GIMP crashed with "munmap_chunk(): invalid pointer" in free()
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gimp (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
<!-- Copy-paste this whole debug data to report to developers -->
```
GNU Image Manipulation Program version 2.10.30
git-describe: GIMP_2_10_30
Build: unknown rev 0 for linux
# C compiler #
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_
OFFLOAD_
OFFLOAD_
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 11.2.0 (Ubuntu 11.2.0-16ubuntu1)
# Libraries #
using babl version 0.1.92 (compiled against version 0.1.88)
using GEGL version 0.4.34 (compiled against version 0.4.34)
using GLib version 2.72.1 (compiled against version 2.71.1)
using GdkPixbuf version 2.42.8 (compiled against version 2.42.6)
using GTK+ version 2.24.33 (compiled against version 2.24.33)
using Pango version 1.50.6 (compiled against version 1.50.3)
using Fontconfig version 2.13.1 (compiled against version 2.13.1)
using Cairo version 1.16.0 (compiled against version 1.16.0)
```
> fatal error: Aborted
Stack trace:
```
# Stack traces obtained from PID 6683 - Thread 6685 #
[New LWP 6685]
[New LWP 6691]
[New LWP 6692]
[New LWP 6864]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_
__futex_
Id Target Id Frame
* 1 Thread 0x7f2ca16bfe80 (LWP 6683) "gimp-2.10" __futex_
2 Thread 0x7f2ca0b4b640 (LWP 6685) "worker" __GI___libc_read (nbytes=256, buf=0x7f2ca0b497d0, fd=17) at ../sysdeps/
3 Thread 0x7f2c96b47640 (LWP 6691) "gmain" 0x00007f2ca23c0d7f in __GI___poll (fds=0x559817d0
4 Thread 0x7f2c97348640 (LWP 6692) "gdbus" 0x00007f2ca23c0d7f in __GI___poll (fds=0x559817d1
5 Thread 0x7f2c610d0640 (LWP 6864) "paint" syscall () at ../sysdeps/
Thread 5 (Thread 0x7f2c610d0640 (LWP 6864) "paint"):
#0 syscall () at ../sysdeps/
No locals.
#1 0x00007f2ca265b203 in g_cond_wait () from /lib/x86_
No symbol table info available.
#2 0x0000559815753001 in ?? ()
No symbol table info available.
#3 0x00007f2ca263ba41 in ?? () from /lib/x86_
No symbol table info available.
#4 0x00007f2ca233cb43 in start_thread (arg=<optimised out>) at ./nptl/
ret = <optimised out>
pd = <optimised out>
out = <optimised out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140731370600960, -21708493355542
#5 0x00007f2ca23cea00 in clone3 () at ../sysdeps/
No locals.
Thread 4 (Thread 0x7f2c97348640 (LWP 6692) "gdbus"):
#0 0x00007f2ca23c0d7f in __GI___poll (fds=0x559817d1
sc_ret = -516
sc_ret = <optimised out>
#1 0x00007f2ca2661696 in ?? () from /lib/x86_
No symbol table info available.
#2 0x00007f2ca260c293 in g_main_loop_run () from /lib/x86_
No symbol table info available.
#3 0x00007f2ca28a2c1a in ?? () from /lib/x86_
No symbol table info available.
#4 0x00007f2ca263ba41 in ?? () from /lib/x86_
No symbol table info available.
#5 0x00007f2ca233cb43 in start_thread (arg=<optimised out>) at ./nptl/
ret = <optimised out>
pd = <optimised out>
out = <optimised out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140731370603664, -21708493355542
#6 0x00007f2ca23cea00 in clone3 () at ../sysdeps/
No locals.
Thread 3 (Thread 0x7f2c96b47640 (LWP 6691) "gmain"):
#0 0x00007f2ca23c0d7f in __GI___poll (fds=0x559817d0
sc_ret = -516
sc_ret = <optimised out>
#1 0x00007f2ca2661696 in ?? () from /lib/x86_
No symbol table info available.
#2 0x00007f2ca260a3c3 in g_main_
No symbol table info available.
#3 0x00007f2ca260a411 in ?? () from /lib/x86_
No symbol table info available.
#4 0x00007f2ca263ba41 in ?? () from /lib/x86_
No symbol table info available.
#5 0x00007f2ca233cb43 in start_thread (arg=<optimised out>) at ./nptl/
ret = <optimised out>
pd = <optimised out>
out = <optimised out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140731370603376, -21708493355542
#6 0x00007f2ca23cea00 in clone3 () at ../sysdeps/
No locals.
Thread 2 (Thread 0x7f2ca0b4b640 (LWP 6685) "worker"):
#0 __GI___libc_read (nbytes=256, buf=0x7f2ca0b497d0, fd=17) at ../sysdeps/
sc_ret = -512
__arg3 = <optimised out>
_a2 = <optimised out>
sc_ret = <optimised out>
__value = <optimised out>
sc_ret = <optimised out>
__arg1 = <optimised out>
_a3 = <optimised out>
resultvar = <optimised out>
__arg2 = <optimised out>
_a1 = <optimised out>
#1 __GI___libc_read (fd=17, buf=0x7f2ca0b497d0, nbytes=256) at ../sysdeps/
No locals.
#2 0x00007f2ca3034cac in gimp_stack_
No symbol table info available.
#3 0x00005598156b578e in ?? ()
No symbol table info available.
#4 0x00005598156b584e in gimp_fatal_error ()
No symbol table info available.
#5 0x00005598156b58ad in ?? ()
No symbol table info available.
#6 <signal handler called>
No locals.
#7 __pthread_
tid = <optimised out>
ret = 0
pd = 0x7f2ca0b4b640
old_mask = {__val = {94111839547632, 94111723118000, 94111725149856, 321154467866190
ret = <optimised out>
pd = <optimised out>
old_mask = <optimised out>
ret = <optimised out>
tid = <optimised out>
ret = <optimised out>
resultvar = <optimised out>
resultvar = <optimised out>
__arg3 = <optimised out>
__arg2 = <optimised out>
__arg1 = <optimised out>
_a3 = <optimised out>
_a2 = <optimised out>
_a1 = <optimised out>
__futex = <optimised out>
resultvar = <optimised out>
__arg3 = <optimised out>
__arg2 = <optimised out>
__arg1 = <optimised out>
_a3 = <optimised out>
_a2 = <optimised out>
_a1 = <optimised out>
__futex = <optimised out>
__private = <optimised out>
__oldval = <optimised out>
result = <optimised out>
#8 __pthread_
No locals.
#9 __GI___pthread_kill (threadid=
No locals.
#10 0x00007f2ca22ea476 in __GI_raise (sig=sig@entry=6) at ../sysdeps/
ret = <optimised out>
#11 0x00007f2ca22d07f3 in __GI_abort () at ./stdlib/abort.c:79
save_stage = 1
act = {__sigaction_
sigs = {__val = {32, 94111836145504, 0, 256, 188, 139826955288832, 139829505433984, 139829685600382, 0, 139826955288576, 2748779069440, 321154467866190
#12 0x00007f2ca23316f6 in __libc_message (action=
ap = {{gp_offset = 24, fp_offset = 0, overflow_arg_area = 0x7f2ca0b4a6a0, reg_save_area = 0x7f2ca0b4a630}}
fd = <optimised out>
list = <optimised out>
nlist = <optimised out>
cp = <optimised out>
#13 0x00007f2ca2348d7c in malloc_printerr (str=str@
No locals.
#14 0x00007f2ca234905c in munmap_chunk (p=<optimised out>) at ./malloc/
pagesize = <optimised out>
size = <optimised out>
mem = <optimised out>
block = <optimised out>
total_size = <optimised out>
#15 0x00007f2ca234d640 in __GI___libc_free (mem=<optimised out>) at ./malloc/
ar_ptr = <optimised out>
p = <optimised out>
err = 11
ar_ptr = <optimised out>
p = <optimised out>
err = <optimised out>
#16 tcache_
e = <optimised out>
i = <optimised out>
tcache_tmp = 0x7f2c980008e0
i = <optimised out>
tcache_tmp = <optimised out>
e = <optimised out>
#17 __malloc_
a = <optimised out>
#18 0x00007f2ca235024a in __libc_
No locals.
#19 0x00007f2ca233c9cf in start_thread (arg=<optimised out>) at ./nptl/
pd = <optimised out>
out = <optimised out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140731370603536, -21708493355542
#20 0x00007f2ca23cea00 in clone3 () at ../sysdeps/
No locals.
Thread 1 (Thread 0x7f2ca16bfe80 (LWP 6683) "gimp-2.10"):
#0 __futex_
sc_ret = <optimised out>
resultvar = <optimised out>
__arg6 = <optimised out>
__arg5 = <optimised out>
__arg4 = <optimised out>
__arg3 = <optimised out>
__arg2 = <optimised out>
__arg1 = <optimised out>
_a6 = <optimised out>
_a5 = <optimised out>
_a4 = <optimised out>
_a3 = <optimised out>
_a2 = <optimised out>
_a1 = <optimised out>
#1 __futex_
err = <optimised out>
clockbit = 256
op = 265
err = <optimised out>
clockbit = <optimised out>
op = <optimised out>
#2 __GI___
No locals.
#3 0x00007f2ca233e6a4 in __pthread_
ret = <optimised out>
_buffer = {__routine = 0x7f2ca233e550 <cleanup>, __arg = 0x7f2ca0b4bc68, __canceltype = -1569479206, __prev = 0x0}
tid = <optimised out>
pd = 0x7f2ca0b4b640
self = <optimised out>
result = 0
pd_result = <optimised out>
#4 0x00007f2ca263ce0c in g_thread_join () from /lib/x86_
No symbol table info available.
#5 0x00007f2ca2baf3d9 in ?? () from /lib/x86_
No symbol table info available.
#6 0x00007f2ca2bb292e in gegl_exit () from /lib/x86_
No symbol table info available.
#7 0x00005598156b3fec in ?? ()
No symbol table info available.
#8 0x00005598159b0cd7 in gimp_marshal_
No symbol table info available.
#9 0x00007f2ca2705d2f in g_closure_invoke () from /lib/x86_
No symbol table info available.
#10 0x00007f2ca2721d51 in ?? () from /lib/x86_
No symbol table info available.
#11 0x00007f2ca2722f66 in g_signal_
No symbol table info available.
#12 0x00007f2ca27237a3 in g_signal_emit () from /lib/x86_
No symbol table info available.
#13 0x00005598159b5622 in gimp_exit ()
No symbol table info available.
#14 0x00007f2ca2705d2f in g_closure_invoke () from /lib/x86_
No symbol table info available.
#15 0x00007f2ca2721b76 in ?? () from /lib/x86_
No symbol table info available.
#16 0x00007f2ca2723554 in g_signal_
No symbol table info available.
#17 0x00007f2ca27237a3 in g_signal_emit () from /lib/x86_
No symbol table info available.
#18 0x00007f2ca2705d2f in g_closure_invoke () from /lib/x86_
No symbol table info available.
#19 0x00007f2ca2721b76 in ?? () from /lib/x86_
No symbol table info available.
#20 0x00007f2ca2723554 in g_signal_
No symbol table info available.
#21 0x00007f2ca27237a3 in g_signal_emit () from /lib/x86_
No symbol table info available.
#22 0x00007f2ca31f79c6 in ?? () from /lib/x86_
No symbol table info available.
#23 0x00007f2ca2705d2f in g_closure_invoke () from /lib/x86_
No symbol table info available.
#24 0x00007f2ca27217d5 in ?? () from /lib/x86_
No symbol table info available.
#25 0x00007f2ca2723554 in g_signal_
No symbol table info available.
#26 0x00007f2ca27237a3 in g_signal_emit () from /lib/x86_
No symbol table info available.
#27 0x00007f2ca31f81d9 in ?? () from /lib/x86_
No symbol table info available.
#28 0x00007f2ca32a24d7 in ?? () from /lib/x86_
No symbol table info available.
#29 0x00007f2ca2705d2f in g_closure_invoke () from /lib/x86_
No symbol table info available.
#30 0x00007f2ca2721564 in ?? () from /lib/x86_
No symbol table info available.
#31 0x00007f2ca2722f66 in g_signal_
No symbol table info available.
#32 0x00007f2ca27237a3 in g_signal_emit () from /lib/x86_
No symbol table info available.
#33 0x00007f2ca33ce024 in ?? () from /lib/x86_
No symbol table info available.
#34 0x00007f2ca32a0094 in gtk_propagate_event () from /lib/x86_
No symbol table info available.
#35 0x00007f2ca32a16db in gtk_main_do_event () from /lib/x86_
No symbol table info available.
#36 0x00007f2ca310516b in ?? () from /lib/x86_
No symbol table info available.
#37 0x00007f2ca260cd1b in g_main_
No symbol table info available.
#38 0x00007f2ca26616f8 in ?? () from /lib/x86_
No symbol table info available.
#39 0x00007f2ca260c293 in g_main_loop_run () from /lib/x86_
No symbol table info available.
#40 0x00005598156baadc in app_run ()
No symbol table info available.
#41 0x00005598156b0752 in main ()
No symbol table info available.
[Inferior 1 (process 6683) detached]
```
---
ProblemType: Bug
ApportVersion: 2.20.11-0ubuntu82.1
Architecture: amd64
CasperMD5CheckR
CurrentDesktop: ubuntu:GNOME
DistroRelease: Ubuntu 22.04
InstallationDate: Installed on 2021-02-17 (507 days ago)
InstallationMedia: Ubuntu 20.10 "Groovy Gorilla" - Release amd64 (20201022)
Package: gimp 2.10.30-1build1
PackageArchitec
ProcVersionSign
Snap.Changes: no changes found
Tags: jammy wayland-session
Uname: Linux 5.15.0-40-generic x86_64
UpgradeStatus: Upgraded to jammy on 2022-04-27 (73 days ago)
UserGroups: adm cdrom dip lpadmin lxd plugdev sambashare sudo
_MarkForUpload: True
summary: |
- Gimp 2.10.30 gave a crash report when closing it + GIMP crashed with "munmap_chunk(): invalid pointer" in free() |
Thank you for taking the time to report this bug and helping to make Ubuntu better. Please execute the following command only once, as it will automatically gather debugging information, in a terminal:
apport-collect 1981126
When reporting bugs in the future please use apport by using 'ubuntu-bug' and the name of the package affected. You can learn more about this functionality at https:/ /wiki.ubuntu. com/ReportingBu gs.