.
Thread 1 (process 3675):
#0  0x005f0422 in __kernel_vsyscall ()
#1  0x004384d1 in *__GI_raise (sig=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
	resultvar = <value optimized out>
	pid = 5644276
	selftid = 3675
#2  0x0043b932 in *__GI_abort () at abort.c:92
	act = {__sigaction_handler = {sa_handler = 0x276, 
    sa_sigaction = 0x276}, sa_mask = {__val = {3215741092, 5311576, 14389860, 
      917504, 134622432, 134535772, 0, 15624, 3215741240, 134524108, 
      134520268, 630, 14390896, 5057185, 630, 134622432, 3215741168, 5644276, 
      22, 3215742624, 3215741284, 5174740, 2, 3215741168, 4, 0, 3, 0, 2, 
      5436287, 5436283, 5431859}}, sa_flags = 5431833, sa_restorer = 0x5306c7}
	sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0x0046ef85 in __libc_message (do_abort=2, 
    fmt=0x5324b0 "*** glibc detected *** %s: %s: 0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:189
	ap = <value optimized out>
	fd = -1079225700
	on_2 = <value optimized out>
	list = <value optimized out>
	nlist = <value optimized out>
	cp = <value optimized out>
	written = false
#4  0x00479091 in malloc_printerr (action=<value optimized out>, 
    str=0x6 <Address 0x6 out of bounds>, ptr=0xa2b0b90) at malloc.c:6217
	buf = "0a2b0b90"
	cp = <value optimized out>
#5  0x0047ab29 in _int_free (av=<value optimized out>, p=0xa2b0a88)
    at malloc.c:4912
	size = 264
	nextchunk = (mchunkptr) 0xe5b
	nextsize = 16
	prevsize = <value optimized out>
	bck = <value optimized out>
	fwd = <value optimized out>
	errstr = <value optimized out>
	__PRETTY_FUNCTION__ = "_int_free"
#6  0x0047d83d in *__GI___libc_free (mem=0xa2b0a90) at malloc.c:3716
	ar_ptr = (mstate) 0x5633a0
	p = (mchunkptr) 0x6
#7  0x002f1ee2 in *INT_cairo_surface_destroy (surface=0xa2b0a90)
    at /build/buildd/cairo-1.8.8/src/cairo-surface.c:440
	__PRETTY_FUNCTION__ = "cairo_surface_destroy"
#8  0x08065aca in destroy_cloned_surface (surface=0xa2b0a90) at util.c:130
	finalref = 1
	__PRETTY_FUNCTION__ = "destroy_cloned_surface"
#9  0x0806857a in tile_destroy (tile=0xa2a6628) at tile.c:123
No locals.
#10 0x08057147 in _refresh_body (self=0xa0383f0) at bubble.c:1151
	priv = (BubblePrivate *) 0xa038408
	d = (Defaults *) 0x9d870b8
	normal = (cairo_surface_t *) 0xa494540
	cr = (cairo_t *) 0x9fc2278
	desc = (PangoFontDescription *) 0xa48fa80
	layout = (PangoLayout *) 0x9d5c1a0
	blur = <value optimized out>
#11 0x08059929 in bubble_recalc_size (self=0xa0383f0) at bubble.c:3418
	new_bubble_height = <value optimized out>
	d = (Defaults *) 0x9d870b8
	priv = <value optimized out>
#12 0x08064321 in stack_notify_handler (self=0x9dc2f00, 
    app_name=0x9ffea90 "emesene", id=0, icon=0x80701a8 "...", 
    summary=0x9ef3ec8 "(R)(S)(8)Cip (fratello di Ciop) Il theinomaneeee!(8)(#)(M)", 
    body=0xa0f4488 "[c=2]http://www.youtube.com/watch?v=i58RatzgwT4&feature=PlayList&p=E27C059F1323E82E&playnext=1&playnext_from=PL&index=16[/c=9]", 
    actions=0xa128f60, hints=0x9df9f50, timeout=-1, context=0xa14bbf0)
    at stack.c:734
	bubble = <value optimized out>
	app_bubble = (Bubble *) 0xa0383f0
	data = (GValue *) 0x9fc4cc0
	pixbuf = <value optimized out>
	new_bubble = 1
	turn_into_dialog = <value optimized out>
#13 0x080631f3 in dbus_glib_marshal_stack_VOID__STRING_UINT_STRING_STRING_STRING_BOXED_BOXED_INT_POINTER (closure=0xbfac5bb0, return_value=0x0, 
    n_param_values=10, param_values=0xa286700, invocation_hint=0x0, 
    marshal_data=0x8064040) at stack-glue.h:100
	data1 = (gpointer) 0x6
	data2 = <value optimized out>
	__PRETTY_FUNCTION__ = "dbus_glib_marshal_stack_VOID__STRING_UINT_STRING_STRING_STRING_BOXED_BOXED_INT_POINTER"
#14 0x008a77a0 in invoke_object_method (object=<value optimized out>, 
    object_info=<value optimized out>, method=0x80706e0, 
    connection=0x9d86ef0, message=0x9d897f8) at dbus-gobject.c:1347
	had_error = <value optimized out>
	send_reply = 1
	gerror = (GError *) 0x0
	value_array = (GValueArray *) 0x9dff560
	return_value = {g_type = 0, data = {{v_int = 0, v_uint = 0, 
      v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
      v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, 
      v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, 
      v_pointer = 0x0}}}
	closure = {ref_count = 0, meta_marshal = 0, n_guards = 0, 
  n_fnotifiers = 0, n_inotifiers = 0, in_inotify = 0, floating = 0, 
  derivative_flag = 0, in_marshal = 0, is_invalid = 0, marshal = 0, 
  data = 0x0, notifiers = 0x0}
	in_signature = 0xa1c73c0 "susssasa{sv}i"
	out_param_values = (GArray *) 0xbfac5b28
	out_param_gvalues = (GValueArray *) 0xf28ff4
	out_param_count = 15896564
	out_param_pos = 16
	out_param_gvalue_pos = 170729700
	result = DBUS_HANDLER_RESULT_HANDLED
	reply = <value optimized out>
	have_retval = 4247540
	retval_signals_error = 5
	retval_is_synthetic = -1079223232
	retval_is_constant = 16
	arg_metadata = <value optimized out>
#15 0x008a7d48 in gobject_message_function (connection=0x9d86ef0, 
    message=0x9d897f8, user_data=0x9dc2f00) at dbus-gobject.c:1497
	pspec = (GParamSpec *) 0x80706e0
	object = (GObject *) 0x9dc2f00
	setter = <value optimized out>
	getter = <value optimized out>
	getall = 0
	s = <value optimized out>
	wincaps_propname = <value optimized out>
	wincaps_propiface = <value optimized out>
	iter = {dummy1 = 0xb7ff0750, dummy2 = 0xbfac5d78, dummy3 = 2887668, 
  dummy4 = 2888408, dummy5 = 165444664, dummy6 = -1079222920, 
  dummy7 = 2801357, dummy8 = 164811552, dummy9 = 30, dummy10 = 165177532, 
  dummy11 = 2791397, pad1 = 165177532, pad2 = 2887668, pad3 = 0xbfac5d98}
	method = (const DBusGMethodInfo *) 0x80706e0
	object_info = (const DBusGObjectInfo *) 0x807050c
	ret = <value optimized out>
#16 0x0029cf33 in _dbus_object_tree_dispatch_and_unlock (tree=0x9d86cf8, 
    message=0x9d897f8) at dbus-object-tree.c:856
	user_data = <value optimized out>
	next = (DBusList *) 0x0
	path = (char **) 0x9dc0d00
	exact_match = 0
	list = (DBusList *) 0x9d868bc
	link = <value optimized out>
	result = <value optimized out>
	subtree = <value optimized out>
#17 0x0028fd0c in dbus_connection_dispatch (connection=0x9d86ef0)
    at dbus-connection.c:4487
	message = <value optimized out>
	link = <value optimized out>
	filter_list_copy = (DBusList *) 0x0
	message_link = (DBusList *) 0x9dc77d8
	result = <value optimized out>
	status = <value optimized out>
	__FUNCTION__ = "dbus_connection_dispatch"
#18 0x008a471d in message_queue_dispatch (source=0x9d86428, callback=0, 
    user_data=0x0) at dbus-gmain.c:101
	connection = (DBusConnection *) 0x9d86ef0
#19 0x00381d78 in IA__g_main_context_dispatch (context=0x9d5b8c0)
    at /build/buildd/glib2.0-2.21.6/glib/gmain.c:1919
No locals.
#20 0x00385620 in g_main_context_iterate (context=0x9d5b8c0, 
    block=<value optimized out>, dispatch=1, self=0x9d2b008)
    at /build/buildd/glib2.0-2.21.6/glib/gmain.c:2541
	got_ownership = <value optimized out>
	max_priority = <value optimized out>
	timeout = <value optimized out>
	some_ready = <value optimized out>
	nfds = <value optimized out>
	allocated_nfds = <value optimized out>
	fds = <value optimized out>
	__PRETTY_FUNCTION__ = "g_main_context_iterate"
#21 0x00385a8f in IA__g_main_loop_run (loop=0x9d8ff00)
    at /build/buildd/glib2.0-2.21.6/glib/gmain.c:2769
	got_ownership = <value optimized out>
	self = (GThread *) 0x9d2b008
	__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#22 0x0107b5e9 in IA__gtk_main ()
    at /build/buildd/gtk+2.0-2.17.10/gtk/gtkmain.c:1205
	tmp_list = (GList *) 0x9dc2f00
	functions = (GList *) 0x0
	init = (GtkInitFunction *) 0x0
	loop = (GMainLoop *) 0x9d8ff00
#23 0x080626ed in main (argc=1, argv=0xbfac61e4) at main.c:77
	defaults = <value optimized out>
	stack = (Stack *) 0x9dc2f00
	observer = <value optimized out>
	connection = <value optimized out>