unity-panel-service crashed with SIGSEGV in free()

[Michael Terry]

Binary package hint: unity

I closed a window, then compiz/unity crashed.

ProblemType: Crash
DistroRelease: Ubuntu 11.04
Package: unity 3.1.4-0ubuntu4
ProcVersionSignature: Ubuntu 2.6.37-5.13-generic 2.6.37-rc2
Uname: Linux 2.6.37-5-generic x86_64
Architecture: amd64
CrashCounter: 1
Date: Fri Nov 19 13:19:28 2010
ExecutablePath: /usr/lib/unity/unity-panel-service
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, user)
 LANGUAGE=en_US:en
 LANG=en_GB.utf8
SegvAnalysis:
 Segfault happened at: 0x7f6b28badc2d <free+29>: mov -0x8(%rdi),%rsi
 PC (0x7f6b28badc2d) ok
 source "-0x8(%rdi)" (0xaaaaaaaaaaaaaaa2) not located in a known VMA region (needed readable region)!
 destination "%rsi" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
 free () from /lib/libc.so.6
 ?? () from /usr/lib/libbamf.so.0
 ?? () from /usr/lib/libdbus-glib-1.so.2
 g_closure_invoke (closure=0x106ce80, return_value=0x0, n_param_values=3, param_values=0x1602050, invocation_hint=0x7fff20e86f00) at /build/buildd/glib2.0-2.27.3/gobject/gclosure.c:766
 signal_emit_unlocked_R (node=<value optimized out>, detail=1181, instance=0x1067230, emission_return=0x0, instance_and_params=0x1602050) at /build/buildd/glib2.0-2.27.3/gobject/gsignal.c:3252
Title: unity-panel-service crashed with SIGSEGV in free()
UserGroups: adm admin cdrom dialout dip fax floppy fuse lpadmin plugdev sambashare tape video
XsessionErrors:
 (nautilus:1407): GConf-CRITICAL **: gconf_value_free: assertion `value != NULL' failed
 (firefox-bin:1907): Bonobo-WARNING **: Bonobo must be initialized before use
 (firefox-bin:1907): Gdk-CRITICAL **: IA__gdk_window_get_screen: assertion `GDK_IS_WINDOW (window)' failed
 (firefox-bin:1907): Gtk-CRITICAL **: IA__gtk_drag_set_icon_pixmap: assertion `gdk_window_get_screen (pixmap) == screen' failed
 (apport-gtk:5077): Gtk-WARNING **: /build/buildd/gtk+3.0-2.91.4/gtk/gtktreestore.c:800: Unable to convert from PyObject to gchararray

[Apport retracing service (apport)]

StacktraceTop:
 ?? ()
 ?? ()
 ?? ()
 ?? ()
ThreadStacktrace:

[Apport retracing service (apport)]

Thank you for your report!

However, processing it in order to get sufficient information for the
developers failed (it does not generate an useful symbolic stack trace). This
might be caused by some outdated packages which were installed on your system
at the time of the report:

libpixman-1-0-dbg: installed version 0.18.4-1, latest version: 0.18.4-1build1
libssl0.9.8: installed version 0.9.8o-1ubuntu4.1, latest version: 0.9.8o-1ubuntu4.2
libxrandr2: installed version 2:1.3.0-3, latest version: 2:1.3.1-1
libxxf86vm1-dbg: installed version 1:1.1.0-2, latest version: 1:1.1.1-1
unity-dbg: installed version 3.1.4-0ubuntu4, latest version: 0.2.46-0ubuntu5
libgl1-mesa-glx: installed version 7.9~git20100924-0ubuntu3, latest version: 7.9+repack-1ubuntu2
libgtk2.0-common: installed version 2.23.2-0ubuntu1, latest version: 2.23.2-0ubuntu2
libncursesw5: installed version 5.7+20100626-0ubuntu1, latest version: 5.7+20100626-0ubuntu2
libnux-0.9-common: installed version 0.9.4-0ubuntu2, latest version: 0.9.6-0ubuntu1
adduser: installed version 3.112+nmu1ubuntu1, latest version: 3.112+nmu1ubuntu2
libgtk2.0-0-dbg: installed version 2.23.2-0ubuntu1, latest version: 2.23.2-0ubuntu2
libglu1-mesa: installed version 7.9~git20100924-0ubuntu3, latest version: 7.9+repack-1ubuntu2
libgdk-pixbuf2.0-0: installed version 2.22.1-0ubuntu3, latest version: 2.22.1-0ubuntu4
fontconfig-config: installed version 2.8.0-2ubuntu1, latest version: 2.8.0-2.1ubuntu1
libgtk2.0-bin: installed version 2.23.2-0ubuntu1, latest version: 2.23.2-0ubuntu2
libc-bin: installed version 2.12.1-0ubuntu9, latest version: 2.12.1-0ubuntu10
libssl0.9.8-dbg: installed version 0.9.8o-1ubuntu4.1, latest version: 0.9.8o-1ubuntu4.2
libfreetype6: installed version 2.4.2-2ubuntu0.1, latest version: 2.4.2-2.1
libncursesw5-dbg: installed version 5.7+20100626-0ubuntu1, latest version: 5.7+20100626-0ubuntu2
ncurses-bin: installed version 5.7+20100626-0ubuntu1, latest version: 5.7+20100626-0ubuntu2
libxxf86vm1: installed version 1:1.1.0-2, latest version: 1:1.1.1-1
fontconfig: installed version 2.8.0-2ubuntu1, latest version: 2.8.0-2.1ubuntu1
bamfdaemon: installed version 0.2.60-0ubuntu1, latest version: 0.2.62-0ubuntu1
libppl-c2: installed version 0.10.2-7ubuntu1, latest version: 0.10.2-9ubuntu1
libncurses5: installed version 5.7+20100626-0ubuntu1, latest version: 5.7+20100626-0ubuntu2
libgl1-mesa-glx-dbg: installed version 7.9~git20100924-0ubuntu3, latest version: 7.9+repack-1ubuntu2
libxrandr2-dbg: installed version 2:1.3.0-3, latest version: 2:1.3.1-1
libncurses5-dbg: installed version 5.7+20100626-0ubuntu1, latest version: 5.7+20100626-0ubuntu2
libfontconfig1-dbg: installed version 2.8.0-2ubuntu1, latest version: 2.8.0-2.1ubuntu1
libbamf0: installed version 0.2.60-0ubuntu1, latest version: 0.2.62-0ubuntu1
libx11-6-dbg: installed version 2:1.3.3-3ubuntu1, latest version: 2:1.3.3-3ubuntu2
libxmu6-dbg: installed version 2:1.0.5-2, latest version: 2:1.1.0-1
libnux-0.9-0: installed version 0.9.4-0ubuntu2, latest version: 0.9.6-0ubuntu1
libpixman-1-0: installed version 0.18.4-1, latest version: 0.18.4-1build1
unity: installed version 3.1.4-0ubuntu4, latest version: 3.2.0-0ubuntu2
libc6-dbg: installed version 2.1...

[David Barth (dbarth)]

It's either the panel-service or libbamf. At least libbamf should try not to crash the libc if fed with something toxix. Is bamf able to say whether this is toxic or legit?

[Neil J. Patel (njpatel)]

I'm pretty sure this bug has been fixed in the latest package of bamf, but I'll make sure before marking as such.

[Launchpad Janitor (janitor)]

This bug was fixed in the package bamf - 0.2.66-0ubuntu1

---------------
bamf (0.2.66-0ubuntu1) natty; urgency=low

  * New upstream release.
   - Fix the Ubuntu Starter Edition bug (LP: #683623)
   - check that desktop file is currently supported before creating the
     favorite (LP: #682345)
   - unity-panel-service crashed with SIGSEGV in free() (LP: #677580)
 -- Didier Roche <email address hidden> Thu, 09 Dec 2010 19:37:54 +0100

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.