[Oneric] unity-panel-service crashed with SIGSEGV in getenv()

Bug #817691 reported by HaruSiga77
490
This bug affects 99 people
Affects Status Importance Assigned to Milestone
Unity
Fix Released
Critical
Neil J. Patel
unity (Ubuntu)
Fix Released
Critical
Neil J. Patel
Oneiric
Fix Released
Critical
Neil J. Patel

Bug Description

kernel 3.0.0-7.8
updated 3:20-ish on July 28
was starting synaptic

The bug report has been sending four reports on the same thing in a matter of seconds. There was some kind of message upon restarting that the "keyboard" was being toggled by someone. I think that counts as security as passwords could be divulged through keyloggers. I can't get the message back, nor did I even acknowledged it's closure. Can someone close dialog boxes outside of the internal X? That is to say can someone mess with your computer even though computer sharing is off?

ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: unity-services 4.4.0-0ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-7.8-generic 3.0.0
Uname: Linux 3.0.0-7-generic x86_64
Architecture: amd64
CompizPlugins: [core,bailer,detection,composite,opengl,decor,mousepoll,vpswitch,regex,animation,snap,expo,move,compiztoolbox,place,grid,imgpng,gnomecompat,wall,ezoom,workarounds,staticswitcher,resize,fade,unitymtgrabhandles,scale,session,unitydialog,unityshell]
CrashCounter: 1
Date: Thu Jul 28 15:10:52 2011
EcryptfsInUse: Yes
ExecutablePath: /usr/lib/unity/unity-panel-service
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Alpha amd64 (20110727)
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcEnviron:
 SHELL=/bin/bash
 LANG=en_US.UTF-8
SegvAnalysis:
 Segfault happened at: 0x7faac3865da0 <getenv+144>: cmp 0x0(%rbp),%r13w
 PC (0x7faac3865da0) ok
 source "0x0(%rbp)" (0x000000e0) not located in a known VMA region (needed readable region)!
 destination "%r13w" ok
 Stack memory exhausted (SP below stack segment)
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
 getenv () from /lib/x86_64-linux-gnu/libc.so.6
 ?? () from /lib/x86_64-linux-gnu/libc.so.6
 ?? () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
 g_type_class_ref () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
 g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: unity-panel-service crashed with SIGSEGV in getenv()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

Revision history for this message
HaruSiga77 (tolkien-world) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 getenv (name=0x7faac398e8f7 "NGUAGE") at getenv.c:90
 guess_category_value (domainname=0x7faac3c60440 "glib20", msgid1=0x7faac464272b "unique-name", msgid2=0x0, plural=0, n=0, category=5) at dcigettext.c:1359
 __dcigettext (domainname=0x7faac3c60440 "glib20", msgid1=0x7faac464272b "unique-name", msgid2=0x0, plural=0, n=0, category=5) at dcigettext.c:575
 g_dbus_connection_class_init (klass=<value optimized out>) at /build/buildd/glib2.0-2.29.14/./gio/gdbusconnection.c:775
 g_dbus_connection_class_intern_init (klass=<value optimized out>) at /build/buildd/glib2.0-2.29.14/./gio/gdbusconnection.c:452

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in unity (Ubuntu):
importance: Undecided → Medium
tags: removed: need-amd64-retrace
Changed in unity (Ubuntu):
importance: Medium → Critical
security vulnerability: yes → no
visibility: private → public
Changed in unity (Ubuntu):
status: New → Confirmed
Omer Akram (om26er)
Changed in unity:
status: New → Confirmed
Revision history for this message
Neil J. Patel (njpatel) wrote :

This bug seems to be in glibc, looking at Google and other LP bugs with the same trace (http://goo.gl/sTVD7). Leaving on Unity to track.

affects: unity → glibc
affects: unity (Ubuntu) → glibc (Ubuntu)
Changed in unity:
importance: Undecided → Critical
milestone: none → 4.18.0
status: New → Confirmed
Neil J. Patel (njpatel)
affects: glibc → null
affects: glibc (Ubuntu) → unity (Ubuntu)
Changed in unity (Ubuntu Oneiric):
assignee: nobody → Canonical Desktop Experience Team (canonical-dx-team)
tags: added: didrocks-oneiric-list
Revision history for this message
leonhardt (todd-leonhardt) wrote :

Got this bug as soon as I logged in.

Revision history for this message
Allison Karlitskaya (desrt) wrote :

Is Unity doing a setenv() anywhere? My best guess is that you're hitting a race between getenv() in a thread and setenv() in another thread.

Revision history for this message
Allison Karlitskaya (desrt) wrote :
Revision history for this message
Didier Roche-Tolomelli (didrocks) wrote :

yes Ryan, there are even some unsetenv() in the service:

$ grep -r setenv services/*
services/panel-a11y.c: g_unsetenv ("NO_AT_BRIDGE");
services/panel-a11y.c: g_unsetenv ("NO_GAIL");
services/panel-main.c: g_unsetenv("UBUNTU_MENUPROXY");
services/panel-main.c: g_setenv ("NO_AT_BRIDGE", "1", TRUE);
services/panel-main.c: g_unsetenv ("NO_GAIL");

tags: added: rls-mgr-o-tracking
Neil J. Patel (njpatel)
Changed in unity:
assignee: nobody → Neil J. Patel (njpatel)
status: Confirmed → In Progress
Revision history for this message
melcior (melciorsentis) wrote : Re: [Bug 817691] Re: [Oneric] unity-panel-service crashed with SIGSEGV in getenv()

any one has touched the kb during the process

On dj 22 set 2011 12:16:02 CEST, Neil J. Patel wrote:
> ** Changed in: unity
> Assignee: (unassigned) => Neil J. Patel (njpatel)
>
> ** Changed in: unity
> Status: Confirmed => In Progress
>

David Barth (dbarth)
Changed in unity (Ubuntu Oneiric):
assignee: Canonical Desktop Experience Team (canonical-dx-team) → Neil J. Patel (njpatel)
milestone: none → ubuntu-11.10
Revision history for this message
Susan Cragin (susancragin) wrote :

I didn't get this bug until this morning's updates. 23 Sept 2011 8:40 EST updated.

Revision history for this message
David Gomes (davidgomes) wrote :

I just got this on unity 4.16.0, Oneiric.

Neil J. Patel (njpatel)
Changed in unity:
status: In Progress → Fix Committed
Changed in unity (Ubuntu Oneiric):
status: Confirmed → Fix Committed
Changed in unity:
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (6.0 KiB)

This bug was fixed in the package unity - 4.18.0-0ubuntu1

---------------
unity (4.18.0-0ubuntu1) oneiric; urgency=low

  * New upstream release.
    - Screen corruption when resuming from suspend/hibernate (LP: #676166)
    - unity-panel-service crashed with SIGSEGV in bamf_factory_view_for_path()
      (LP: #764024)
    - Dash and launcher appear underneath windows (LP: #805087)
    - unity-panel-service crashed with SIGSEGV in g_type_check_instance_cast()
      (LP: #811401)
    - [Oneric] unity-panel-service crashed with SIGSEGV in getenv()
      (LP: #817691)
    - compiz crashed with SIGSEGV in unity::FilterBar::RemoveFilter()
      (LP: #845732)
    - crash on closing a window (LP: #856015)
    - Cannot open a window that starts iconified (LP: #732997)
    - Launcher - When useing Alt F1 launcher keyboard navigation, Launcher
      should not scroll until top or bottom of Launcher is reached
      (LP: #765749)
    - Stacking problem when switching between apps with multiple windows
      (LP: #802527)
    - Pull panel to de-maximize window occasionally not working in a secondary
      screen (LP: #802651)
    - Window under Dash gets focused if it opened later (LP: #830730)
    - Clickable areas of previously active window remains on 'Show Desktop'
      (LP: #836325)
    - A minimized window 'remains' behind on the desktop if
      /apps/compiz-1/plugins/unityshell/screen0/options/show_minimized_windows
      is set to true (LP: #847967)
    - a11y support on Unity is broken (LP: #851103)
    - compiz crashed with SIGSEGV in dee_model_get_tag() (LP: #840758)
    - crash when looping paint list in preparePaint (on closing windows)
      (LP: #853807)
    - Alt-Tab should not preview windows at excessively large sizes
      (LP: #854740)
    - Clicking on a tweet/message link sometimes does not work (LP: #790565)
    - Dragging a launcher icon makes it squashed (LP: #855761)
    - unable to unminimize gedit windows where more than one window where one
      has a dialog open (LP: #856030)
    - (oneiric) alt-tab UX doesn't work well on multi-monitor (LP: #855364)
    - Launcher shows on the primary monitor instead of the left most monitor
      (LP: #857668)
    - Keynav - pressing down key causes launcher items to jump up and down
      (LP: #858469)
    - Windows creep cross the screen with ALT+TAB (LP: #722830)
    - Minimize animation flickr when for maximized apps (LP: #737125)
    - All unity windows are invisible (panel, launcher, dash) (LP: #745996)
    - Dash "See 97 more results" has ~1 second of latency (LP: #731158)
    - Windows cannot be dragged down from panel if banshee closed to sound
      menu (LP: #781215)
    - no menu bar on top, compositing bug? (LP: #806358)
    - Launcher - a spread can accidentally be triggered during the 'dragging
      and dropping behind the Launcher' interaction (LP: #832988)
    - Impossible to navigate between panel menus when the mouse cursor is over
      the panel (LP: #834065)
    - Pressing alt on maximized window does show menu but not window controls
      (LP: #836274)
    - Application name drawn under Dash controls when window opens under Dash
      (LP: #838176)
    - Start ...

Read more...

Changed in unity (Ubuntu Oneiric):
status: Fix Committed → Fix Released
Curtis Hovey (sinzui)
no longer affects: null
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.