rhythmbox crashes during drag n drop of mp3 to iPod

Bug #476167 reported by grommithockey on 2009-11-06
26
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Rhythmbox
Fix Released
Critical
rhythmbox (Ubuntu)
Medium
Ubuntu Desktop Bugs

Bug Description

Binary package hint: rhythmbox

Not all mp3 files cause this crash. It may be related to characters in the file name.

ProblemType: Crash
Architecture: i386
AssertionMessage: *** glibc detected *** rhythmbox: double free or corruption (out): 0x08c58468 ***
CrashCounter: 1
Date: Thu Nov 5 16:14:41 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/rhythmbox
Package: rhythmbox 0.12.5-0ubuntu4
ProcCmdline: rhythmbox /media/MARK'S\ IPOD
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-14.48-generic
Signal: 6
SourcePackage: rhythmbox
StacktraceTop:
 __kernel_vsyscall ()
 *__GI_raise (sig=6)
 *__GI_abort () at abort.c:92
 __libc_message (do_abort=2,
 malloc_printerr (action=<value optimized out>,
Title: rhythmbox assert failure: *** glibc detected *** rhythmbox: double free or corruption (out): 0x08c58468 ***
Uname: Linux 2.6.31-14-generic i686
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

Related branches

StacktraceTop:__kernel_vsyscall ()
*__GI_raise (sig=6)
*__GI_abort () at abort.c:92
__libc_message (do_abort=2,
malloc_printerr (action=<value optimized out>,

Changed in rhythmbox (Ubuntu):
importance: Undecided → Medium
tags: removed: need-i386-retrace

It looks like this has to do with the underlying name of the mp3. One mp3 file that was causing this crash was given this name via my podcatcher (hpodder):
podcast.mp3_e_id=CA6152EF-CF75-283F-B143EBB231A94818_ref=p_itune

After renaming this file to podcast.mp3, drag n drop to my iPod doesn't cause the crash.

Pedro Villavicencio (pedro) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please try to obtain a valgrind log following the instructions at https://wiki.ubuntu.com/Valgrind and attach the file to the bug report. This will greatly help us in tracking down your problem.

Changed in rhythmbox (Ubuntu):
assignee: nobody → Ubuntu Desktop Bugs (desktop-bugs)
status: New → Incomplete
visibility: private → public

I tried obtaining a log of the Rhythmbox crash using Valgrind. Unfortunately, it doesn't crash in this instance.

Here is what I did:
1. Start up Rhythmbox normally.
2. Try to drag and drop the mp3 file podcast.mp3_e_id=D96478F1-BF52-2EB9-60FD39D9861003DC_ref=p_itune to my iPod. Rhythmbox crashes.
3. Start up Rhythmbox again under Valgrind, using the following command: G_SLICE=always-malloc G_DEBUG=gc-friendly valgrind -v --tool=memcheck --leak-check=full --num-callers=40 --log-file=valgrind.log /usr/bin/rhythmbox
4. Try to drag and drop the same mp3 file to my iPod. Mp3 file is transferred successfully.
5. Repeating each of the above processes again obtains the same results.

I'm will attach the valgrind.log anyway, in case it is of any use.

Sebastien Bacher (seb128) wrote :

could you install debug packages for glib gtk rhythmbox and get a new log?

I've installed the following debug packages:
libgtk2.0-0-dbg
libglib2.0-0-dbg
rhythmbox-dbg

I confirmed again that Rhythmbox crashes when doing a drag and drop of the previous file.

However, when I do the same when running Rhythmbox under Valgrind, the transfer is successful, no crash.

I'm attaching the Valgrind log.

Sebastien Bacher (seb128) wrote :

The log has some errors listed:

==3065== Invalid write of size 1
==3065== at 0xA0F8E4A: impl_build_dest_uri (rb-ipod-source.c:1381)
==3065== by 0x409B344: rb_removable_media_source_build_dest_uri (rb-removable-media-source.c:602)
==3065== by 0x409C1B9: impl_paste (rb-removable-media-source.c:399)
==3065== by 0x40ACE1A: rb_source_paste (rb-source.c:1117)
==3065== by 0x409BF0E: impl_receive_drag (rb-removable-media-source.c:584)
==3065== by 0x40AD022: rb_source_receive_drag (rb-source.c:1410)

Changed in rhythmbox (Ubuntu):
status: Incomplete → New

The errors in bug https://bugzilla.gnome.org/show_bug.cgi?id=594162 are similar. Linking the bug here.

Changed in rhythmbox:
importance: Undecided → Unknown
status: New → Unknown
Changed in rhythmbox (Ubuntu):
status: New → Triaged

Upstream commented that this bug is actually different, so I opened a new one. You can track it and make comment here: https://bugzilla.gnome.org/show_bug.cgi?id=603261.

Changed in rhythmbox (Ubuntu):
status: Triaged → Fix Committed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package rhythmbox - 0.12.7-0ubuntu6

---------------
rhythmbox (0.12.7-0ubuntu6) lucid; urgency=low

  * debian/rhythmbox.manpages, debian/rhythmbox.1, debian/rhythmbox-client.1:
    - don't install those in the debian directory since they are upstream too
  * debian/patches/91_git_mtp_schemas.patch:
    - git change to define the mtp options schemas so it's actived and working
  * debian/patches/92_git_stop_playback_on_delete.patch:
    - git change to fix a crasher on source change (lp: #148361)
  * debian/patches/93_git_ipod_crasher.patch:
    - git change to fix a crasher when some filenames are copied to ipods
      (lp: #476167)
  * debian/patches/94_git_no_entry_view_crasher.patch:
    - git change to fix a crasher happening sometime when going to
      the playing song (lp: #507608)
  * debian/patches/95_git_correctly_update_names.patch:
    - git change to update sort and display names in correct order (lp: #532538)
  * debian/patches/96_git_subsequent_commits.patch:
    - git change to fix another crasher (lp: #429030)
  * debian/patches/97_git_stop_podcast_download_no_error.patch:
    - git change, don't handle podcast download stop as an error

  [ Ken VanDine ]
  * debian/patches/82_rhythmbox-indicators.patch
    - update from Jan Arne Petersen to remove some work arounds
      that were needed prior to libappindicator 0.0.16
 -- Sebastien Bacher <email address hidden> Fri, 19 Mar 2010 00:29:49 +0100

Changed in rhythmbox (Ubuntu):
status: Fix Committed → Fix Released
Changed in rhythmbox:
importance: Unknown → Critical
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.