Segfault in gtk_container_get_resize_container

[karl anliot]

pcman package :Version: 0.9.10-0ubuntu1
1. running precise, inserted a cd
2. ejected it by right clicking on the mounted cd in the places window

stacktrace:

(gdb) ba
#0 gtk_container_get_resize_container (container=<optimized out>) at /build/buildd/gtk+2.0-2.24.10/gtk/gtkcontainer.c:1350
#1 _gtk_container_queue_resize (container=0x6ee6e0) at /build/buildd/gtk+2.0-2.24.10/gtk/gtkcontainer.c:1394
#2 0x00007ffff73cb49d in queue_resize_on_widget (widget=0x9ac110, check_siblings=<optimized out>) at /build/buildd/gtk+2.0-2.24.10/gtk/gtksizegroup.c:203
#3 0x00007ffff74531a1 in gtk_tree_view_row_deleted (model=<optimized out>, path=<optimized out>, data=0x9ac110) at /build/buildd/gtk+2.0-2.24.10/gtk/gtktreeview.c:8688
#4 0x00007ffff608f364 in g_closure_invoke (closure=0x9f42b0, return_value=0x0, n_param_values=2, param_values=0x8830c0, invocation_hint=<optimized out>)
    at /build/buildd/glib2.0-2.31.16/./gobject/gclosure.c:774
#5 0x00007ffff609f615 in signal_emit_unlocked_R (node=<optimized out>, detail=0, instance=<optimized out>, emission_return=0x0, instance_and_params=0x8830c0)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3302
#6 0x00007ffff60a6feb in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=0x7fffffffdb28) at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3033
#7 0x00007ffff60a71b2 in g_signal_emit (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>) at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3090
#8 0x00007ffff735811d in IA__gtk_list_store_remove (list_store=0x96ab50, iter=0x7fffffffdc40) at /build/buildd/gtk+2.0-2.24.10/gtk/gtkliststore.c:976
#9 0x00007ffff7888c9f in ?? () from /usr/lib/libfm-gtk.so.1
#10 0x00007ffff608f364 in g_closure_invoke (closure=0x86aed0, return_value=0x0, n_param_values=2, param_values=0x9342d0, invocation_hint=<optimized out>)
    at /build/buildd/glib2.0-2.31.16/./gobject/gclosure.c:774
#11 0x00007ffff609f615 in signal_emit_unlocked_R (node=<optimized out>, detail=0, instance=<optimized out>, emission_return=0x0, instance_and_params=0x9342d0)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3302
#12 0x00007ffff60a6feb in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=0x7fffffffdfc8) at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3033
#13 0x00007ffff60a76c4 in g_signal_emit_by_name (instance=0x6b3c00, detailed_signal=<optimized out>) at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3127
#14 0x00007ffff608f364 in g_closure_invoke (closure=0x87b490, return_value=0x0, n_param_values=2, param_values=0x861900, invocation_hint=<optimized out>)
    at /build/buildd/glib2.0-2.31.16/./gobject/gclosure.c:774
#15 0x00007ffff609f615 in signal_emit_unlocked_R (node=<optimized out>, detail=0, instance=<optimized out>, emission_return=0x0, instance_and_params=0x861900)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3302
#16 0x00007ffff60a6feb in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=0x7fffffffe468) at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3033
#17 0x00007ffff60a76c4 in g_signal_emit_by_name (instance=0x840e80, detailed_signal=<optimized out>) at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3127
#18 0x00007fffee93d67b in ?? () from /usr/lib/x86_64-linux-gnu/gio/modules/libgioremote-volume-monitor.so
#19 0x00007ffff5dd4b2a in g_main_dispatch (context=0x6625d0) at /build/buildd/glib2.0-2.31.16/./glib/gmain.c:2510
#20 g_main_context_dispatch (context=0x6625d0) at /build/buildd/glib2.0-2.31.16/./glib/gmain.c:3047
#21 0x00007ffff5dd4ef0 in g_main_context_iterate (dispatch=1, block=<optimized out>, context=0x6625d0, self=<optimized out>) at /build/buildd/glib2.0-2.31.16/./glib/gmain.c:3118
#22 g_main_context_iterate (context=0x6625d0, block=<optimized out>, dispatch=1, self=<optimized out>) at /build/buildd/glib2.0-2.31.16/./glib/gmain.c:3055
#23 0x00007ffff5dd52ea in g_main_loop_run (loop=0x6f4ac0) at /build/buildd/glib2.0-2.31.16/./glib/gmain.c:3312
#24 0x00007ffff735a437 in IA__gtk_main () at /build/buildd/gtk+2.0-2.24.10/gtk/gtkmain.c:1329
#25 0x000000000040de39 in main (argc=1, argv=0x7fffffffe828) at pcmanfm.c:199

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Axel FILMORE (axel-filmore)]

Same for me, it crashed here :
#12 0x0028c996 in on_vol_removed (vm=0x80ffc30, vol=0x831ecb0, user_data=0x837c070) at gtk/fm-places-model.c:214

on_vol_removed in gtk/fm-places-model.c line 214 :

void on_vol_removed(GVolumeMonitor* vm, GVolume* vol, gpointer user_data)
{
    FmPlacesModel* model = FM_PLACES_MODEL(user_data);
    FmPlaceItem* item;
    GtkTreeIter it;
    item = find_vol(model, vol, &it);
    /* g_debug("remove vol: %p, uuid: %s, udi: %s", vol, g_volume_get_identifier(vol, "uuid"), g_volume_get_identifier(vol, "hal-udi")); */
    if(item)
    {
        gtk_list_store_remove(GTK_LIST_STORE(model), &it);
        ^^^^^^^^^^^^^^^^^^
        place_item_free(item);
        update_sep_tp(model);
    }
}

Program received signal SIGSEGV, Segmentation fault.
0x003562b0 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
(gdb) bt
#0 0x003562b0 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#1 0x0045f81d in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#2 0x0045fb1e in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#3 0x00524bbb in gtk_widget_queue_resize () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#4 0x004f62e6 in ?? () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#5 0x00a9009a in g_cclosure_marshal_VOID__BOXED () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#6 0x00a8df8c in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#7 0x00a9f845 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#8 0x00aa70c2 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#9 0x00aa7253 in g_signal_emit () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#10 0x004dc21a in gtk_tree_model_row_deleted () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#11 0x003df557 in gtk_list_store_remove () from /usr/lib/i386-linux-gnu/libgtk-x11-2.0.so.0
#12 0x0028c996 in on_vol_removed (vm=0x80ffc30, vol=0x831ecb0, user_data=0x837c070) at gtk/fm-places-model.c:214
#13 0x00a9023a in g_cclosure_marshal_VOID__OBJECT () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#14 0x00a8df8c in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#15 0x00a9f845 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#16 0x00aa70c2 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#17 0x00aa76af in g_signal_emit_by_name () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#18 0x009a4ccd in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
#19 0x00a9023a in g_cclosure_marshal_VOID__OBJECT () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#20 0x00a8df8c in g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#21 0x00a9f845 in ?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
#22 0x00aa70c2 in g_signal_emit_valist () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0