lesstif2 crashes with mouse operations in drop-down list

[Alex Valavanis]

Binary package hint: grace

I finally figured out a reliable way to reproduce a bug that has haunted me for months...

== Example crash trigger ==
* Select the "Plot->Graph appearance..." menu item
* Select the "Main" tab
* In the "Presentation" group, press the left-mouse button on the "Type" drop-down menu. **Do not release the mouse button!**
* While continuing to hold the left-mouse button down, middle-click (or right-click) on any option in the list.
>> The drop-down menu disappears
* Move the mouse cursor above the drop-down menu. Now (finally!) release the left mouse button.
>> Grace crashes with the attached backtrace

This is reproducible with *any* drop-down menu. Also, the crash occurs even if the left-mouse button is released over a different menu. In general, this is the sequence needed to reproduce the crash:
* left-mouse-down on any drop-down menu
* (middle-mouse-click or right-mouse-click) on any menu option
* left-mouse-up on any drop-down menu

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: grace 1:5.1.22-9ubuntu1
ProcVersionSignature: Ubuntu 2.6.38-9.43-generic 2.6.38.4
Uname: Linux 2.6.38-9-generic x86_64
Architecture: amd64
Date: Wed May 4 16:47:00 2011
ProcEnviron:
 LANGUAGE=en_GB:en
 PATH=(custom, user)
 LANG=en_GB.UTF-8
 SHELL=/bin/bash
SourcePackage: grace
UpgradeStatus: Upgraded to natty on 2011-05-03 (1 days ago)

[Alex Valavanis (valavanisalex)]

Actually, I can reproduce this in xpdf too. Looks like this is a lesstif bug

[Alex Valavanis (valavanisalex)]

Stacktrace:

#0 _XmInputInGadget (cw=0x8c07f0, x=82, y=14) at ../../../lib/Xm-2.1/GadgetUtil.c:51
#1 0x00007ffff787c2f6 in _XmInputForGadget (cw=0x8c07f0, x=82, y=0) at ../../../lib/Xm-2.1/GadgetUtil.c:93
#2 0x00007ffff78b12e3 in MenuProcEntry (proc=<value optimised out>, w=0x8c07f0) at ../../../lib/Xm-2.1/RowColumn.c:2034
#3 0x00007ffff7858491 in DoSelect (w=0x8c07f0, event=0x7fffffffddc0, params=<value optimised out>, num_params=<value optimised out>) at ../../../lib/Xm-2.1/CascadeBG.c:1316
#4 0x00007ffff7858a1c in input_dispatch (gadget=0x8c07f0, event=0x7fffffffddc0, event_mask=<value optimised out>) at ../../../lib/Xm-2.1/CascadeBG.c:1765
#5 0x00007ffff787bba1 in _XmDispatchGadgetInput (w=0x8c07f0, event=0x7fffffffddc0, mask=64) at ../../../lib/Xm-2.1/GadgetUtil.c:284
#6 0x00007ffff78ad848 in _XmMenuBtnUp (w=0x8c0340, event=0x7fffffffddc0, params=<value optimised out>, num_params=<value optimised out>) at ../../../lib/Xm-2.1/RowColumn.c:3282
#7 0x00007ffff73a915d in HandleActions (w=<value optimised out>, event=0x7fffffffddc0, accelWidget=<value optimised out>, procs=0x84c9c8, actions=0x7ffff75c51c0, stateTree=<value optimised out>) at ../../src/TMstate.c:645
#8 0x00007ffff73a95bd in HandleSimpleState (w=0x8c0340, tmRecPtr=0x8c0388, curEventPtr=0x7fffffffd980) at ../../src/TMstate.c:884
#9 0x00007ffff73aa19d in _XtTranslateEvent (w=0x8c0340, event=<value optimised out>) at ../../src/TMstate.c:1101
#10 0x00007ffff7381d4b in XtDispatchEventToWidget (widget=0x8c0340, event=0x7fffffffddc0) at ../../src/Event.c:906
#11 0x00007ffff73824a6 in _XtDefaultDispatcher (event=0x7fffffffddc0) at ../../src/Event.c:1367
#12 0x00007ffff7382564 in XtDispatchEvent (event=0x7fffffffddc0) at ../../src/Event.c:1423
#13 0x00007ffff73829fb in XtAppMainLoop (app=0x72dc30) at ../../src/Event.c:1560
#14 0x000000000048dbe9 in startup_gui () at xmgrace.c:1190
#15 0x000000000040ab25 in main (argc=1, argv=<value optimised out>) at main.c:727

[Paul Gevers (paul-climbing)]

Very interestingly I can not reproduce this bug. I see strange effects, in the sense that the menu that I selected is now hovering over my web-browser while I am typing this comment, but xmgrace does not crash on me. I have an i386 system instead of a amd64 system, so maybe the difference is there.

paul@stromboli ~ $ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 11.04
Release: 11.04
Codename: natty

paul@stromboli ~ $ uname -a
Linux stromboli 2.6.38-11-generic #48-Ubuntu SMP Fri Jul 29 19:05:14 UTC 2011 i686 i686 i386 GNU/Linux

paul@stromboli ~ $ dpkg --list grace lesstif2
ii grace 1:5.1.22-9ubuntu1 An XY plotting tool
ii lesstif2 1:0.95.2-1 OSF/Motif 2.1 implementation released under LGPL