Gnome shell crashes when searching

[Adam Reeve]

If I start searching with the letter "g" then Gnome shell will crash and I have to switch to another tty to kill Xorg and get back to the login screen. I've attached my .xsession-errors file when all I've done is logged in and started searching to reproduce this crash. It looks like the error happens when generating a thumbnail for a search result.

The backtrace section of the file looks like:
*** glibc detected *** /usr/bin/gnome-shell: munmap_chunk(): invalid pointer: 0x00007f757c229240 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x78a96)[0x7f75974a6a96]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(g_string_free+0x4a)[0x7f7597a4f03a]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x23460)[0x7f75713e9460]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x2356a)[0x7f75713e956a]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x236fc)[0x7f75713e96fc]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e003)[0x7f75713e4003]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e493)[0x7f75713e4493]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x2a479)[0x7f75713f0479]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x289b6)[0x7f75713ee9b6]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e45b)[0x7f75713e445b]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e003)[0x7f75713e4003]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e493)[0x7f75713e4493]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e003)[0x7f75713e4003]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e493)[0x7f75713e4493]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e003)[0x7f75713e4003]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e384)[0x7f75713e4384]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(+0x1e003)[0x7f75713e4003]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(rsvg_handle_render_cairo_sub+0xe8)[0x7f75713f0108]
/usr/lib/x86_64-linux-gnu/librsvg-2.so.2(rsvg_handle_get_pixbuf_sub+0xc1)[0x7f75713f05a1]
/usr/lib/x86_64-linux-gnu/gdk-pixbuf-2.0//2.10.0/loaders/libpixbufloader-svg.so(+0xd2b)[0x7f75715fcd2b]
/usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0(gdk_pixbuf_loader_close+0x101)[0x7f75930eb0f1]
/usr/lib/libgnome-desktop-3.so.2(+0xc02a)[0x7f7593ba602a]
/usr/lib/libgnome-desktop-3.so.2(gnome_desktop_thumbnail_factory_generate_thumbnail+0x18c)[0x7f7593ba666c]
/usr/lib/gnome-shell/libgnome-shell.so(+0x58274)[0x7f75998e6274]
/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0(+0x67afc)[0x7f7593365afc]
/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0(+0x593f6)[0x7f75933573f6]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x6c7d8)[0x7f7597a567d8]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x6a2b6)[0x7f7597a542b6]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x7efc)[0x7f75977d4efc]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x6d)[0x7f759750f89d]

[Adam Reeve (adreeve)]

I've found I get a very similar error that causes Nautilus to crash if I try to view a folder containing SVG images I created in Inkscape, and I guess these are what gnome-shell is trying to create a thumbnail for. The same error also occurs viewing the images with eog. These images have a linked jpeg image in them and some text that is used as a mask. I've attached an example, but for the crash to occur the linked jpeg file has to exist so would need replacing with a correct path to reproduce this.

[Adam Reeve (adreeve)]

I've reported this upstream: https://bugzilla.gnome.org/show_bug.cgi?id=666756

[Sebastien Bacher (seb128)]

Thank you for your bug report, if the issue is fixed in git we should either look at updating or at backporting the fix if we don't update this cycle

[Sebastien Bacher (seb128)]

the issue is fixed in the current version