nautilus crash right clicking on Properties of an image file

Bug #330557 reported by Peter Watkins
26
This bug affects 5 people
Affects Status Importance Assigned to Milestone
Nautilus
Fix Released
Critical
exempi (Ubuntu)
Fix Released
Medium
Unassigned

Bug Description

Binary package hint: nautilus

Note: opening new ticket per Pedro Villavicencio's note on https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/192469 (https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/192469/comments/7)

As noted in earlier bug ticket, "Sometimes, right clicking on image file and selecting Properties, nautilus crash."

I'm seeing the same problem, and also have an empty /var/crash directory. Running hardy 8.04.2 x86_64, all packages up to date. This sounds like the same bug reported here for Fedora: https://bugzilla.redhat.com/show_bug.cgi?id=472439 as a bug in libexempi (and apparently resolved for Fedora). Use the .exv sample data in that ticket's initial entry to reproduce. That is:
 1) make a JPEG (I used Gimp to convert a PNG screenshot to JPEG)
 2) install exiv2
 3) use exiv2 to remove any metadata from the image from step 1
 4) save the Fedora bugzilla sample bad .exv with the same basename as the JPEG made in step 1
 5) use exiv2 to import the bugzilla sample metadata into the jpeg
 6) in Nautilus, right-click on the image icon and request its properties.

Or just try viewing the properties of the JPEG I'm attaching now (which uses the Fedora bugzilla sample metadata)... crashes Nautilus for me every time I request its properties (as do a number of my own pictures, taken with a Canon camera).

Is this a security problem? Seems plausible, but I have not made any attempt to determine if the bug is exploitable.

Revision history for this message
Peter Watkins (peterw-tux) wrote :
Revision history for this message
Pedro Villavicencio (pedro) wrote :

Thanks for your bug report. There's no crash for me using jaunty, could you try to obtain a backtrace http://wiki.ubuntu.com/DebuggingProgramCrash and attach the file to the bug report. This will greatly help us in tracking down your problem.

Changed in nautilus:
assignee: nobody → desktop-bugs
importance: Undecided → Medium
status: New → Incomplete
Revision history for this message
Peter Watkins (peterw-tux) wrote :

1) Sorry, the instructions on that page are not working for me, possibly because the ddebs packages are out of date? `apt-cache policy nautilus` says I'm running nautilus version 1:2.22.5.1-0ubuntu1 (from hardy-updates/main), but `apt-cache policy nautilus-dbgsym` says only version 1:2.22.2-0ubuntu4 (from hardy/main) is available. Looks like I could only install nautilus-dbgsym by rolling nautilus itself back to 1:2.22.2-0ubuntu4 somehow.

2) Now that I've failed to install with an "apt-get install $package=$version" command, would you please be so kind as to tell me how to remove the =$version pinning so I don't get errors like

  nautilus-dbgsym: Depends: nautilus (= 1:2.22.2-0ubuntu4) but 1:2.22.5.1-0ubuntu1 is to be installed

? I can squelch the errors by restoring /etc/apt/sources.list and running `apt-get update` but cannot figure out how to clear the error with apt-get, aptitude, or synaptic when the ddebs repo is enabled.

Thanks.

Revision history for this message
Sebastien Bacher (seb128) wrote :

could you try if that's still an issue in jaunty? the issue regarding versions sems to be that you didn't enable hardy-updates for the ddebs source, you can also try installing nautilus-dbg

Revision history for this message
Sebastien Bacher (seb128) wrote :

We are closing this bug report as it lacks the information, described in the previous comments, we need to investigate the problem further. However, please reopen it if you can give us the missing information and don't hesitate to submit bug reports in the future.

Changed in nautilus (Ubuntu):
status: Incomplete → Invalid
Revision history for this message
Everthon Valadão (valadao) wrote :

When right-clicked some photo image and selected Properties, nautilus crashes with a "floating point exception" (this do not happen to all my photos, but just to some "apparently random" ones).

To reopen this bug report I collected some crash info with gdb (see attached file):

   $ sudo apt-get -y install nautilus-dbg libexempi3-dbg
   $ nautilus &
   $ gdb nautilus `pidof nautilus` 2>&1 | tee gdb-nautilus.txt
            (gdb) continue
   <at this moment I opened the image properties to cause nautilus crash>
            (gdb) backtrace full
            (gdb) info registers
            (gdb) thread apply all backtrace
            (gdb) continue
            (gdb) quit
   [1]+ Floating point exception nautilus

(I followed the steps of https://wiki.ubuntu.com/Backtrace :)

It seems to be a libexempi error, as you can see in the gdb log at line 338:

   Program received signal SIGFPE, Arithmetic exception.
   [Switching to Thread 0xb6e8a750 (LWP 8766)]
   0xb74ea170 in TIFF_MemoryReader::GetTag (this=0x913ef98, ifd=<value optimized out>, id=<value optimized out>, info=0xbf92dbf8) at TIFF_MemoryReader.cpp:214
   214 TIFF_MemoryReader.cpp: No such file or directory.
    in TIFF_MemoryReader.cpp
   Current language: auto; currently c++

P.S.: My system configs are

$ uname -a
Linux valadao-desktop 2.6.28-11-generic #42-Ubuntu SMP Fri Apr 17 01:57:59 UTC 2009 i686 GNU/Linux

$ cat /etc/issue
Ubuntu 9.04

$ apt-cache policy nautilus
nautilus:
  Installed: 1:2.26.2-0ubuntu2
  Candidate: 1:2.26.2-0ubuntu2

$ apt-cache policy libexempi3
libexempi3:
  Installed: 2.0.2-2
  Candidate: 2.0.2-2

Revision history for this message
Everthon Valadão (valadao) wrote :

I'm reopening this bug report as it now have the needed information, and if you guys need more debug info, tell me what and how to get it and I will be glad to provide.

Changed in nautilus (Ubuntu):
status: Invalid → Confirmed
Revision history for this message
Everthon Valadão (valadao) wrote :

@Peter: your attached image doesn't crashed my nautilus here on jaunty, but some of my photos did, so I attached one of them (it's a flower).

Sorry, but I could not resize the image to reduce the file size, because the resized version doesn't crash nautilus...

Revision history for this message
Pedro Villavicencio (pedro) wrote :

the backtrace matches: http://bugzilla.gnome.org/show_bug.cgi?id=586720 there's a comment upstream indicating that it might be a libexempi issue too.

Changed in nautilus (Ubuntu):
status: Confirmed → Triaged
Changed in nautilus:
status: Unknown → Confirmed
Changed in nautilus:
status: Confirmed → Fix Released
affects: nautilus (Ubuntu) → exempi (Ubuntu)
Changed in exempi (Ubuntu):
assignee: Ubuntu Desktop Bugs (desktop-bugs) → nobody
status: Triaged → Fix Committed
Changed in nautilus:
importance: Unknown → Critical
Revision history for this message
teimcrr (marco-carrarini) wrote :

I am experiencing this problem again in Oneiric.
It wasn't there in Natty.
I attach an example of picture where Right Click -> Properties makes Nautilus crash

Revision history for this message
<JimS> (spedia999) wrote :

I'm experiencing this in Oneiric too. Not just photo files, any file type.

Revision history for this message
Martin Pitt (pitti) wrote :

This got fixed in 2.1.1, which is in precise.

Changed in exempi (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.