Unity8 crashes in std::string::_Rep::_S_empty_rep_storage() from mir::client::rpc::MirProtobufRpcChannel::on_data_available()

Bug #1579957 reported by errors.ubuntu.com bug bridge
24
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical System Image
Invalid
High
Unassigned
Mir
Expired
High
Unassigned
mir (Ubuntu)
Expired
High
Unassigned
unity8 (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

The Ubuntu Error Tracker has been receiving reports about a problem regarding unity8. This problem was most recently seen with version 8.12+15.04.20160504.2-0ubuntu1, the problem page at https://errors.ubuntu.com/problem/2c3cad3ba17d755e656dc7db06c77e7854c117b8 contains more details.

Tags: vivid
Revision history for this message
Albert Astals Cid (aacid) wrote :

The bracktrace seems quite deep in mir.

Changed in unity8 (Ubuntu):
status: New → Incomplete
Revision history for this message
Daniel van Vugt (vanvugt) wrote : Re: /usr/bin/unity8 crashes in std::string::_Rep::_S_empty_rep_storage() from mir::client::rpc::MirProtobufRpcChannel::on_data_available()

It appears the crash started happening on phones in Mir 0.21, which actually isn't in the stable channel yet. So expect this bug to explode after OTA-11 goes out...

No idea why it would crash though:

template <typename ProtobufType>
auto make_protobuf_object()
{
    return std::unique_ptr<ProtobufType>{ProtobufType::default_instance().New()};
}

Perhaps another manifestation of the Unity8 heap corruption bug 1535297?

summary: - /usr/bin/unity8:11:std::string::_Rep::_S_empty_rep_storage:mir::client::make_protobuf_object:mir::client::rpc::MirProtobufRpcChannel::on_data_available:operator:_M_invoke
+ /usr/bin/unity8 crashes in std::string::_Rep::_S_empty_rep_storage()
+ from mir::client::rpc::MirProtobufRpcChannel::on_data_available()
Changed in mir:
importance: Undecided → High
Changed in mir (Ubuntu):
importance: Undecided → High
summary: - /usr/bin/unity8 crashes in std::string::_Rep::_S_empty_rep_storage()
- from mir::client::rpc::MirProtobufRpcChannel::on_data_available()
+ Unity8 crashes in std::string::_Rep::_S_empty_rep_storage() from
+ mir::client::rpc::MirProtobufRpcChannel::on_data_available()
Changed in canonical-devices-system-image:
status: New → Confirmed
importance: Undecided → Medium
importance: Medium → High
Changed in canonical-devices-system-image:
milestone: none → 12
Changed in canonical-devices-system-image:
assignee: nobody → Stephen M. Webb (bregma)
milestone: 12 → 13
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

errors.ubuntu.com shows the bug either stopped happening on 31 May (just before OTA-11) or we stopped collecting data (?)

Changed in mir:
status: New → Incomplete
Changed in mir (Ubuntu):
status: New → Incomplete
Changed in canonical-devices-system-image:
milestone: 13 → backlog
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

No offense... but this needs to be unassigned in order for the automatic expiration period to begin.

Changed in canonical-devices-system-image:
assignee: Stephen M. Webb (bregma) → nobody
milestone: backlog → none
status: Confirmed → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for Mir because there has been no activity for 60 days.]

Changed in mir:
status: Incomplete → Expired
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for unity8 (Ubuntu) because there has been no activity for 60 days.]

Changed in unity8 (Ubuntu):
status: Incomplete → Expired
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for mir (Ubuntu) because there has been no activity for 60 days.]

Changed in mir (Ubuntu):
status: Incomplete → Expired
Revision history for this message
Daniel van Vugt (vanvugt) wrote :

No reports of this since 15.04

Changed in canonical-devices-system-image:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.