nautilus crashed with SIGSEGV in g_type_check_instance()

[Andrea Azzarone]

Nautilus crashed when I closed the 'Trash' window.

TEST CASE:
1. Click on the Trash Icon on the launcher.
2. Close the trash window that just opened.

ACTUAL RESULT:
This crash.

EXPECTED RESULT:
Trash closes without crashing.

ProblemType: Crash
DistroRelease: Ubuntu 13.10
Package: nautilus 1:3.6.3-0ubuntu18
ProcVersionSignature: Ubuntu 3.9.0-4.9-generic 3.9.4
Uname: Linux 3.9.0-4-generic x86_64
ApportVersion: 2.10.2-0ubuntu1
Architecture: amd64
Date: Mon Jun 17 18:59:50 2013
ExecutablePath: /usr/bin/nautilus
ExecutableTimestamp: 1370884687
GsettingsChanges:
 b'org.gnome.nautilus.window-state' b'geometry' b"'1123x852+65+24'"
 b'org.gnome.nautilus.window-state' b'sidebar-width' b'175'
InstallationDate: Installed on 2013-01-05 (163 days ago)
InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release amd64 (20121017.5)
MarkForUpload: True
ProcCmdline: nautilus trash:///
ProcCwd: /home/andrea
ProcEnviron:
 LANGUAGE=en_US:en
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7f8c55d9f7b9 <g_type_check_instance+25>: mov (%rax),%rdi
 PC (0x7f8c55d9f7b9) ok
 source "(%rax)" (0xaaaaaaaaaaaaaaaa) not located in a known VMA region (needed readable region)!
 destination "%rdi" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: nautilus
StacktraceTop:
 g_type_check_instance (type_instance=type_instance@entry=0xf40370) at /build/buildd/glib2.0-2.37.1/./gobject/gtype.c:4082
 g_signal_handler_disconnect (instance=0xf40370, handler_id=2327) at /build/buildd/glib2.0-2.37.1/./gobject/gsignal.c:2580
 nautilus_trash_bar_dispose (obj=0xee46a0) at nautilus-trash-bar.c:109
 g_object_run_dispose (object=0xee46a0) at /build/buildd/glib2.0-2.37.1/./gobject/gobject.c:1062
 ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
Title: nautilus crashed with SIGSEGV in g_type_check_instance()
UpgradeStatus: Upgraded to saucy on 2013-05-28 (20 days ago)
UserGroups: adm autopilot cdrom dip lpadmin plugdev sambashare sudo
usr_lib_nautilus:
 brasero 3.8.0-1ubuntu2
 evince 3.8.2-0ubuntu4
 file-roller 3.8.2-0ubuntu1
 totem 3.8.2-0ubuntu1
 ubuntuone-client-gnome 4.2.0-0ubuntu1

[Apport retracing service (apport)]

This crash has the same stack trace characteristics as bug #1182307. However, the latter was already fixed in an earlier package version than the one in this report. This might be a regression or because the problem is in a dependent package.

[Apport retracing service (apport)]

StacktraceTop:
 g_type_check_instance (type_instance=type_instance@entry=0xf40370) at /build/buildd/glib2.0-2.37.1/./gobject/gtype.c:4082
 g_signal_handler_disconnect (instance=0xf40370, handler_id=2327) at /build/buildd/glib2.0-2.37.1/./gobject/gsignal.c:2580
 nautilus_trash_bar_dispose (obj=0xee46a0) at nautilus-trash-bar.c:109
 g_object_run_dispose (object=0xee46a0) at /build/buildd/glib2.0-2.37.1/./gobject/gobject.c:1062
 gtk_box_forall (container=<optimized out>, include_internals=<optimized out>, callback=0x7f8c58556550 <gtk_widget_destroy>, callback_data=0x0) at /build/buildd/gtk+3.0-3.8.2/./gtk/gtkbox.c:1865

[Andrea Azzarone (azzar1)]

Patch updated.

[Ubuntu Foundations Team Bug Bot (crichton)]

The attachment "0001-trash-bar-fix-segfault" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

[Iain Lane (laney)]

Thanks for the patch! I modified it a bit to avoid getting the warning about an invalid disconnect and sent it upstream. Will mark this bug as a duplicate of the other one.