bzr crashed with SIGSEGV in g_type_check_instance_cast()

[Gary M]

Binary package hint: bzr-explorer

Started Bazaar Explorer. Got welcome screen, which included one project and one folder in the "Recently Opened" list (as expected). Double-clicked folder. Got shown contents (a few subfolders, as expected). Exited. Got this bzr crash. Reproducible here.

ProblemType: Crash
DistroRelease: Ubuntu 10.10
Package: bzr 2.2.1-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.35-23.40-generic 2.6.35.7
Uname: Linux 2.6.35-23-generic i686
Architecture: i386
Date: Fri Nov 26 01:32:34 2010
ExecutablePath: /usr/bin/bzr
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Alpha i386 (20100803.1)
InterpreterPath: /usr/bin/python2.6
ProcCmdline: /usr/bin/python /usr/bin/bzr explorer
ProcEnviron:
 LANG=en_NZ.utf8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x80d1c48 <setup_context+24>: mov 0x8(%edx),%edx
 PC (0x080d1c48) ok
 source "0x8(%edx)" (0x00000008) not located in a known VMA region (needed readable region)!
 destination "%edx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: bzr
StacktraceTop:
 g_type_check_instance_cast (type_instance=0x9fc34a0, iface_type=80) at /build/buildd/glib2.0-2.26.1/gobject/gtype.c:3986
 ?? () from /usr/lib/gtk-2.0/2.10.0/menuproxies/libappmenu.so
 g_cclosure_marshal_VOID__PARAM (closure=0x9c70e70, return_value=0x0, n_param_values=2, param_values=0x9fcb4e0, invocation_hint=0xbf8497d0, marshal_data=0x2e310d1) at /build/buildd/glib2.0-2.26.1/gobject/gmarshal.c:533
 g_closure_invoke (closure=0x9c70e70, return_value=0x0, n_param_values=2, param_values=0x9fc3200, invocation_hint=0xbf8497d0) at /build/buildd/glib2.0-2.26.1/gobject/gclosure.c:766
 signal_emit_unlocked_R (node=<value optimized out>, detail=<value optimized out>, instance=0x9fcb4e0, emission_return=0x0, instance_and_params=0x9fc3200) at /build/buildd/glib2.0-2.26.1/gobject/gsignal.c:3252
Title: bzr crashed with SIGSEGV in g_type_check_instance_cast()
UserGroups: adm admin audio cdrom dialout lpadmin plugdev sambashare

[Apport retracing service (apport)]

StacktraceTop:
 g_type_is_a () from /usr/lib/libgobject-2.0.so.0
 register_application_windows (bridge=<value optimized out>)
 ?? () from /usr/lib/libgobject-2.0.so.0
 g_closure_add_marshal_guards ()
 ?? () from /usr/lib/libgobject-2.0.so.0

[Alexander Belchenko (bialix)]

Is that g_thing coming from GTK?