Pinta crashes after choosing colour

Bug #1880762 reported by Maciej Kedzior
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Pinta
New
Undecided
Unassigned

Bug Description

When I open picture in Pinta after choosing colour for pen app freezes and crashes. Here's the dump written to standard output in terminal:
free(): invalid pointer

=================================================================
        Native Crash Reporting
=================================================================
Got a SIGABRT while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

=================================================================
        Native stacktrace:
=================================================================
        0x55cd450306a5 - /usr/bin/mono : (null)
        0x55cd45030a3c - /usr/bin/mono : (null)
        0x55cd44fdca61 - /usr/bin/mono : (null)
        0x55cd4502fc9b - /usr/bin/mono : (null)
        0x7f785eb87540 - /lib/x86_64-linux-gnu/libpthread.so.0 : (null)
        0x7f785e66e3eb - /lib/x86_64-linux-gnu/libc.so.6 : gsignal
        0x7f785e64d899 - /lib/x86_64-linux-gnu/libc.so.6 : abort
        0x7f785e6b838e - /lib/x86_64-linux-gnu/libc.so.6 : (null)
        0x7f785e6c04dc - /lib/x86_64-linux-gnu/libc.so.6 : (null)
        0x7f785e6c1cfc - /lib/x86_64-linux-gnu/libc.so.6 : (null)
        0x402a9be3 - Unknown

=================================================================
        Telemetry Dumper:
=================================================================
Pkilling 0x7f785e625780 from 0x7f785b49e700
Entering thread summarizer pause from 0x7f785b49e700
Finished thread summarizer pause from 0x7f785b49e700.

Waiting for dumping threads to resume

=================================================================
        External Debugger Dump:
=================================================================
[New LWP 9066]
[New LWP 9067]
[New LWP 9068]
[New LWP 9072]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007f785e73dc2f in __GI___poll (fds=0x55cd46f236d0, nfds=3, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
29 ../sysdeps/unix/sysv/linux/poll.c: Nie ma takiego pliku ani katalogu.
  Id Target Id Frame
* 1 Thread 0x7f785e625780 (LWP 9065) "mono" 0x00007f785e73dc2f in __GI___poll (fds=0x55cd46f236d0, nfds=3, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
  2 Thread 0x7f785d7ff700 (LWP 9066) "SGen worker" futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55cd4560a008) at ../sysdeps/unix/sysv/linux/futex-internal.h:80
  3 Thread 0x7f785b49e700 (LWP 9067) "Finalizer" 0x00007f785eb86ee6 in __waitpid (pid=9078, stat_loc=0x7f785b49c614, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:30
  4 Thread 0x7f7858f20700 (LWP 9068) "gmain" 0x00007f785e73dc2f in __GI___poll (fds=0x55cd46545250, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  5 Thread 0x7f7849e0d700 (LWP 9072) "pool-Pinta" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38

Thread 5 (Thread 0x7f7849e0d700 (LWP 9072)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f7859a40ea6 in g_cond_wait_until () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f78599c53e1 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f78599c5a06 in g_async_queue_timeout_pop () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f7859a1e969 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f7859a1e181 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#6 0x00007f785eb7b669 in start_thread (arg=<optimized out>) at pthread_create.c:479
#7 0x00007f785e74a323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 4 (Thread 0x7f7858f20700 (LWP 9068)):
#0 0x00007f785e73dc2f in __GI___poll (fds=0x55cd46545250, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007f78599f4aae in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f78599f4be3 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f78599f4c31 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f7859a1e181 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f785eb7b669 in start_thread (arg=<optimized out>) at pthread_create.c:479
#6 0x00007f785e74a323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 3 (Thread 0x7f785b49e700 (LWP 9067)):
#0 0x00007f785eb86ee6 in __waitpid (pid=9078, stat_loc=0x7f785b49c614, options=0) at ../sysdeps/unix/sysv/linux/waitpid.c:30
#1 0x000055cd450309b5 in ?? ()
#2 0x000055cd45030a3c in ?? ()
#3 0x000055cd44fdca61 in ?? ()
#4 0x000055cd4502fc9b in ?? ()
#5 <signal handler called>
#6 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#7 0x00007f785e64d899 in __GI_abort () at abort.c:79
#8 0x00007f785e6b838e in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f785e7e13a5 "%s\n") at ../sysdeps/posix/libc_fatal.c:181
#9 0x00007f785e6c04dc in malloc_printerr (str=str@entry=0x7f785e7df52a "free(): invalid pointer") at malloc.c:5332
#10 0x00007f785e6c1cfc in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4173
#11 0x00000000402a9be3 in ?? ()
#12 0x000055cd46aafb70 in ?? ()
#13 0x000055cd46271380 in ?? ()
#14 0x00007f785dcb4b65 in ?? ()
#15 0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f785d7ff700 (LWP 9066)):
#0 futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55cd4560a008) at ../sysdeps/unix/sysv/linux/futex-internal.h:80
#1 __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55cd4560a020, cond=0x55cd45609fe0) at pthread_cond_wait.c:508
#2 __pthread_cond_wait (cond=0x55cd45609fe0, mutex=0x55cd4560a020) at pthread_cond_wait.c:638
#3 0x000055cd4526fbfa in ?? ()
#4 0x00007f785eb7b669 in start_thread (arg=<optimized out>) at pthread_create.c:479
#5 0x00007f785e74a323 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Thread 1 (Thread 0x7f785e625780 (LWP 9065)):
#0 0x00007f785e73dc2f in __GI___poll (fds=0x55cd46f236d0, nfds=3, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007f78599f4aae in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f78599f4e33 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f785a426092 in gtk_main () from /lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#4 0x000000004028ee00 in ?? ()
#5 0x00007ffd2c1baf90 in ?? ()
#6 0x000055cd46275338 in ?? ()
#7 0x00007f785d800aa8 in ?? ()
#8 0x00007f785d803ca8 in ?? ()
#9 0x00007f785d803cf8 in ?? ()
#10 0x000055cd46295a80 in ?? ()
#11 0x00007ffd2c1bad20 in ?? ()
#12 0x00007ffd2c1babc0 in ?? ()
#13 0x0000000000000000 in ?? ()
[Inferior 1 (process 9065) detached]

=================================================================
        Basic Fault Address Reporting
=================================================================
Memory around native instruction pointer (0x7f785e66e3eb):0x7f785e66e3db d2 4c 89 ce bf 02 00 00 00 b8 0e 00 00 00 0f 05 .L..............
0x7f785e66e3eb 48 8b 84 24 08 01 00 00 64 48 33 04 25 28 00 00 H..$....dH3.%(..
0x7f785e66e3fb 00 75 26 44 89 c0 48 81 c4 18 01 00 00 c3 0f 1f .u&D..H.........
0x7f785e66e40b 80 00 00 00 00 48 8b 15 59 3a 1a 00 f7 d8 41 b8 .....H..Y:....A.

=================================================================
        Managed Stacktrace:
=================================================================
          at <unknown> <0xffffffff>
          at GLib.SList:g_free <0x000a2>
          at GLib.ListBase:Empty <0x001b4>
          at GLib.ListBase:Dispose <0x0002b>
          at GLib.ListBase:Finalize <0x00035>
          at System.Object:runtime_invoke_virtual_void__this__ <0x0008c>
=================================================================
Przerwane (zrzut pamięci)

information type: Private Security → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.