gimp-2.6 crashed with SIGSEGV in completion_match_func()

[Fabio Marconi]

Release of Ubuntu:12.04 - 12-10
Package Version:2.6.12-1ubuntu1
Expected Results: save file without crash
Actual Results: it crash after save the file

Gimp crash after saving documents.
I can reproduce this everytime.
Testcase:
-take a screenshot, save it and open it in gimp
-cut a part of the image with the cutter
-click on the cuttered part,
-menu File -> Save as.., choose a name, save, let the settings as default, save and it crash

Entire crash file attached because apport is actually disabled in quantal
ProblemType: Crash
Architecture: amd64
CrashCounter: 1Date: Wed May 16 15:41:18 2012DistroRelease: Ubuntu 12.10
ExecutablePath: /usr/bin/gimp-2.6
ExecutableTimestamp: 1329981401
ProcCmdline: gimp-2.6

[Fabio Marconi (fabiomarconi)]

---
Ubuntu Bug Squad volunteer triager
http://wiki.ubuntu.com/BugSquad

[Fabio Marconi (fabiomarconi)]

---
Ubuntu Bug Squad volunteer triager
http://wiki.ubuntu.com/BugSquad

[Fabio Marconi (fabiomarconi)]

---
Ubuntu Bug Squad volunteer triager
http://wiki.ubuntu.com/BugSquad

[Fabio Marconi (fabiomarconi)]

From strace:
[pid 12996] 17:17:20.197305 write(2, "\n(gimp:12996): Gtk-CRITICAL **: "..., 106
(gimp:12996): Gtk-CRITICAL **: IA__gtk_tree_model_get: assertion `GTK_IS_TREE_MODEL (tree_model)' failed
) = 106
[pid 12996] 17:17:20.197429 --- SIGSEGV (Segmentation fault) @ 0 (0) ---
[pid 13023] 17:17:20.359791 +++ killed by SIGSEGV (core dumped) +++
[pid 13002] 17:17:20.359830 +++ killed by SIGSEGV (core dumped) +++
[pid 13000] 17:17:20.359838 +++ killed by SIGSEGV (core dumped) +++
[pid 12997] 17:17:20.359846 +++ killed by SIGSEGV (core dumped) +++
[pid 12998] 17:17:20.362455 +++ killed by SIGSEGV (core dumped) +++
[pid 13001] 17:17:20.362535 +++ killed by SIGSEGV (core dumped) +++
[pid 12999] 17:17:20.362546 +++ killed by SIGSEGV (core dumped) +++
17:17:20.418582 <... select resumed> ) = 1 (in [18])
17:17:20.418776 read(18, "", 4) = 0
17:17:20.418898 write(2, "\n(script-fu:13005): LibGimpBase-"..., 79
(script-fu:13005): LibGimpBase-WARNING **: script-fu: gimp_wire_read(): error
) = 79
17:17:20.418982 shmdt(0x7fbf69bbb000) = 0
17:17:20.419281 exit_group(0) = ?
Process 13005 detached
---
Ubuntu Bug Squad volunteer triager
http://wiki.ubuntu.com/BugSquad

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[MP (pagel-d)]

Duplicate Bugs: Bug #1000277 Bug #1007230 Bug #1048657 Bug #1067514 Bug #1087920
Probably dup of bug #912909, but crashing situation (abort) different there

I added a potential workaround to Bug #1048657 and Bug #1087920