seahorse crashed with double free in gtk_tree_model_get_iter

Bug #275661 reported by Martin Pool
2
Affects Status Importance Assigned to Milestone
seahorse (Ubuntu)
Invalid
Medium
Ubuntu Desktop Bugs

Bug Description

Seahorse in Intrepid persistently crashes like so:

mbp@grace% seahorse
** Message: init gpgme version 1.1.6
**
ERROR:seahorse-set-model.c:68:iter_for_node: assertion failed: (SEAHORSE_IS_OBJECT (node->data))
*** glibc detected *** seahorse: double free or corruption (fasttop): 0x08d06690 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb77e5394]
/lib/tls/i686/cmov/libc.so.6(cfree+0x96)[0xb77e73f6]
seahorse[0x807cf72]
/usr/lib/libglib-2.0.so.0(g_free+0x36)[0xb7915c26]
/usr/lib/gtk-2.0/modules/libgnomebreakpad.so[0xb800a513]
/usr/lib/gtk-2.0/modules/libgnomebreakpad.so[0xb800a5a3]
[0xb8020400]
/lib/tls/i686/cmov/libc.so.6(abort+0x188)[0xb77a3228]
/usr/lib/libglib-2.0.so.0(g_assertion_message+0x123)[0xb7934ba3]
/usr/lib/libglib-2.0.so.0[0xb79350cd]
seahorse[0x806ff24]
seahorse[0x8070e78]
/usr/lib/libgtk-x11-2.0.so.0(gtk_tree_model_get_iter+0xc5)[0xb7d491e5]
/usr/lib/libgtk-x11-2.0.so.0(gtk_tree_model_filter_convert_iter_to_child_iter+0x104)[0xb7d4a904]
/usr/lib/libgtk-x11-2.0.so.0[0xb7d4df71]
/usr/lib/libgtk-x11-2.0.so.0(gtk_tree_model_get_value+0xb5)[0xb7d48f75]
/usr/lib/libgtk-x11-2.0.so.0[0xb7d462fc]
/usr/lib/libgtk-x11-2.0.so.0[0xb7d4fdf1]
/usr/lib/libgtk-x11-2.0.so.0[0xb7d51b78]
/usr/lib/libgtk-x11-2.0.so.0[0xb7c723d3]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1ab)[0xb79a6c4b]
/usr/lib/libgobject-2.0.so.0[0xb79bd095]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7dc)[0xb79be7ac]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb79bec26]
/usr/lib/libgtk-x11-2.0.so.0(gtk_tree_model_row_inserted+0xb0)[0xb7d48170]
/usr/lib/libgtk-x11-2.0.so.0[0xb7d4c343]
/usr/lib/libgtk-x11-2.0.so.0[0xb7c723d3]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1ab)[0xb79a6c4b]
/usr/lib/libgobject-2.0.so.0[0xb79bd095]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7dc)[0xb79be7ac]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb79bec26]
/usr/lib/libgtk-x11-2.0.so.0(gtk_tree_model_row_inserted+0xb0)[0xb7d48170]
seahorse[0x80716c4]
/usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x84)[0xb79b43d4]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1ab)[0xb79a6c4b]
/usr/lib/libgobject-2.0.so.0[0xb79bd095]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7dc)[0xb79be7ac]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_by_name+0x19d)[0xb79beacd]
seahorse[0x807f432]
seahorse[0x809b121]
/usr/lib/libgobject-2.0.so.0(g_object_set_valist+0x3d6)[0xb79abe06]
/usr/lib/libgobject-2.0.so.0(g_object_set+0x86)[0xb79ac266]
seahorse[0x80847d6]
/usr/lib/libglib-2.0.so.0[0xb790b7c1]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb790d6f8]
/usr/lib/libglib-2.0.so.0[0xb7910da3]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1d2)[0xb79112c2]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb7c6e299]
seahorse[0x805aebe]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb778c685]
seahorse[0x805acf1]
======= Memory map: ========
08048000-080dc000 r-xp 00000000 fe:00 3200442 /usr/bin/seahorse
080dc000-080dd000 r--p 00093000 fe:00 3200442 /usr/bin/seahorse
080dd000-080df000 rw-p 00094000 fe:00 3200442 /usr/bin/seahorse
080df000-080e0000 rw-p 080df000 00:00 0
089a4000-08da7000 rw-p 089a4000 00:00 0 [heap]
b5e8a000-b5eea000 rw-s 00000000 00:09 2162716 /SYSV00000000 (deleted)
b5eea000-b5eee000 r-xp 00000000 fe:00 3261326 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b5eee000-b5eef000 r--p 00003000 fe:00 3261326 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b5eef000-b5ef0000 rw-p 00004000 fe:00 3261326 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
b5ef0000-b5ef1000 r-xp 00000000 fe:00 3208984 /usr/lib/gconv/ISO8859-1.so
b5ef1000-b5ef2000 r--p 00001000 fe:00 3208984 /usr/lib/gconv/ISO8859-1.so
b5ef2000-b5ef3000 rw-p 00002000 fe:00 3208984 /usr/lib/gconv/ISO8859-1.so
b5ef3000-b5ff7000 rw-p b5ef3000 00:00 0
b5ff7000-b608c000 r--p 00000000 fe:00 3457189 /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
b608c000-b608e000 r-xp 00000000 fe:00 3260746 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b608e000-b608f000 r--p 00001000 fe:00 3260746 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b608f000-b6090000 rw-p 00002000 fe:00 3260746 /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
b6090000-b6096000 r--s 00000000 fe:00 3719603 /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2
b6096000-b6099000 r--s 00000000 fe:00 3719601 /var/cache/fontconfig/e383d7ea5fbe662a33d9b44caf393297-x86.cache-2
b6099000-b609a000 r--s 00000000 fe:00 3719600 /var/cache/fontconfig/e3fa16a14183b06aa45b3e009278fd14-x86.cache-2
b609a000-b609e000 r--s 00000000 fe:00 3719599 /var/cache/fontconfig/921a30a17f0be15c70ac14043cb7a739-x86.cache-2
b609e000-b60a0000 r--s 00000000 fe:00 3719594 /var/cache/fontconfig/c69f04ab05004e31a6d5e715764f16d8-x86.cache-2
b60a0000-b60a3000 r--s 00000000 fe:00 3719590 /var/cache/fontconfig/6eb3985aa4124903f6ff08ba781cd364-x86.cache-2
b60a3000-b60a4000 r--s 00000000 fe:00 3719588 /var/cache/fontconfig/4c73fe0c47614734b17d736dbde7580a-x86.cache-2
b60a4000-b60a7000 r--s 00000000 fe:00 3719586 /var/cache/fontconfig/a755afe4a08bf5b97852ceb7400b47bc-x86.cache-2
b60a7000-b60a8000 r--s 00000000 fe:00 3719583 /var/cache/fontconfig/7ee55724f82591cb35c3d9771e9e69ed-x86.cache-2
b60a8000-b60af000 r--s 00000000 fe:00 3719578 /var/cache/fontconfig/6d41288fd70b0be22e8c3a91e032eec0-x86.cache-2
b60af000-b60b7000 r--s 00000000 fe:00 3719574 /var/cache/fontconfig/e3de0de479f42330eadf588a55fb5bf4-x86.cache-2
b60b7000-b6117000 rw-s 00000000 00:09 2129947 /SYSV00000000 (deleted)
b6117000-b6130000 r--s 00000000 fe:00 3277524 /usr/share/mime/mime.cache
b6130000-b6148000 r-xp 00000000 fe:00 3441200 /usr/lib/gio/modules/libgvfsdbus.so
b6148000-b6149000 r--p 00017000 fe:00 3441200 /usr/lib/gio/modules/libgvfsdbus.so
b6149000-b614a000 rw-p 00018000 fe:00 3441200 /usr/lib/gio/modules/libgvfsdbus.so
b614a000-b6157000 r-xp 00000000 fe:00 3198021 /usr/lib/libgvfscommon.so.0.0.0
b6157000-b6158000 r--p 0000c000 fe:00 3198021 /usr/lib/libgvfscommon.so.0.0.0
b6158000-b6159000 rw-p 0000d000 fe:00 3198021 /usr/lib/libgvfscommon.so.0.0.0
b615a000-b6165000 r--s 00000000 fe:00 3719571 /var/cache/fontconfig/0f34bcd4b6ee430af32735b75db7f02b-x86.cache-2
b6165000-b6168000 r--s 00000000 fe:00 3719566 /var/cache/fontconfig/de9486f0b47a4d768a594cb4198cb1c6-x86.cache-2
b6168000-b616f000 r--s 00000000 fe:00 3719565 /var/cache/fontconfig/d52a8644073d54c13679302ca1180695-x86.cache-2
b616f000-b64b2000 r--p 00000000 fe:00 3294622 /usr/share/icons/hicolor/icon-theme.cache
b64b2000-b6b93000 r--p 00000000 fe:00 3294626 /usr/share/icons/gnome/icon-theme.cache
b6b93000-b6c3e000 r--p 00000000 fe:00 4129267 /usr/share/icons/Tangerine/icon-theme.cache
b6c3e000-b6da4000 r--p 00000000 fe:00 3489863 /usr/share/icons/Human/icon-theme.cache
b6da4000-b6db0000 r-xp 00000000 fe:00 819210 /lib/libgcc_s.so.1
b6db0000-b6db1000 r--p 0000b000 fe:00 819210 /lib/libgcc_s.so.1
b6db1000-b6db2000 rw-p 0000c000 fe:00 819210 /lib/libgcc_s.so.1
b6db2000-b6e95000 r-xp 00000000 fe:00 3195389 /usr/lib/libstdc++.so.6.0.10
b6e95000-b6e99000 r--p 000e3000 fe:00 3195389 /usr/lib/libstdc++.so.6.0.10
b6e99000-b6e9a000 rw-p 000e7000 fe:00 3195389 /usr/lib/libstdc++.so.6.0.10
b6e9a000-b6ea0000 rw-p b6e9a000 00:00 0
b6ea0000-b6eb3000 r-xp 00000000 fe:00 3197819 /usr/lib/libelf-0.131.so
b6eb3000-b6eb5000 rw-p 00012000 fe:00 3197819 /usr/lib/libelf-0.131.so
b6eb5000-b6ed4000 r-xp 00000000 fe:00 3309795 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b6ed4000-b6ed5000 r--p 0001e000 fe:00 3309795 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b6ed5000-b6ed6000 rw-p 0001f000 fe:00 3309795 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b6ed6000-b6ee0000 r-xp 00000000 fe:00 819350 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b6ee0000-b6ee1000 r--p 00009000 fe:00 819350 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b6ee1000-b6ee2000 rw-p 0000a000 fe:00 819350 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b6ee2000-b6eeb000 r-xp 00000000 fe:00 819377 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b6eeb000-b6eec000 r--p 00008000 fe:00 819377 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b6eec000-b6eed000 rw-p 00009000 fe:00 819377 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b6eed000-b6ef4000 r-xp 00000000 fe:00 819333 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b6ef4000-b6ef5000 r--p 00006000 fe:00 819333 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b6ef5000-b6ef6000 rw-p 00007000 fe:00 819333 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b6efb000-b6efd000 r-xp 00000000 fe:00 819419 /lib/tls/i686/cmov/libutil-2.8.90.so
b6efd000-b6efe000 r--p 00001000 fe:00 819419 /lib/tls/i686/cmov/libutil-2.8.90.so
b6efe000-b6eff000 rw-p 00002000 fe:00 819419 /lib/tls/i686/cmov/libutil-2.8.90.so
b6eff000-b6f02000 r--s 00000000 fe:00 3719576 /var/cache/fontconfig/de156ccd2eddbdc19d37a45b8b2aac9c-x86.cache-2
b6f02000-b6f08000 r--s 00000000 fe:00 3719585 /var/cache/fontconfig/089dead882dea3570ffc31a9898cfb69-x86.cache-2
b6f08000-b6f0a000 r--s 00000000 fe:00 3719526 /var/cache/fontconfig/e13b20fdb08344e0e664864cc2ede53d-x86.cache-2
b6f0a000-b6f0c000 r--s 00000000 fe:00 3719285 /var/cache/fontconfig/e62c64cac36d705ed4be4685257520fa-x86.cache-2
b6f0c000-b6f4b000 r--p 00000000 fe:00 3539371 /usr/lib/locale/en_AU.utf8/LC_CTYPE
b6f4b000-b702c000 r--p 00000000 fe:00 3539372 /usr/lib/locale/en_AU.utf8/LC_COLLATE
b702c000-b7030000 rw-p b702c000 00:00 0
b7030000-b7034000 r-xp 00000000 fe:00 3204163 /usr/lib/libXdmcp.so.6.0.0
b7034000-b7035000 rw-p 00003000 fe:00 3204163 /usr/lib/libXdmcp.so.6.0.0
b7035000-b7037000 r-xp 00000000 fe:00 3204160 /usr/lib/libXau.so.6.0.0
b7037000-b7038000 rw-p 00001000 fe:00 3204160 /usr/lib/libXau.so.6.0.0
b7038000-b7039000 r-xp 00000000 fe:00 3199607 /usr/lib/libxcb-xlib.so.0.0.0
b7039000-b703a000 r--p 00000000 fe:00 3199607 /usr/lib/libxcb-xlib.so.0.0.0
b703a000-b703b000 rw-p 00001000 fe:00 3199607 /usr/lib/libxcb-xlib.so.0.0.0
b703b000-b703c000 rw-p b703b000 00:00 0
b703c000-b7051000 r-xp 00000000 fe:00 819321 /lib/tls/i686/cmov/libnsl-2.8.90.so
b7051000-b7052000 r--p 00014000 fe:00 819321 /lib/tls/i686/cmov/libnsl-2.8.90.so
b7052000-b7053000 rw-p 00015000 fe:00 819321 /lib/tls/i686/cmov/libnsl-2.8.90.so
b7053000-b7055000 rw-p b7053000 00:00 0
b7055000-b7079000 r-xp 00000000 fe:00 3198966 /usr/lib/libexpat.so.1.5.2
b7079000-b707b000 r--p 00023000 fe:00 3198966 /usr/lib/libexpat.so.1.5.2
b707b000-b707c000 rw-p 00025000 fe:00 3198966 /usr/lib/libexpat.so.1.5.2
b707c000-b70bb000 r-xp 00000000 fe:00 3195251 /usr/lib/libpixman-1.so.0.12.0
b70bb000-b70bd000 r--p 0003e000 fe:00 3195251 /usr/lib/libpixman-1.so.0.12.0
b70bd000-b70be000 rw-p 00040000 fe:00 3195251 /usr/lib/libpixman-1.so.0.12.0
b70be000-b70d5000 r-xp 00000000 fe:00 3195004 /usr/lib/libxcb.so.1.0.0
b70d5000-b70d6000 r--p 00016000 fe:00 3195004 /usr/lib/libxcb.so.1.0.0
b70d6000-b7Multiple segmentation faults occurred; can't display error dialog
zsh: exit 1 seahorse
seahorse 0.99s user 0.02s system 69% cpu 1.449 total

Revision history for this message
Sebastien Bacher (seb128) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a valgrind log following the instructions at https://wiki.ubuntu.com/Valgrind and attach the file to the bug report. This will greatly help us in tracking down your problem.

Changed in seahorse:
assignee: nobody → desktop-bugs
importance: Undecided → Medium
status: New → Incomplete
Revision history for this message
Sebastien Bacher (seb128) wrote :

We are closing this bug report as it lacks the information, described in the previous comments, we need to investigate the problem further. However, please reopen it if you can give us the missing information and don't hesitate to submit bug reports in the future.

Changed in seahorse:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.