gnome-language-selector crashed with SIGSEGV in pango_tab_array_free()

[Victor Costan]

I clicked the power button in the top-right and selected restart from the menu. The restart didn't happen because of a unity-2d crash, but then language-selector crashed too.

Before the crash, I couldn't switch between IMEs. Now I can. I activated the Chinese Pinyin IME, and installed and activated the ibus-table-compose IME in this session.

ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: language-selector-gnome 0.41
ProcVersionSignature: Ubuntu 3.0-2.3-generic 3.0.0-rc4
Uname: Linux 3.0-2-generic i686
Architecture: i386
Date: Sat Jul 2 13:58:02 2011
ExecutablePath: /usr/bin/gnome-language-selector
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Alpha i386 (20110624)
InterpreterPath: /usr/bin/python2.7
PackageArchitecture: all
ProcCmdline: /usr/bin/python /usr/bin/gnome-language-selector
ProcCwd: /home/pwnpet
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, no user)
 LANG=en_US.UTF-8
SegvAnalysis:
 Segfault happened at: 0xe39dce <pango_tab_array_free+30>: mov 0xc(%esi),%eax
 PC (0x00e39dce) ok
 source "0xc(%esi)" (0x11d765e8) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: language-selector
StacktraceTop:
 pango_tab_array_free () from /usr/lib/i386-linux-gnu/libpango-1.0.so.0
 ?? () from /usr/lib/i386-linux-gnu/libpango-1.0.so.0
 g_object_unref () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
 ?? () from /usr/lib/libgtk-3.so.0
 ?? () from /usr/lib/libgtk-3.so.0
Title: gnome-language-selector crashed with SIGSEGV in pango_tab_array_free()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

[Victor Costan (costan)]

Sorry, the last part of the comment was wrong. I still can't switch between IMEs using the menu that shows up when I click the keyboard icon in the top-right of the screen.

[Apport retracing service (apport)]

StacktraceTop:
 pango_tab_array_free (tab_array=0x11d765dc) at /build/buildd/pango1.0-1.28.4/./pango/pango-tabs.c:206
 pango_layout_finalize (object=0x9b528b8) at /build/buildd/pango1.0-1.28.4/./pango/pango-layout.c:245
 g_object_unref (_object=0x9b528b8) at /build/buildd/glib2.0-2.29.8/./gobject/gobject.c:2746
 gtk_label_get_preferred_layout_size (widget=<value optimized out>, orientation=GTK_ORIENTATION_HORIZONTAL, minimum_size=0xbfae6560, natural_size=0xbfae6564) at /build/buildd/gtk+3.0-3.1.6/./gtk/gtklabel.c:3604
 gtk_label_get_preferred_size (widget=<value optimized out>, orientation=GTK_ORIENTATION_HORIZONTAL, minimum_size=0xbfae6560, natural_size=0xbfae6564) at /build/buildd/gtk+3.0-3.1.6/./gtk/gtklabel.c:3619

[Martin Pitt (pitti)]

This looks like a wrong GI annotation in Pango, but there are no duplicates. Do you have a recipe how to reproduce this crash?

[Launchpad Janitor (janitor)]

[Expired for pango1.0 (Ubuntu) because there has been no activity for 60 days.]