gnome-terminal crashed with SIGSEGV in g_object_set()

[Dave Gilbert]

Binary package hint: gnome-terminal

Had just tried to open another one and it went pop - not repeatable.

Maybe related, but after todays update gnome doesn't seem to want to do any alt-f style menu accelerators.

Dave

ProblemType: Crash
DistroRelease: Ubuntu 10.10
Package: gnome-terminal 2.30.2-1ubuntu2
ProcVersionSignature: Ubuntu 2.6.35-15.21-generic 2.6.35.1
Uname: Linux 2.6.35-15-generic x86_64
Architecture: amd64
CheckboxSubmission: f2d10bd9f943a85b486a282e7840a570
CheckboxSystem: 0531969bcfd4f03af7405c98dc94a948
Date: Sat Aug 14 18:44:17 2010
ExecutablePath: /usr/bin/gnome-terminal
InstallationMedia: Ubuntu 9.10 "Karmic Koala" - Release amd64 (20091027)
ProcCmdline: gnome-terminal --sm-client-id 108bd5e384d48e3c4b124302062420817800000041440038 --sm-client-state-file /home/username/.config/session-state/gnome-terminal-1261312840.desktop
ProcEnviron:
 PATH=(custom, user)
 LANG=en_GB.utf8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7f580b885e0f <g_object_set+111>: cmpq $0x50,(%rax)
 PC (0x7f580b885e0f) ok
 source "$0x50" ok
 destination "(%rax)" (0x2d20323836303632) not located in a known VMA region (needed writable region)!
SegvReason: writing unknown VMA
Signal: 11
SourcePackage: gnome-terminal
StacktraceTop:
 g_object_set () from /usr/lib/libgobject-2.0.so.0
 ?? () from /usr/lib/libgtk-x11-2.0.so.0
 g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
 ?? () from /usr/lib/libgobject-2.0.so.0
 g_signal_emit_valist ()
Title: gnome-terminal crashed with SIGSEGV in g_object_set()
UserGroups: adm admin cdrom dialout libvirtd lpadmin netdev plugdev sambashare

[Dave Gilbert (ubuntu-treblig)]

The backtrace does contain mention of menu code, so am suspecting there is something more menu relating going on - especially since i noticed when I'm starting the terminal it's taking a noticeable time for the menu to appear and in my .xsession-errors I see:

(gnome-terminal:8818): GLib-GObject-CRITICAL **: g_object_set: assertion `G_IS_OBJECT (object)' failed

(gnome-terminal:8818): GLib-GObject-WARNING **: g_object_set_valist: object class `GtkImageMenuItem' has no property named `ubuntu-local'

(gnome-terminal:8818): GLib-GObject-WARNING **: g_object_set_valist: object class `GtkImageMenuItem' has no property named `ubuntu-local'

(gnome-terminal:8818): GLib-GObject-CRITICAL **: g_object_set: assertion `G_IS_OBJECT (object)' failed

(gnome-terminal:8818): GLib-GObject-CRITICAL **: g_object_set: assertion `G_IS_OBJECT (object)' failed

(gnome-terminal:8818): GLib-GObject-WARNING **: g_object_set_valist: object class `GtkImageMenuItem' has no property named `ubuntu-local'

that entry repeats loads of times.

Dave

[Dave Gilbert (ubuntu-treblig)]

I'm seeing that set of errors on nautilus as well, and it looks like ubuntu-local comes from an ubuntu patch in libgtk so I'm moving the package it is against.

Dave

[Dave Gilbert (ubuntu-treblig)]

the warning errors disappear if I remove the appmenu-gtk package which this machine seems to have installed.

Dave

[Pedro Villavicencio (pedro)]

Thank you taking the time to report this bug and helping to make Ubuntu better. However, processing the crash report to get detailed information for the developers failed as the retracer did not generate a useful symbolic stack trace.
Please try to obtain a backtrace manually following the instructions at http://wiki.ubuntu.com/DebuggingProgramCrash and upload the backtrace (as an attachment) to the bug report. This will greatly help us in tracking down your problem.

[Dave Gilbert (ubuntu-treblig)]

ok, just got this one from gdb - is this enough?
It's triggered reasonably reliably by trying to bring up the menu (alt-e is a good one) in the second or so pause
as it's spewing the ubuntu-local errors to the logs:

Program received signal SIGSEGV, Segmentation fault.
g_type_check_instance_is_a (type_instance=0x1f693c0, iface_type=20)
    at /build/buildd/glib2.0-2.25.13/gobject/gtype.c:3941
3941 /build/buildd/glib2.0-2.25.13/gobject/gtype.c: No such file or directory.
 in /build/buildd/glib2.0-2.25.13/gobject/gtype.c
(gdb) where
#0 g_type_check_instance_is_a (type_instance=0x1f693c0, iface_type=20)
    at /build/buildd/glib2.0-2.25.13/gobject/gtype.c:3941
#1 0x00007f0185943e22 in g_object_set (_object=0x1f693c0,
    first_property_name=0x7f0186b7216a "ubuntu-local")
    at /build/buildd/glib2.0-2.25.13/gobject/gobject.c:1677
#2 0x00007f01869314e4 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#3 0x00007f018593d6ce in g_closure_invoke (closure=0x2133f20,
    return_value=0x0, n_param_values=2, param_values=0x20eef50,
    invocation_hint=0x7fffd44f3170)
    at /build/buildd/glib2.0-2.25.13/gobject/gclosure.c:766
#4 0x00007f0185955f59 in signal_emit_unlocked_R (node=0x1b5bf60,
    detail=<value optimised out>, instance=<value optimised out>,
    emission_return=<value optimised out>,
    instance_and_params=<value optimised out>)
    at /build/buildd/glib2.0-2.25.13/gobject/gsignal.c:3252
#5 0x00007f01859576d6 in g_signal_emit_valist (instance=0x1be81e0,
    signal_id=<value optimised out>, detail=1032, var_args=0x7fffd44f3360)
    at /build/buildd/glib2.0-2.25.13/gobject/gsignal.c:2983
#6 0x00007f0185957f43 in g_signal_emit (instance=0x1f693c0, signal_id=20,
    detail=13368) at /build/buildd/glib2.0-2.25.13/gobject/gsignal.c:3040
#7 0x00007f0185941bb9 in g_object_dispatch_properties_changed (
    object=0x1be81e0, n_pspecs=1, pspecs=<value optimised out>)
    at /build/buildd/glib2.0-2.25.13/gobject/gobject.c:799
---Type <return> to continue, or q <return> to quit---
#8 0x00007f0185940e2c in g_object_notify_queue_thaw (object=0x1be81e0,
    nqueue=<value optimised out>)
    at /build/buildd/glib2.0-2.25.13/gobject/gobjectnotifyqueue.c:132
#9 0x00007f018594399b in g_object_set_valist (object=0x1be81e0,
    first_property_name=0x7f018703dc80 "H\203\354\b\213w\020H\211\372\211\360\203\340\177@\366\306|u%\205\300u,\307B\b", var_args=0x7fffd44f3640)
    at /build/buildd/glib2.0-2.25.13/gobject/gobject.c:1580
#10 0x00007f0185943e84 in g_object_set (_object=0x1be81e0,
    first_property_name=0x7f017b2e4b30 "show-local")
    at /build/buildd/glib2.0-2.25.13/gobject/gobject.c:1680
#11 0x00007f017b2e2d91 in register_application_windows (bridge=0x1be81e0)
    at bridge.c:293
#12 0x00007f017b2e48c9 in rebuild_window_items (bridge=0x1be81e0,
    toplevel=<value optimised out>) at bridge.c:978
#13 0x00007f017b2e49d0 in do_rebuild (data=0x208f1c0) at bridge.c:835
#14 0x00007f018548a49b in g_timeout_dispatch (source=0x25b54e0, callback=0x14,
    user_data=0x3438) at /build/buildd/glib2.0-2.25.13/glib/gmain.c:3555
#15 0x00007f0185489cc2 in g_main_dispatch (context=0x1b7a340)
    at /build/buildd/glib2.0-2.25.13/glib/gmain.c:2119
#16 g_mai...

[Dave Gilbert (ubuntu-treblig)]

OK, I found a core that apport had managed to capture and did a thread apply all bt full on it - just attaching.

[Pedro Villavicencio (pedro)]

Setting this to triaged since the requested information was provided.

[Pedro Villavicencio (pedro)]

Ok this is probably caused by the same patch on bug 609390, marking this as duplicate.