Segfault - affects the "run application" dialog

[Nikolai Prokoschenko]

Starting the "run application" dialog leads to crashing gnome-panel.

Backtrace:
-----
#0 0x429af7df in wcscoll_l () from /lib/tls/i686/cmov/libc.so.6
#1 0x429aed61 in wcscoll () from /lib/tls/i686/cmov/libc.so.6
#2 0x42cd2496 in g_utf8_collate () from /usr/lib/libglib-2.0.so.0
#3 0x42cc6494 in g_slist_insert_sorted_with_data ()
   from /usr/lib/libglib-2.0.so.0
#4 0x42cc6460 in g_slist_insert_sorted_with_data ()
   from /usr/lib/libglib-2.0.so.0
#5 0x42cc6460 in g_slist_insert_sorted_with_data ()
   from /usr/lib/libglib-2.0.so.0
#6 0x42cc6460 in g_slist_insert_sorted_with_data ()
   from /usr/lib/libglib-2.0.so.0
#7 0x42cc6460 in g_slist_insert_sorted_with_data ()
   from /usr/lib/libglib-2.0.so.0
#8 0x0807a450 in panel_properties_dialog_present ()
#9 0x42cb1830 in g_child_watch_add () from /usr/lib/libglib-2.0.so.0
#10 0x42caf51e in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#11 0x42cb25d4 in g_main_context_check () from /usr/lib/libglib-2.0.so.0
#12 0x42cb28f8 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#13 0x430aa2c5 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#14 0x08065ba7 in main ()
-----

I've seen a similar backtrace after one gaim2.0beta1 segfault, so it's probably gtk+ related

[Sebastien Bacher (seb128)]

Thanks for you bug. We have some similar bug open but still not debug backtrace with libglib2.0-0-dbg installed, could you get one?

[Nikolai Prokoschenko (nikolai)]

Here you are:
----
#0 0x429af7df in wcscoll_l () from /lib/tls/i686/cmov/libc.so.6
#1 0x429aed61 in wcscoll () from /lib/tls/i686/cmov/libc.so.6
#2 0x42cd2496 in IA__g_utf8_collate (str1=0x83faf60 "\u0422\u0430\u0431\u043b\u0438\uffff\206\u0430 \uffff\201\u0438\u043c\u0432\u043e\u043b\u043e\u0432", str2=0x83faf60 "\u0422\u0430\u0431\u043b\u0438\uffff\206\u0430 \uffff\201\u0438\u043c\u0432\u043e\u043b\u043e\u0432")
    at gunicollate.c:65
#3 0x42cc6494 in g_slist_sort_real (list=<value optimized out>, compare_func=0x807a292 <panel_properties_dialog_present+4428>, user_data=0x0)
    at gslist.c:548
#4 0x42cc6460 in g_slist_sort_real (list=0x8479c30, compare_func=0x807a292 <panel_properties_dialog_present+4428>, user_data=0x0) at gslist.c:590
#5 0x42cc6460 in g_slist_sort_real (list=0x8462120, compare_func=0x807a292 <panel_properties_dialog_present+4428>, user_data=0x0) at gslist.c:590
#6 0x42cc6460 in g_slist_sort_real (list=0x847a838, compare_func=0x807a292 <panel_properties_dialog_present+4428>, user_data=0x0) at gslist.c:590
#7 0x42cc6460 in g_slist_sort_real (list=0x844a440, compare_func=0x807a292 <panel_properties_dialog_present+4428>, user_data=0x0) at gslist.c:590
#8 0x0807a450 in panel_properties_dialog_present ()
#9 0x42cb1830 in g_idle_dispatch (source=0x83cfe38, callback=0xb3bf5, user_data=0xb7c4f02c) at gmain.c:3796
#10 0x42caf51e in IA__g_main_context_dispatch (context=0x80fa038) at gmain.c:1916
#11 0x42cb25d4 in g_main_context_iterate (context=0x80fa038, block=1, dispatch=1, self=0x80c6400) at gmain.c:2547
#12 0x42cb28f8 in IA__g_main_loop_run (loop=0x8334330) at gmain.c:2751
#13 0x430aa2c5 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#14 0x08065ba7 in main ()
----

Please note that this bug doesn't happen using LC_ALL="C". My locale is ru_RU.UTF-8

[Sebastien Bacher (seb128)]

Thank your for the backtrace. Could you get one with libc6-dbg installed too? You may need to run gnome-panel with LD_LIBRARY_PATH:
- gnome-session-remove gnome-panel
- LD_LIBRARY_PATH=/usr/lib/debug:$LD_LIBRARY_PATH gdb gnome-panel
(gdb) run
... crash
(gdb) thread apply all bt

[Nikolai Prokoschenko (nikolai)]

0xb7eb3e89 in *__GI___wcscoll_l (s1=0x11e7f5, s2=0x83ed8d8, l=0xb7b5102c)
    at strcoll_l.c:495
495 strcoll_l.c: No such file or directory.
        in strcoll_l.c
(gdb) thread apply all bt

Thread 1 (Thread 16384 (LWP 26929)):
#0 0xb7eb3e89 in *__GI___wcscoll_l (s1=0x11e7f5, s2=0x83ed8d8, l=0xb7b5102c)
    at strcoll_l.c:495
#1 0xb7eb33fa in *__GI_wcscoll (s1=0xb7b5102c, s2=0xb7b5102c) at strcoll.c:37
#2 0x42cd2496 in IA__g_utf8_collate (
    str1=0x8402578 "\u0422\u0430\u0431\u043b\u0438\uffff\206\u0430 \uffff\201\u0438\u043c\u0432\u043e\u043b\u043e\u0432",
    str2=0x8402578 "\u0422\u0430\u0431\u043b\u0438\uffff\206\u0430 \uffff\201\u0438\u043c\u0432\u043e\u043b\u043e\u0432") at gunicollate.c:65
#3 0x42cc6494 in g_slist_sort_real (list=<value optimized out>,
    compare_func=0x807a292 <panel_properties_dialog_present+4428>,
    user_data=0x0) at gslist.c:548
#4 0x42cc6460 in g_slist_sort_real (list=0x846fba0,
    compare_func=0x807a292 <panel_properties_dialog_present+4428>,
    user_data=0x0) at gslist.c:590
#5 0x42cc6460 in g_slist_sort_real (list=0x84816d8,
    compare_func=0x807a292 <panel_properties_dialog_present+4428>,
    user_data=0x0) at gslist.c:590
#6 0x42cc6460 in g_slist_sort_real (list=0x8487550,
    compare_func=0x807a292 <panel_properties_dialog_present+4428>,
    user_data=0x0) at gslist.c:590
#7 0x42cc6460 in g_slist_sort_real (list=0x844c6d0,
    compare_func=0x807a292 <panel_properties_dialog_present+4428>,
    user_data=0x0) at gslist.c:590
#8 0x0807a450 in panel_properties_dialog_present ()
#9 0x42cb1830 in g_idle_dispatch (source=0x83d0080, callback=0x11e7f5,
    user_data=0xb7b5102c) at gmain.c:3796
#10 0x42caf51e in IA__g_main_context_dispatch (context=0x80fa0c8)
    at gmain.c:1916
#11 0x42cb25d4 in g_main_context_iterate (context=0x80fa0c8, block=1,
    dispatch=1, self=0x80c6460) at gmain.c:2547
#12 0x42cb28f8 in IA__g_main_loop_run (loop=0x8331070) at gmain.c:2751
#13 0x430aa2c5 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#14 0x08065ba7 in main ()

[Sebastien Bacher (seb128)]

What version of Ubuntu do you use? Could you run 'grep "Таблй" /usr/share/applications/*' and copy that to a comment? It works fine for me with a ru_RU.UTF-8 locale on dapper but that may be due to a program you have installed

[Nikolai Prokoschenko (nikolai)]

I'm using a daily updated dapper, however this is not an originally installed ubuntu, but rather an ex-Debian-sid system.

The string in question is to be found in the gucharmap package, since I don't really need it, I removed it and it indeed fixed the problem with the run app dialog. However, I still have the same problem with gaim, where renaming a buddy to a full name (i.e. with spaces in the name, one word works fine) yields this backtrace:
---
#0 0xb7ee9e89 in *__GI___wcscoll_l (s1=0x10fff5, s2=0x8728268, l=0xb7b9902c)
    at strcoll_l.c:495
#1 0xb7ee93fa in *__GI_wcscoll (s1=0xb7b9902c, s2=0xb7b9902c) at strcoll.c:37
#2 0x42cd2496 in IA__g_utf8_collate (
    str1=0x8728070 "\u0433\uffff\200\u0438\uffff\210\u0430 \u0437\u0430\u0433\u0430\u043b\uffff\214\uffff\201\u043a\u0438\u0439",
    str2=0x8727670 "\u0433\uffff\200\u0438\uffff\210\u0430 \u0437\u0430\u0433\u0430\u043b\uffff\214\uffff\201\u043a\u0438\u0439")
    at gunicollate.c:65
#3 0x080a8cd1 in gaim_utf8_strcasecmp (
    a=0x84b40d8 "\uffff\223\uffff\200\u0438\uffff\210\u0430 \uffff\227\u0430\u0433\u0430\u043b\uffff\214\uffff\201\u043a\u0438\u0439",
    b=0x84b40d8 "\uffff\223\uffff\200\u0438\uffff\210\u0430 \uffff\227\u0430\u0433\u0430\u043b\uffff\214\uffff\201\u043a\u0438\u0439")
    at util.c:3535
#4 0x080d1c21 in sort_method_alphabetical (node=0x8362af8, blist=0xb7b9902c,
    groupiter=
      {stamp = 1313386442, user_data = 0x84b9290, user_data2 = 0x0, user_data3 = 0x0}, cur=0xbfcf03cc, iter=0xbfcf043c) at gtkblist.c:5201
#5 0x080d05df in insert_node (list=0x8326138, node=0x8362af8,
    iter=0xbfcf043c) at gtkblist.c:3929
#6 0x080d0bb4 in gaim_gtk_blist_update_contact (list=0x8326138,
    node=0x8362af8) at gtkblist.c:4111
#7 0x080d0cdc in gaim_gtk_blist_update_buddy (list=0x8326138, node=0x8362b78)
    at gtkblist.c:4159
#8 0x080d0719 in gaim_gtk_blist_update (list=0x8326138, node=0x8362b78)
    at gtkblist.c:4230
#9 0x0807439d in gaim_blist_alias_buddy (buddy=0x8362b78,
    alias=0x8727548 "\uffff\223\uffff\200\u0438\uffff\210\u0430 \uffff\227\u0430\u0433\u0430\u043b\uffff\214\uffff\201\u043a\u0438\u0439")
    at blist.c:901
#10 0x080c7559 in gtk_blist_renderer_edited_cb (text_rend=0x83bc810,
    arg1=0xb7b9902c "",
    arg2=0x8727548 "\uffff\223\uffff\200\u0438\uffff\210\u0430 \uffff\227\u0430\u0433\u0430\u043b\uffff\214\uffff\201\u043a\u0438\u0439",
    nada=0x0) at gtkblist.c:328
---

For obvious reasons, I can't just remove the buddy and be happy. Malone bug #6071 seems to be the same.

[Sebastien Bacher (seb128)]

That has been tracked as a libc/locale bug, marking as duplicate of #28640

[Launchpad Janitor (janitor)]

[Expired for glib2.0 (Ubuntu) because there has been no activity for 60 days.]