cheese crashed with SIGSEGV in __strlen_sse2()

[Alexander Hunziker]

I was browsing the effects with cheese, browsing worked fine and seemed stable. As soon as I clicked on an effect though, cheese hung and finally segfaulted.

ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: cheese 3.0.1-2ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-7.8-generic 3.0.0
Uname: Linux 3.0.0-7-generic x86_64
Architecture: amd64
CrashCounter: 1
Date: Tue Jul 26 13:22:45 2011
ExecutablePath: /usr/bin/cheese
InstallationMedia: Ubuntu 10.04 LTS "Lucid Lynx" - Release amd64 (20100429)
MachineType: LENOVO 28239KG
ProcCmdline: cheese
ProcEnviron:
 LANGUAGE=en
 LANG=en_DK.utf8
 SHELL=/bin/bash
RelatedPackageVersions:
 cheese 3.0.1-2ubuntu1
 cheese-common 3.0.1-2ubuntu1
SegvAnalysis:
 Segfault happened at: 0x7fecd3abd5e1 <__strlen_sse2+17>: movdqu (%rdi),%xmm1
 PC (0x7fecd3abd5e1) ok
 source "(%rdi)" (0x00000065) not located in a known VMA region (needed readable region)!
 destination "%xmm1" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: cheese
StacktraceTop:
 __strlen_sse2 () at ../sysdeps/x86_64/multiarch/../strlen.S:32
 g_strconcat () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
 ?? () from /usr/lib/libcheese.so.1
 cheese_camera_set_effect () from /usr/lib/libcheese.so.1
 cheese_main_window_on_selected_effect_change ()
Title: cheese crashed with SIGSEGV in __strlen_sse2()
UpgradeStatus: Upgraded to oneiric on 2011-07-26 (0 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare
dmi.bios.date: 03/14/2011
dmi.bios.vendor: LENOVO
dmi.bios.version: 6HET35WW (1.20 )
dmi.board.name: 28239KG
dmi.board.vendor: LENOVO
dmi.board.version: Not Available
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: Not Available
dmi.modalias: dmi:bvnLENOVO:bvr6HET35WW(1.20):bd03/14/2011:svnLENOVO:pn28239KG:pvrThinkPadT400s:rvnLENOVO:rn28239KG:rvrNotAvailable:cvnLENOVO:ct10:cvrNotAvailable:
dmi.product.name: 28239KG
dmi.product.version: ThinkPad T400s
dmi.sys.vendor: LENOVO

[Apport retracing service (apport)]

StacktraceTop:
 __strlen_sse2 () at ../sysdeps/x86_64/multiarch/../strlen.S:32
 g_strconcat (string1=0x7fecd66a64b8 "ffmpegcolorspace name=colorspace1 ! ") at /build/buildd/glib2.0-2.29.14/./glib/gstrfuncs.c:320
 ?? () from /usr/lib/libcheese.so.1
 cheese_camera_set_effect () from /usr/lib/libcheese.so.1
 cheese_main_window_on_selected_effect_change ()

[Mikkel Kamstrup Erlandsen (kamstrup)]

The bug is in cheese_camera_element_from_effect() line 658 where the effect_desc variable is uninitialized passed into g_strconcat().

[Mikkel Kamstrup Erlandsen (kamstrup)]

Hmmm - please ignore previous comment... effect_desc is set by the statement preceding the g_strconcat() :-)

[Mikkel Kamstrup Erlandsen (kamstrup)]

I just compiled cheese trunk and it doesn't have the bug.