opening a png

Bug #2036257 reported by Jason
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Pinta
New
Undecided
Unassigned

Bug Description

After opening a png file and commencing editing the application crashes. OS is Ubuntu 22.04.3 LTS.

The crash report is below,
free(): invalid pointer

=================================================================
 Native Crash Reporting
=================================================================
Got a SIGABRT while executing native code. This usually indicates
a fatal error in the mono runtime or one of the native libraries
used by your application.
=================================================================

=================================================================
 Native stacktrace:
=================================================================
 0x55a3e8e2448e - /usr/bin/mono : (null)
 0x55a3e8b15c0e - /usr/bin/mono : (null)
 0x55a3e8b49b1e - /usr/bin/mono : (null)
 0x7f96b8642520 - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f96b8696a7c - /lib/x86_64-linux-gnu/libc.so.6 : pthread_kill
 0x7f96b8642476 - /lib/x86_64-linux-gnu/libc.so.6 : raise
 0x7f96b86287f3 - /lib/x86_64-linux-gnu/libc.so.6 : abort
 0x7f96b86896f6 - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f96b86a0d7c - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f96b86a2ac4 - /lib/x86_64-linux-gnu/libc.so.6 : (null)
 0x7f96b86a54d3 - /lib/x86_64-linux-gnu/libc.so.6 : free
 0x40a63fb3 - Unknown

=================================================================
 Telemetry Dumper:
=================================================================
Pkilling 0x7f96b8951780 from 0x7f96b7fff640
Entering thread summarizer pause from 0x7f96b7fff640
Finished thread summarizer pause from 0x7f96b7fff640.

Waiting for dumping threads to resume

=================================================================
 External Debugger Dump:
=================================================================
[New LWP 250735]
[New LWP 250736]
[New LWP 250737]
[New LWP 250738]
[New LWP 250751]
[New LWP 250780]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
0x00007f96b8718d7f in __GI___poll (fds=0x55a3e9a75620, nfds=3, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
29 ../sysdeps/unix/sysv/linux/poll.c: No such file or directory.
  Id Target Id Frame
* 1 Thread 0x7f96b8951780 (LWP 250734) "mono" 0x00007f96b8718d7f in __GI___poll (fds=0x55a3e9a75620, nfds=3, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
  2 Thread 0x7f96b77ff640 (LWP 250735) "SGen worker" __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0x55a3e8f8a128) at ./nptl/futex-internal.c:57
  3 Thread 0x7f96b7fff640 (LWP 250736) "Finalizer" 0x00007f96b86ea49f in __GI___wait4 (pid=250792, stat_loc=0x7f96b7ffce34, options=0, usage=0x0) at ../sysdeps/unix/sysv/linux/wait4.c:30
  4 Thread 0x7f96af492640 (LWP 250737) "gmain" 0x00007f96b8718d7f in __GI___poll (fds=0x55a3e936be30, nfds=2, timeout=5062) at ../sysdeps/unix/sysv/linux/poll.c:29
  5 Thread 0x7f96aec91640 (LWP 250738) "gdbus" 0x00007f96b8718d7f in __GI___poll (fds=0x55a3e9377870, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  6 Thread 0x7f969edf2640 (LWP 250751) "threaded-ml" 0x00007f96b8718d7f in __GI___poll (fds=0x7f96900071a0, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
  7 Thread 0x7f96821ff640 (LWP 250780) "pool-Pinta" syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38

Thread 7 (Thread 0x7f96821ff640 (LWP 250780) "pool-Pinta"):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007f96b421804c in g_cond_wait_until () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f96b41983e1 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f96b4198566 in g_async_queue_timeout_pop () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f96b41fa759 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f96b41f7a51 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#6 0x00007f96b8694b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#7 0x00007f96b8726a00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 6 (Thread 0x7f969edf2640 (LWP 250751) "threaded-ml"):
#0 0x00007f96b8718d7f in __GI___poll (fds=0x7f96900071a0, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007f96ac30a21d in ?? () from /lib/x86_64-linux-gnu/libpulse.so.0
#2 0x00007f96ac2f35a1 in pa_mainloop_poll () from /lib/x86_64-linux-gnu/libpulse.so.0
#3 0x00007f96ac2fe0bb in pa_mainloop_iterate () from /lib/x86_64-linux-gnu/libpulse.so.0
#4 0x00007f96ac2fe170 in pa_mainloop_run () from /lib/x86_64-linux-gnu/libpulse.so.0
#5 0x00007f96ac30e37d in ?? () from /lib/x86_64-linux-gnu/libpulse.so.0
#6 0x00007f969efd4cb3 in ?? () from /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-15.99.so
#7 0x00007f96b8694b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#8 0x00007f96b8726a00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 5 (Thread 0x7f96aec91640 (LWP 250738) "gdbus"):
#0 0x00007f96b8718d7f in __GI___poll (fds=0x55a3e9377870, nfds=3, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007f96b421e1f6 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f96b41c82b3 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f96b44a407a in ?? () from /lib/x86_64-linux-gnu/libgio-2.0.so.0
#4 0x00007f96b41f7a51 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f96b8694b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#6 0x00007f96b8726a00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 4 (Thread 0x7f96af492640 (LWP 250737) "gmain"):
#0 0x00007f96b8718d7f in __GI___poll (fds=0x55a3e936be30, nfds=2, timeout=5062) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007f96b421e1f6 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f96b41c63e3 in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f96b41c6431 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#4 0x00007f96b41f7a51 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#5 0x00007f96b8694b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#6 0x00007f96b8726a00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 3 (Thread 0x7f96b7fff640 (LWP 250736) "Finalizer"):
#0 0x00007f96b86ea49f in __GI___wait4 (pid=250792, stat_loc=0x7f96b7ffce34, options=0, usage=0x0) at ../sysdeps/unix/sysv/linux/wait4.c:30
#1 0x000055a3e8e248a6 in ?? ()
#2 0x000055a3e8b15c0e in ?? ()
#3 0x000055a3e8b49b1e in ?? ()
#4 <signal handler called>
#5 __pthread_kill_implementation (no_tid=0, signo=6, threadid=140285308827200) at ./nptl/pthread_kill.c:44
#6 __pthread_kill_internal (signo=6, threadid=140285308827200) at ./nptl/pthread_kill.c:78
#7 __GI___pthread_kill (threadid=140285308827200, signo=signo@entry=6) at ./nptl/pthread_kill.c:89
#8 0x00007f96b8642476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#9 0x00007f96b86287f3 in __GI_abort () at ./stdlib/abort.c:79
#10 0x00007f96b86896f6 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f96b87dbb8c "%s\n") at ../sysdeps/posix/libc_fatal.c:155
#11 0x00007f96b86a0d7c in malloc_printerr (str=str@entry=0x7f96b87d9764 "free(): invalid pointer") at ./malloc/malloc.c:5664
#12 0x00007f96b86a2ac4 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at ./malloc/malloc.c:4439
#13 0x00007f96b86a54d3 in __GI___libc_free (mem=<optimized out>) at ./malloc/malloc.c:3391
#14 0x0000000040a63fb3 in ?? ()
#15 0x000055a3e98a65b0 in ?? ()
#16 0x000055a3e8fff540 in ?? ()
#17 0x000055a3e8fff540 in ?? ()
#18 0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7f96b77ff640 (LWP 250735) "SGen worker"):
#0 __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0x55a3e8f8a128) at ./nptl/futex-internal.c:57
#1 __futex_abstimed_wait_common (cancel=true, private=0, abstime=0x0, clockid=0, expected=0, futex_word=0x55a3e8f8a128) at ./nptl/futex-internal.c:87
#2 __GI___futex_abstimed_wait_cancelable64 (futex_word=futex_word@entry=0x55a3e8f8a128, expected=expected@entry=0, clockid=clockid@entry=0, abstime=abstime@entry=0x0, private=private@entry=0) at ./nptl/futex-internal.c:139
#3 0x00007f96b8693ac1 in __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55a3e8f8a140, cond=0x55a3e8f8a100) at ./nptl/pthread_cond_wait.c:503
#4 ___pthread_cond_wait (cond=0x55a3e8f8a100, mutex=0x55a3e8f8a140) at ./nptl/pthread_cond_wait.c:627
#5 0x000055a3e8ddf1fb in ?? ()
#6 0x00007f96b8694b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
#7 0x00007f96b8726a00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

Thread 1 (Thread 0x7f96b8951780 (LWP 250734) "mono"):
#0 0x00007f96b8718d7f in __GI___poll (fds=0x55a3e9a75620, nfds=3, timeout=500) at ../sysdeps/unix/sysv/linux/poll.c:29
#1 0x00007f96b421e1f6 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f96b41c82b3 in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#3 0x00007f96b49402d2 in gtk_main () from /lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#4 0x0000000040a4b920 in ?? ()
#5 0x0000000000000000 in ?? ()
[Inferior 1 (process 250734) detached]

=================================================================
 Basic Fault Address Reporting
=================================================================
Memory around native instruction pointer (0x7f96b8696a7c):0x7f96b8696a6c 05 00 44 89 e2 89 ee 89 c7 b8 ea 00 00 00 0f 05 ..D.............
0x7f96b8696a7c 41 89 c5 41 f7 dd 3d 00 f0 ff ff b8 00 00 00 00 A..A..=.........
0x7f96b8696a8c 44 0f 46 e8 e9 6d ff ff ff 0f 1f 00 48 89 ef e8 D.F..m......H...
0x7f96b8696a9c 10 a8 ff ff e9 29 ff ff ff 0f 1f 00 48 89 ef e8 .....)......H...

=================================================================
 Managed Stacktrace:
=================================================================
   at <unknown> <0xffffffff>
   at GLib.SList:g_free <0x000a2>
   at GLib.ListBase:Empty <0x001a4>
   at GLib.ListBase:Dispose <0x0002b>
   at GLib.ListBase:Finalize <0x00035>
   at System.Object:runtime_invoke_virtual_void__this__ <0x0008c>
=================================================================
Aborted (core dumped)

Revision history for this message
Cameron White (cameronwhite91) wrote :

This is the same as bug 1786822, and is best fixed by updating to Pinta 2.x either through the flatpak / snap package, or https://xtradeb.net/apps/pinta/ if you prefer a PPA
The Pinta package in the Debian repositories is unfortunately very outdated

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.