000055f583ecca16 in gimp_plug_in_manager_restore ()
No symbol table info available.
#12 0x000055f583eeadf1 in ?? ()
No symbol table info available.
#13 0x00007f4b2ff7d802 in g_closure_invoke () from /lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#14 0x00007f4b2ff90f96 in ?? () from /lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#15 0x00007f4b2ff9cb9e in g_signal_emit_valist () from /lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#16 0x00007f4b2ff9d0d3 in g_signal_emit () from /lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#17 0x000055f583eea326 in gimp_restore ()
No symbol table info available.
#18 0x000055f583c0c82b in app_run ()
No symbol table info available.
#19 0x000055f583c0bfbe in main ()
No symbol table info available.
[Inferior 1 (process 11823) detached]

```

Revision history for this message
Alex Murray (alexmurray) wrote :

Thanks for reporting this issue - can you provide any more information on how to reproduce this? Have you reported this to the upstream developers? Finally, do you mind if I make this bug report public so that other developers can see it?

Changed in gimp (Ubuntu):
status: New → Incomplete
Revision history for this message
Seth Arnold (seth-arnold) wrote :

I didn't spot anything private in here, I'll open this so others can see it.

Thanks

information type: Private Security → Public Security
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for gimp (Ubuntu) because there has been no activity for 60 days.]

Changed in gimp (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.