crash in vorbis.so while using 'nicotine'

[Christof Krüger]

I was using the python software 'nicotine' and it crashed repeatedly. Apport didn't see the crash.
Therefore, I started it from console to see what happens. It crashed again with the following error message:

*** glibc detected *** /usr/bin/python: munmap_chunk(): invalid pointer: 0xb4575cf0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(cfree+0x1bb)[0xb7e02f3b]
/var/lib/python-support/python2.5/ogg/vorbis.so[0xb45224f3]
[0xb5acc144]
======= Memory map: ========
08048000-0813e000 r-xp 00000000 08:01 2256910 /usr/bin/python2.5
0813e000-08163000 rw-p 000f5000 08:01 2256910 /usr/bin/python2.5
08163000-09d6a000 rw-p 08163000 00:00 0 [heap]
...
...

[Christof Krüger (christofkr)]

Using the test case

#!/usr/bin/python

from ogg.vorbis import VorbisComment
x = VorbisComment()
del x

yields the following stacktrace:

(gdb) bt
#0 0xb7de2dfb in free () from /lib/tls/i686/cmov/libc.so.6
#1 0xb7864896 in py_vorbis_comment_dealloc (self=0x32) at src/pyvorbisinfo.c:384
#2 0x08086209 in PyDict_DelItem (op=0xb7d4fa44, key=0xb7d5f340) at ../Objects/dictobject.c:691
#3 0x08061447 in PyObject_DelItem (o=0xb7d36e78, key=0xb7d5f340) at ../Objects/abstract.c:181
#4 0x080c25ba in PyEval_EvalFrameEx (f=0x821351c, throwflag=0) at ../Python/ceval.c:1738
#5 0x080c5eb5 in PyEval_EvalCodeEx (co=0xb797e650, globals=0xb7d4fa44, locals=0xb7d4fa44, args=0x0, argcount=0, kws=0x0, kwcount=0,
    defs=0x0, defcount=0, closure=0x0) at ../Python/ceval.c:2833
#6 0x080c5f27 in PyEval_EvalCode (co=0xb797e650, globals=0xb7d4fa44, locals=0xb7d4fa44) at ../Python/ceval.c:494
#7 0x080e52c3 in PyRun_InteractiveOneFlags (fp=0xb7eb5420, filename=0x8122202 "<stdin>", flags=0xbfb2e9f8) at ../Python/pythonrun.c:1264
#8 0x080e54f6 in PyRun_InteractiveLoopFlags (fp=0xb7eb5420, filename=0x8122202 "<stdin>", flags=0xbfb2e9f8) at ../Python/pythonrun.c:714
#9 0x080e5c22 in PyRun_AnyFileExFlags (fp=0xb7eb5420, filename=0x8122202 "<stdin>", closeit=0, flags=0xbfb2e9f8) at ../Python/pythonrun.c:683
#10 0x08059190 in Py_Main (argc=0, argv=0xbfb2eac4) at ../Modules/main.c:523
#11 0x080586c2 in main (argc=Cannot access memory at address 0x1) at ../Modules/python.c:23

[Matthias Klose (doko)]

fails with python2.5, works with python2.4, python2.5-dbg

[Matthias Klose (doko)]

fixed in feisty, 1.3-1.2ubuntu2