libwnck-3-0 gnome-panel SIGFPE in wnck_tasklist_size_allocate

[Chris Bainbridge]

Set bottom-panel orientation to "left". Gnome panel will no longer start. Set the orientation to "bottom" and gnome-panel starts ok again.

$ gnome-panel

(gnome-panel:2796): GLib-GObject-WARNING **: /build/buildd/glib2.0-2.29.90/./gobject/gsignal.c:2295: signal `size_request' is invalid for instance `0xc76a20'
Floating point exception (core dumped)

dmesg shows: gnome-panel[2343] trap divide error ip:7ffd3812c8dc sp:7fff765a3e60 error:0 in libwnck-3.so.0.1.0[7ffd3810d000+3c000]

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: gnome-panel 1:3.1.91-0ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-10.16-generic 3.0.4
Uname: Linux 3.0.0-10-generic x86_64
ApportVersion: 1.22.1-0ubuntu2
Architecture: amd64
Date: Mon Sep 12 00:46:21 2011
SourcePackage: gnome-panel
UpgradeStatus: No upgrade log present (probably fresh install)

[Chris Bainbridge (chris-bainbridge)]

$ valgrind gnome-panel

...

(gnome-panel:3827): GLib-GObject-WARNING **: /build/buildd/glib2.0-2.29.90/./gobject/gsignal.c:2295: signal `size_request' is invalid for instance `0x1e185900'
==3827==
==3827== Process terminating with default action of signal 8 (SIGFPE)
==3827== Integer divide by zero at address 0x40BCD3499
==3827== at 0x17C628D2: ??? (in /usr/lib/libwnck-3.so.0.1.0)
==3827== by 0x70881A9: g_closure_invoke (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x709ACD6: ??? (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x70A4B16: g_signal_emit_valist (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x70A4CE1: g_signal_emit (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x573BE56: gtk_widget_size_allocate (in /usr/lib/libgtk-3.so.0.118.0)
==3827== by 0x556F120: ??? (in /usr/lib/libgtk-3.so.0.118.0)
==3827== by 0x17A3C99C: ??? (in /usr/lib/libpanel-applet-4.so.0.0.2)
==3827== by 0x70881A9: g_closure_invoke (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x709ACD6: ??? (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x70A4B16: g_signal_emit_valist (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)
==3827== by 0x70A4CE1: g_signal_emit (in /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0.2990.0)

The backtrace in gdb is bizarre:

$ gdb gnome-panel
GNU gdb (Ubuntu/Linaro 7.3-0ubuntu2) 7.3-2011.08
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://bugs.launchpad.net/gdb-linaro/>...
Reading symbols from /usr/bin/gnome-panel...(no debugging symbols found)...done.
(gdb) r
Starting program: /usr/bin/gnome-panel
[Thread debugging using libthread_db enabled]
[New Thread 0x7fffed50c700 (LWP 3849)]
[New Thread 0x7fffecb02700 (LWP 3850)]

(gnome-panel:3846): GLib-GObject-WARNING **: invalid cast from `PanelToplevel' to `GtkOrientable'

(gnome-panel:3846): Gtk-CRITICAL **: gtk_orientable_get_orientation: assertion `GTK_IS_ORIENTABLE (orientable)' failed
[New Thread 0x7fffe1d5d700 (LWP 3851)]
[New Thread 0x7fffe155c700 (LWP 3852)]
[New Thread 0x7fffe0d5b700 (LWP 3853)]

(gnome-panel:3846): GLib-GObject-WARNING **: /build/buildd/glib2.0-2.29.90/./gobject/gsignal.c:2295: signal `size_request' is invalid for instance `0xb4fa20'

Program received signal SIGFPE, Arithmetic exception.
0x00007fffe25928dc in ?? () from /usr/lib/libwnck-3.so.0
(gdb) bt
#0 0x00007fffe25928dc in ?? () from /usr/lib/libwnck-3.so.0
#1 0x00007ffff594f1aa in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#2 0x00007ffff5961cd7 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#3 0x00007ffff596bb17 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#4 0x00007ffff596bce2 in g_signal_emit () from /usr/lib...

[Chris Bainbridge (chris-bainbridge)]

Again, with gtk and gnome-panel symbols

(gdb) bt
#0 0x00007fffe25928dc in ?? () from /usr/lib/libwnck-3.so.0
#1 0x00007ffff594f1aa in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#2 0x00007ffff5961cd7 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#3 0x00007ffff596bb17 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#4 0x00007ffff596bce2 in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#5 0x00007ffff73c3e57 in gtk_widget_size_allocate (widget=0xa9b500, allocation=<optimized out>)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkwidget.c:4886
#6 0x00007ffff71f7121 in gtk_event_box_size_allocate (widget=0xa9b020, allocation=<optimized out>)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkeventbox.c:585
#7 0x00007fffe27bc99d in panel_applet_size_allocate (widget=0xa9b020, allocation=0x7fffffffb2f0)
    at panel-applet.c:1382
#8 0x00007ffff594f1aa in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#9 0x00007ffff5961cd7 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#10 0x00007ffff596bb17 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#11 0x00007ffff596bce2 in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#12 0x00007ffff73c3e57 in gtk_widget_size_allocate (widget=0xa9b020, allocation=<optimized out>)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkwidget.c:4886
#13 0x00007ffff73f5318 in gtk_plug_size_allocate (allocation=0x7fffffffb850, widget=0x95b220)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkplug.c:1213
#14 gtk_plug_size_allocate (widget=0x95b220, allocation=0x7fffffffb850)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkplug.c:1183
#15 0x00007ffff594f1aa in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#16 0x00007ffff5961cd7 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#17 0x00007ffff596bb17 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#18 0x00007ffff596bce2 in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#19 0x00007ffff73c3e57 in gtk_widget_size_allocate (widget=0x95b220, allocation=<optimized out>)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkwidget.c:4886
#20 0x00007ffff73f8c06 in gtk_socket_size_allocate (widget=0x9080b0, allocation=0x7fffffffbdb0)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtksocket.c:625
#21 0x00007ffff594f1aa in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#22 0x00007ffff5961cd7 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#23 0x00007ffff596bb17 in g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#24 0x00007ffff596bce2 in g_signal_emit () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#25 0x00007ffff73c3e57 in gtk_widget_size_allocate (widget=0x9080b0, allocation=<optimized out>)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkwidget.c:4886
#26 0x00007ffff71f7121 in gtk_event_box_size_allocate (widget=0x873120, allocation=<optimized out>)
    at /build/buildd/gtk+3.0-3.1.18/./gtk/gtkeventbox.c:585
#27 0x00007ffff594f1aa in g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobjec...

[Chris Bainbridge (chris-bainbridge)]

output from gdb bt full

[Chris Bainbridge (chris-bainbridge)]

valgrind crash with dbgsyms.

(gnome-panel:4699): GLib-GObject-WARNING **: invalid cast from `PanelToplevel' to `GtkOrientable'

(gnome-panel:4699): Gtk-CRITICAL **: gtk_orientable_get_orientation: assertion `GTK_IS_ORIENTABLE (orientable)' failed
==4699==
==4699== Process terminating with default action of signal 8 (SIGFPE)
==4699== Integer divide by zero at address 0x40CD9E3E9
==4699== at 0x17C648D2: wnck_tasklist_size_allocate (tasklist.c:1604)
==4699== by 0x708A1A9: g_closure_invoke (gclosure.c:774)
==4699== by 0x709CCD6: signal_emit_unlocked_R (gsignal.c:3202)
==4699== by 0x70A6B16: g_signal_emit_valist (gsignal.c:3003)
==4699== by 0x70A6CE1: g_signal_emit (gsignal.c:3060)
==4699== by 0x573D966: gtk_widget_size_allocate (gtkwidget.c:4886)
==4699== by 0x556F790: gtk_event_box_size_allocate (gtkeventbox.c:585)
==4699== by 0x17A3E99C: panel_applet_size_allocate (panel-applet.c:1382)
==4699== by 0x708A1A9: g_closure_invoke (gclosure.c:774)
==4699== by 0x709CCD6: signal_emit_unlocked_R (gsignal.c:3202)
==4699== by 0x70A6B16: g_signal_emit_valist (gsignal.c:3003)
==4699== by 0x70A6CE1: g_signal_emit (gsignal.c:3060)

[Sebastien Bacher (seb128)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. The issue you are reporting is an upstream one and it would be nice if somebody having it could send the bug to the developers of the software by following the instructions at https://wiki.ubuntu.com/Bugs/Upstream/GNOME. If you have done so, please tell us the number of the upstream bug (or the link), so we can add a bugwatch that will inform us about its status. Thanks in advance.

[Chris Bainbridge (chris-bainbridge)]

Reported upstream but they closed the bug: "Ubuntu/Debian ship with a patch changing this part of the code. Please reopen
if the bug occurs without that patch."

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Richard Hansen (rhansen)]

According to a comment in the linked Debian bug report, this is caused by 03_tasklist_orientation.patch in gnome-panel.