paina hangs after using paint brush

Bug #1917662 reported by v.miheer
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
pinta (Ubuntu)
New
Undecided
Unassigned

Bug Description

I just used pinta to hide some info from my screenshot.
Open an image file.
Click on paintbrush size (change it to 20)
Draw a straight vertical line segment.
Pinta crashes.

Terminal message:
Gtk-Message: 12:02:22.300: Failed to load module "canberra-gtk-module"
double free or corruption (out)

=================================================================
 Native Crash Reporting
=================================================================
Got a SIGABRT while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

=================================================================
 Native stacktrace:
=================================================================
 0x55b70ef70eb5 - /usr/bin/mono : (null)
 0x55b70ef71250 - /usr/bin/mono : (null)
 0x55b70ef1e129 - /usr/bin/mono : (null)
 0x55b70ef70467 - /usr/bin/mono : (null)
 0x7f59ce9583c0 - /lib/x86_64-linux-gnu/libpthread.so.0 : (null)
 0x7f59ce77c18b - /lib/x86_64-linux-gnu/libc.so.6 : gsignal
 0x7f59ce75b859 - /lib/x86_64-linux-gnu/libc.so.6 : abort
 0x7f59ce7c63ee - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f59ce7ce47c - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f59ce7d0120 - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x4176fff3 - Unknown

=================================================================
 Telemetry Dumper:
=================================================================

-------------------------------------------------------------------------------
After `sudo apt-get install libcanberra-gtk-module`
----
mvaidya@mvaidya-home:~$ pinta
Gtk-Message: 12:02:22.300: Failed to load module "canberra-gtk-module"
double free or corruption (out)

=================================================================
 Native Crash Reporting
=================================================================
Got a SIGABRT while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

=================================================================
 Native stacktrace:
=================================================================
 0x55b70ef70eb5 - /usr/bin/mono : (null)
 0x55b70ef71250 - /usr/bin/mono : (null)
 0x55b70ef1e129 - /usr/bin/mono : (null)
 0x55b70ef70467 - /usr/bin/mono : (null)
 0x7f59ce9583c0 - /lib/x86_64-linux-gnu/libpthread.so.0 : (null)
 0x7f59ce77c18b - /lib/x86_64-linux-gnu/libc.so.6 : gsignal
 0x7f59ce75b859 - /lib/x86_64-linux-gnu/libc.so.6 : abort
 0x7f59ce7c63ee - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f59ce7ce47c - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f59ce7d0120 - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x4176fff3 - Unknown

=================================================================
 Telemetry Dumper:
=================================================================
Killed
mvaidya@mvaidya-home:~$ pinta
free(): invalid pointer

=================================================================
 Native Crash Reporting
=================================================================
Got a SIGABRT while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

=================================================================
 Native stacktrace:
=================================================================
 0x55aa721e3eb5 - /usr/bin/mono : (null)
 0x55aa721e4250 - /usr/bin/mono : (null)
 0x55aa72191129 - /usr/bin/mono : (null)
 0x55aa721e3467 - /usr/bin/mono : (null)
 0x7fb327b933c0 - /lib/x86_64-linux-gnu/libpthread.so.0 : (null)
 0x7fb3279b718b - /lib/x86_64-linux-gnu/libc.so.6 : gsignal
 0x7fb327996859 - /lib/x86_64-linux-gnu/libc.so.6 : abort
 0x7fb327a013ee - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7fb327a0947c - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7fb327a0acac - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x40b58c33 - Unknown

=================================================================
 Telemetry Dumper:
=================================================================
Pkilling 0x7fb32796c780 from 0x7fb326a33700
Entering thread summarizer pause from 0x7fb326a33700
Finished thread summarizer pause from 0x7fb326a33700.

Waiting for dumping threads to resume

=================================================================
 External Debugger Dump:
=================================================================
[New LWP 930709]
[New LWP 930710]
[New LWP 930713]
[New LWP 930714]
[New LWP 930719]
[New LWP 930738]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007fb327a86aff in __GI___poll (fds=0x55aa73c18030, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
29 ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
  Id Target Id Frame
* 1 Thread 0x7fb32796c780 (LWP 930708) "mono" 0x00007fb327a86aff in __GI___poll (fds=0x55aa73c18030, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  2 Thread 0x7fb3263ff700 (LWP 930709) "SGen worker" futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55aa725d5e08) at ../sysdeps/nptl/futex-internal.h:183
  3 Thread 0x7fb326a33700 (LWP 930710) "Finalizer" 0x00007fb327a56dff in __GI___wait4 (pid=930804, stat_loc=0x7fb326a31654, options=0, usage=0x0) at ../sysdeps/unix/sysv/linux/wait4.c:27
  4 Thread 0x7fb31ddc5700 (LWP 930713) "gmain" 0x00007fb327a86aff in __GI___poll (fds=0x55aa736a0910, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  5 Thread 0x7fb31d5c4700 (LWP 930714) "gdbus" 0x00007fb327a86aff in __GI___poll (fds=0x55aa736d26b0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  6 Thread 0x7fb316486700 (LWP 930719) "threaded-ml" 0x00007fb327a86aff in __GI___poll (fds=0x7fb308007170, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  7 Thread 0x7fb2f2358700 (LWP 930738) "pool-Pinta" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38

Thread 7 (Thread 0x7fb2f2358700 (LWP 930738)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007fb31ed774b6 in g_cond_wait_until () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fb31ecfa541 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fb31ecfab66 in g_async_queue_timeout_pop () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007fb31ed54259 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007fb31ed53911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#6 0x00007fb327b87609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#7 0x00007fb327a93293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 6 (Thread 0x7fb316486700 (LWP 930719)):
#0 0x00007fb327a86aff in __GI___poll (fds=0x7fb308007170, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fb317b0b1d6 in ?? () from /lib/x86_64-linux-gnu/libpulse.so.0
#2 0x00007fb317afc841 in pa_mainloop_poll () from /lib/x86_64-linux-gnu/libpulse.so.0
#3 0x00007fb317afcec3 in pa_mainloop_iterate () from /lib/x86_64-linux-gnu/libpulse.so.0
#4 0x00007fb317afcf70 in pa_mainloop_run () from /lib/x86_64-linux-gnu/libpulse.so.0
#5 0x00007fb317b0b11d in ?? () from /lib/x86_64-linux-gnu/libpulse.so.0
#6 0x00007fb31684672c in ?? () from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-13.99.so
#7 0x00007fb327b87609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#8 0x00007fb327a93293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 5 (Thread 0x7fb31d5c4700 (LWP 930714)):
#0 0x00007fb327a86aff in __GI___poll (fds=0x55aa736d26b0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fb31ed2a18e in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fb31ed2a513 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fb31efe7eda in ?? () from /lib/x86_64-linux-gnu/libgio-2.0.so.0
#4 0x00007fb31ed53911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007fb327b87609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#6 0x00007fb327a93293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 4 (Thread 0x7fb31ddc5700 (LWP 930713)):
#0 0x00007fb327a86aff in __GI___poll (fds=0x55aa736a0910, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fb31ed2a18e in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fb31ed2a2c3 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fb31ed2a311 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007fb31ed53911 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007fb327b87609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#6 0x00007fb327a93293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7fb326a33700 (LWP 930710)):
#0 0x00007fb327a56dff in __GI___wait4 (pid=930804, stat_loc=0x7fb326a31654, options=0, usage=0x0) at ../sysdeps/unix/sysv/linux/wait4.c:27
#1 0x000055aa721e40bf in ?? ()
#2 0x000055aa721e4250 in ?? ()
#3 0x000055aa72191129 in ?? ()
#4 0x000055aa721e3467 in ?? ()
#5 <signal handler called>
#6 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#7 0x00007fb327996859 in __GI_abort () at abort.c:79
#8 0x00007fb327a013ee in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7fb327b2b285 "%s\n") at ../sysdeps/posix/libc_fatal.c:155
#9 0x00007fb327a0947c in malloc_printerr (str=str@entry=0x7fb327b294ae "free(): invalid pointer") at malloc.c:5347
#10 0x00007fb327a0acac in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4173
#11 0x0000000040b58c33 in ?? ()
#12 0x000055aa73b460c0 in ?? ()
#13 0x00007fb326a32ca0 in ?? ()
#14 0x000055aa7336d430 in ?? ()
#15 0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7fb3263ff700 (LWP 930709)):
#0 futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55aa725d5e08) at ../sysdeps/nptl/futex-internal.h:183
#1 __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55aa725d5e20, cond=0x55aa725d5de0) at pthread_cond_wait.c:508
#2 __pthread_cond_wait (cond=0x55aa725d5de0, mutex=0x55aa725d5e20) at pthread_cond_wait.c:638
#3 0x000055aa72438dc6 in ?? ()
#4 0x00007fb327b87609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#5 0x00007fb327a93293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7fb32796c780 (LWP 930708)):
#0 0x00007fb327a86aff in __GI___poll (fds=0x55aa73c18030, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007fb31ed2a18e in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007fb31ed2a513 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007fb31f56c092 in gtk_main () from /lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#4 0x0000000040b406b0 in ?? ()
#5 0x000055aa73423490 in ?? ()
#6 0x000055aa733713e8 in ?? ()
#7 0x00007fb326400aa8 in ?? ()
#8 0x00007fb326403c30 in ?? ()
#9 0x00007fb326403c80 in ?? ()
#10 0x000055aa73389e80 in ?? ()
#11 0x00007ffcfa77d050 in ?? ()
#12 0x00007ffcfa77cef0 in ?? ()
#13 0x0000000000000000 in ?? ()
[Inferior 1 (process 930708) detached]

=================================================================
 Basic Fault Address Reporting
=================================================================
Memory around native instruction pointer (0x7fb3279b718b):0x7fb3279b717b d2 4c 89 ce bf 02 00 00 00 b8 0e 00 00 00 0f 05 .L..............
0x7fb3279b718b 48 8b 84 24 08 01 00 00 64 48 33 04 25 28 00 00 H..$....dH3.%(..
0x7fb3279b719b 00 75 26 44 89 c0 48 81 c4 18 01 00 00 c3 0f 1f .u&D..H.........
0x7fb3279b71ab 80 00 00 00 00 48 8b 15 b9 4c 1a 00 f7 d8 41 b8 .....H...L....A.

=================================================================
 Managed Stacktrace:
=================================================================
   at <unknown> <0xffffffff>
   at GLib.SList:g_free <0x000a2>
   at GLib.ListBase:Empty <0x001a4>
   at GLib.ListBase:Dispose <0x0002b>
   at GLib.ListBase:Finalize <0x00035>
   at System.Object:runtime_invoke_virtual_void__this__ <0x0008c>
=================================================================

Just crash no hang.

----
So there is
1) Packaging bug: libcanberra-gtk-module should be dependency of this package
2) And then there is crash

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: pinta 1.6-2
ProcVersionSignature: Ubuntu 5.8.0-44.50~20.04.1-generic 5.8.18
Uname: Linux 5.8.0-44-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu27.16
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: GNOME
Date: Wed Mar 3 12:07:04 2021
ExecutablePath: /usr/lib/pinta/Pinta.exe
InstallationDate: Installed on 2021-02-18 (13 days ago)
InstallationMedia: Ubuntu 20.04.2 LTS "Focal Fossa" - Release amd64 (20210204)
InterpreterPath: /usr/bin/mono-sgen
PackageArchitecture: all
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: pinta
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
v.miheer (v-miheer) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.