Attempting to load a savegame, monop crashed with SIGSEGV in __malloc_assert()

[Hans Joachim Desserud]

To reproduce, download the attached savegame or create one on your own.
1. Run monop.
2. Pick a number of player(s) and assign names (not needed, but won't get to the menu without this step)
3. Run "restore savegame"

Expected result: Loading the saved game.
Actual result: monop crash with a segfault. Example output:
-- Command: restore
Which file do you wish to restore from? savegame
monop: malloc.c:3096: sYSMALLOc: Assertion `(old_top == (((mbinptr) (((char *) &((av)->bins[((1) - 1) * 2])) - __builtin_offsetof (struct malloc_chunk, fd)))) && old_size == 0) || ((unsigned long) (old_size) >= (unsigned long)((((__builtin_offsetof (struct malloc_chunk, fd_nextsize))+((2 * (sizeof(size_t))) - 1)) & ~((2 * (sizeof(size_t))) - 1))) && ((old_top)->size & 0x1) && ((unsigned long)old_end & pagemask) == 0)' failed.
Segmentation fault (core dumped)

This is based on bug 368997, so it looks like this have been around for a while.

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: bsdgames 2.17-19
ProcVersionSignature: Ubuntu 3.2.0-10.17-generic 3.2.1
Uname: Linux 3.2.0-10-generic i686
ApportVersion: 1.91-0ubuntu1
Architecture: i386
Date: Sun Jan 22 13:55:09 2012
ExecutablePath: /usr/games/monop
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Alpha i386 (20111129.1)
ProcCmdline: monop
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, no user)
 LANG=en_US.UTF-8
SegvAnalysis:
 Segfault happened at: 0x5b335e: mov 0x68(%esi),%eax
 PC (0x005b335e) ok
 source "0x68(%esi)" (0x00abb4c8) not located in a known VMA region (needed readable region)!
 destination "%eax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: bsdgames
StacktraceTop:
 ?? () from /lib/i386-linux-gnu/libc.so.6
 abort () from /lib/i386-linux-gnu/libc.so.6
 ?? () from /lib/i386-linux-gnu/libc.so.6
 ?? () from /lib/i386-linux-gnu/libc.so.6
 malloc () from /lib/i386-linux-gnu/libc.so.6
Title: monop crashed with SIGSEGV in abort()
UpgradeStatus: Upgraded to precise on 2012-01-20 (1 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Hans Joachim Desserud (hjd)]

Example savegame. Basically just created a new game and saved it.

[Apport retracing service (apport)]

StacktraceTop:
 __malloc_assert (assertion=<optimized out>, file=<optimized out>, line=3096, function=0x67ef49 "sYSMALLOc") at malloc.c:351
 sYSMALLOc (av=0x6bf400, nb=24) at malloc.c:3093
 _int_malloc (av=0x6bf400, bytes=15) at malloc.c:4747
 __GI___libc_malloc (bytes=15) at malloc.c:3660
 __GI___strdup (s=0x67f26f "/etc/localtime") at strdup.c:43

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Hans Joachim Desserud (hjd)]

I am still able to reproduce this issue with bsdgames 2.17-22 on Ubuntu Vivid.