GNU Crashed

[DIPTENDU BHATTACHARYA]

```
GNU Image Manipulation Program version 2.10.14
git-describe: GIMP_2_10_12-511-ga4f55d6c7e
C compiler:
 Using built-in specs.
 COLLECT_GCC=gcc
 COLLECT_LTO_WRAPPER=/usr/lib/gcc/i686-linux-gnu/7/lto-wrapper
 Target: i686-linux-gnu
 Configured with: ../src/configure -v --with-pkgversion='Ubuntu 7.4.0-1ubuntu1~18.04.1' --with-bugurl=file:///usr/share/doc/gcc-7/README.Bugs --enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++ --prefix=/usr --with-gcc-major-version-only --program-suffix=-7 --program-prefix=i686-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --with-sysroot=/ --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-libmpx --enable-plugin --enable-default-pie --with-system-zlib --with-target-system-zlib --enable-objc-gc=auto --enable-targets=all --enable-multiarch --disable-werror --with-arch-32=i686 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-checking=release --build=i686-linux-gnu --host=i686-linux-gnu --target=i686-linux-gnu
 Thread model: posix
 gcc version 7.4.0 (Ubuntu 7.4.0-1ubuntu1~18.04.1)

using babl version 0.1.72 (compiled against version 0.1.72)
using GEGL version 0.4.18 (compiled against version 0.4.18)
using GLib version 2.56.4 (compiled against version 2.56.4)
using GdkPixbuf version 2.36.11 (compiled against version 2.36.11)
using GTK+ version 2.24.32 (compiled against version 2.24.32)
using Pango version 1.40.14 (compiled against version 1.40.14)
using Fontconfig version 2.12.6 (compiled against version 2.12.6)
using Cairo version 1.15.10 (compiled against version 1.15.10)

```
> fatal error: Segmentation fault

Stack trace:
```

# Stack traces obtained from PID 7158 - Thread 7158 #

[New LWP 7161]
[New LWP 7162]
[New LWP 7163]
[New LWP 7165]
[New LWP 7166]
[New LWP 7167]
[New LWP 7194]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/i386-linux-gnu/libthread_db.so.1".
0xb7f97d09 in __kernel_vsyscall ()
  Id Target Id Frame
* 1 Thread 0xb6288d00 (LWP 7158) "gimp-2.10" 0xb7f97d09 in __kernel_vsyscall ()
  2 Thread 0xb5e5fb40 (LWP 7161) "worker" 0xb7f97d09 in __kernel_vsyscall ()
  3 Thread 0xb565eb40 (LWP 7162) "worker" 0xb7f97d09 in __kernel_vsyscall ()
  4 Thread 0xb4cffb40 (LWP 7163) "worker" 0xb7f97d09 in __kernel_vsyscall ()
  5 Thread 0xb3f25b40 (LWP 7165) "gmain" 0xb7f97d09 in __kernel_vsyscall ()
  6 Thread 0xb35ffb40 (LWP 7166) "gdbus" 0xb7f97d09 in __kernel_vsyscall ()
  7 Thread 0xaf8a5b40 (LWP 7167) "async" 0xb7f97d09 in __kernel_vsyscall ()
  8 Thread 0xac21bb40 (LWP 7194) "swap writer" 0xb7f97d09 in __kernel_vsyscall ()

Thread 8 (Thread 0xac21bb40 (LWP 7194)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6d01197 in syscall () at ../sysdeps/unix/sysv/linux/i386/syscall.S:29
#2 0xb6fa12de in g_cond_wait () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0xb7488ad5 in () at /usr/lib/i386-linux-gnu/libgegl-0.4.so.0
#4 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb6def3bd in start_thread (arg=0xac21bb40) at pthread_create.c:463
        pd = 0xac21bb40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1407075520, -1226809344, -1407078872, -1202010968, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 7 (Thread 0xaf8a5b40 (LWP 7167)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6d01197 in syscall () at ../sysdeps/unix/sysv/linux/i386/syscall.S:29
#2 0xb6fa12de in g_cond_wait () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0x0085e346 in ()
#4 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb6def3bd in start_thread (arg=0xaf8a5b40) at pthread_create.c:463
        pd = 0xaf8a5b40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1349887168, -1226809344, -1349890520, -275069777, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 6 (Thread 0xb35ffb40 (LWP 7166)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6cfb4eb in __GI___poll (fds=0x2b78200, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = <optimized out>
        resultvar = <optimized out>
        sc_cancel_oldtype = 0
        sc_ret = <optimized out>
        sc_ret = <optimized out>
        nfds = 3
        fds = 0x2b78200
        timeout = -1
#2 0xb6f68890 in g_poll () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0xb6f5932a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#4 0xb6f59779 in g_main_loop_run () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb7314225 in () at /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#6 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#7 0xb6def3bd in start_thread (arg=0xb35ffb40) at pthread_create.c:463
        pd = 0xb35ffb40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1285555392, -1226809344, -1285558744, 1155187862, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#8 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 5 (Thread 0xb3f25b40 (LWP 7165)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6cfb4eb in __GI___poll (fds=0x2bc57a0, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
        resultvar = <optimized out>
        resultvar = <optimized out>
        sc_cancel_oldtype = 0
        sc_ret = <optimized out>
        sc_ret = <optimized out>
        nfds = 2
        fds = 0x2bc57a0
        timeout = -1
#2 0xb6f68890 in g_poll () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0xb6f5932a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#4 0xb6f59474 in g_main_context_iteration () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb6f594d0 in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#6 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#7 0xb6def3bd in start_thread (arg=0xb3f25b40) at pthread_create.c:463
        pd = 0xb3f25b40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1275962560, -1226809344, -1275965912, 530236567, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#8 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 4 (Thread 0xb4cffb40 (LWP 7163)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6d01197 in syscall () at ../sysdeps/unix/sysv/linux/i386/syscall.S:29
#2 0xb6fa12de in g_cond_wait () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0xb7450c74 in () at /usr/lib/i386-linux-gnu/libgegl-0.4.so.0
#4 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb6def3bd in start_thread (arg=0xb4cffb40) at pthread_create.c:463
        pd = 0xb4cffb40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1261438144, -1226809344, -1261441496, 1692058777, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 3 (Thread 0xb565eb40 (LWP 7162)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6d01197 in syscall () at ../sysdeps/unix/sysv/linux/i386/syscall.S:29
#2 0xb6fa12de in g_cond_wait () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0xb7450c74 in () at /usr/lib/i386-linux-gnu/libgegl-0.4.so.0
#4 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb6def3bd in start_thread (arg=0xb565eb40) at pthread_create.c:463
        pd = 0xb565eb40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1251611840, -1226809344, -1251615192, 817546394, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 2 (Thread 0xb5e5fb40 (LWP 7161)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6d01197 in syscall () at ../sysdeps/unix/sysv/linux/i386/syscall.S:29
#2 0xb6fa12de in g_cond_wait () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#3 0xb7450c74 in () at /usr/lib/i386-linux-gnu/libgegl-0.4.so.0
#4 0xb6f8175a in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#5 0xb6def3bd in start_thread (arg=0xb5e5fb40) at pthread_create.c:463
        pd = 0xb5e5fb40
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {-1226809344, -1243219136, -1226809344, -1243222488, 819643547, 1189542557}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = 0
#6 0xb6d05c96 in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:108

Thread 1 (Thread 0xb6288d00 (LWP 7158)):
#0 0xb7f97d09 in __kernel_vsyscall ()
#1 0xb6df9997 in __libc_read (fd=18, buf=0xbf95f02c, nbytes=256) at ../sysdeps/unix/sysv/linux/read.c:27
        resultvar = <optimized out>
        resultvar = <optimized out>
        sc_cancel_oldtype = 0
        sc_ret = <optimized out>
        sc_ret = <optimized out>
        nbytes = 256
        buf = 0xbf95f02c
        fd = 18
#2 0xb78ba10e in gimp_stack_trace_print () at /usr/lib/libgimpbase-2.0.so.0
#3 0x005869d0 in ()
#4 0x00587031 in ()
#5 0x0058770c in ()
#6 0xb7f97d14 in <signal handler called> ()
#7 0xb6f8aa37 in g_utf8_get_char () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#8 0x006387e7 in ()
#9 0xb704edb8 in g_closure_invoke () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#10 0xb70621b2 in () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#11 0xb706a015 in g_signal_emitv () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#12 0xb7a4896f in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#13 0xb7a48e81 in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#14 0xb7a4934f in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#15 0xb7a4a0fe in gtk_bindings_activate_event () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#16 0x00639e31 in gimp_text_tool_editor_key_press ()
#17 0x00632c1d in ()
#18 0x005e73b8 in tool_manager_key_press_active ()
#19 0x00688a79 in ()
#20 0x00689963 in gimp_display_shell_canvas_tool_events ()
#21 0xb7affe47 in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#22 0xb704edb8 in g_closure_invoke () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#23 0xb70621b2 in () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#24 0xb706a949 in g_signal_emit_valist () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#25 0xb706b3d5 in g_signal_emit () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#26 0xb7c20324 in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#27 0xb7c34d12 in gtk_window_propagate_key_event () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#28 0x0079672d in ()
#29 0xb7affe47 in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#30 0xb704edb8 in g_closure_invoke () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#31 0xb7061b71 in () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#32 0xb706a949 in g_signal_emit_valist () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#33 0xb706b3d5 in g_signal_emit () at /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#34 0xb7c20324 in () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#35 0xb7afdc9a in gtk_propagate_event () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#36 0xb7afe02d in gtk_main_do_event () at /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#37 0xb7971729 in () at /usr/lib/i386-linux-gnu/libgdk-x11-2.0.so.0
#38 0xb6f59150 in g_main_context_dispatch () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#39 0xb6f593c9 in () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#40 0xb6f59779 in g_main_loop_run () at /usr/lib/i386-linux-gnu/libglib-2.0.so.0
#41 0x0058638d in app_run ()
#42 0x00585b64 in main ()

```

[Eduardo Barretto (ebarretto)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.