nautilus crashed with SIGSEGV in g_str_hash()

[Wong Yong Jie]

Binary package hint: nautilus

1) Ubuntu version: 10.10 (Desktop) 64-bit

2) Package version:
- nautilus 1:2.32.0-0ubuntu1.3 (amd64)
- ubuntuone-client 1:4.6-0ubuntu2 (amd64)

3) How to reproduce:
- Create a SSH mount by using the File -> Connect to Server menu option.
- Browse to a directory with files in the SSH mount.
- Open a new tab in Nautilus. Browse to a local directory (i.e. /home/username).
- Create a file in the local directory with the same name as any file found in the SSH mount.
- Replace the file in the SSH mount with the newly created file (either by dragging or using keyboard shortcuts). Confirm the overwrite.
- Switch to the tab containing the SSH mount.
- Press the "Up one directory" button.
- Nautilus crashes.

4) What should happen: Nautilus should not crash and goes up one directory in the SSH mount.

5) Full backtrace: (Edited - found debugging symbols)
Program received signal SIGSEGV, Segmentation fault.
g_str_hash (v=0x0) at /build/buildd/glib2.0-2.26.1/glib/gstring.c:134
134 /build/buildd/glib2.0-2.26.1/glib/gstring.c: No such file or directory.
 in /build/buildd/glib2.0-2.26.1/glib/gstring.c
(gdb) bt full
#0 g_str_hash (v=0x0) at /build/buildd/glib2.0-2.26.1/glib/gstring.c:134
        p = 0x7f2db81f1550 "The URI '%s' is not an absolute URI using the \"file\" scheme"
        h = <value optimized out>
#1 0x00007f2db819935d in g_hash_table_lookup_node (hash_table=0x1add9e0,
    key=0x0) at /build/buildd/glib2.0-2.26.1/glib/ghash.c:312
        node = <value optimized out>
        hash_value = <value optimized out>
        step = <value optimized out>
#2 g_hash_table_lookup (hash_table=0x1add9e0, key=0x0)
    at /build/buildd/glib2.0-2.26.1/glib/ghash.c:901
        node = <value optimized out>
        node_index = <value optimized out>
        __PRETTY_FUNCTION__ = "g_hash_table_lookup"
#3 0x00007f2da4337545 in ubuntuone_nautilus_observed_file_unref (
    user_data=<value optimized out>,
    where_the_object_was=<value optimized out>) at ubuntuone-nautilus.c:145
No locals.
#4 0x00007f2db8a9e3e0 in weak_refs_notify (data=<value optimized out>)
    at /build/buildd/glib2.0-2.26.1/gobject/gobject.c:2209
        wstack = 0x7f2da8041e90
        i = 1
#5 0x00007f2db819124e in g_data_set_internal (datalist=0x7f2dbaa3ec70,
    key_id=54, data=0x0, destroy_func=0)
    at /build/buildd/glib2.0-2.26.1/glib/gdataset.c:351
        list = 0x1ee7b80
#6 g_datalist_id_set_data_full (datalist=0x7f2dbaa3ec70, key_id=54, data=0x0,
    destroy_func=0) at /build/buildd/glib2.0-2.26.1/glib/gdataset.c:598
        __PRETTY_FUNCTION__ = "g_datalist_id_set_data_full"
#7 0x00007f2db8a9ed8a in g_object_unref (_object=<value optimized out>)
    at /build/buildd/glib2.0-2.26.1/gobject/gobject.c:2675
        object = 0x1f9e630
        old_ref = 1
        __PRETTY_FUNCTION__ = "g_object_unref"
#8 0x00007f2db81a5b6c in g_list_foreach (list=<value optimized out>,
    func=0x4d6120 <nautilus_file_unref>, user_data=0x0)
    at /build/buildd/glib2.0-2.26.1/glib/glist.c:919
        next = 0x0
#9 0x00000000004cdcf9 in nautilus_file_list_free (list=0x0)
    at nautilus-file.c:7684
No locals.
#10 0x000000000046f675 in extension_action_callback_data_free (data=0x1e9e630)
    at fm-directory-view.c:4698
No locals.
#11 0x00007f2db8a9c5ab in closure_invoke_notifiers (closure=0x250a480)
    at /build/buildd/glib2.0-2.26.1/gobject/gclosure.c:253
        ndata = 0x211ce20
#12 g_closure_unref (closure=0x250a480)
    at /build/buildd/glib2.0-2.26.1/gobject/gclosure.c:594
        __PRETTY_FUNCTION__ = "g_closure_unref"
#13 0x00007f2db8ab1fdd in handler_unref_R (instance=<value optimized out>)
    at /build/buildd/glib2.0-2.26.1/gobject/gsignal.c:637
        hlist = <value optimized out>
#14 g_signal_handlers_destroy (instance=<value optimized out>)
    at /build/buildd/glib2.0-2.26.1/gobject/gsignal.c:2455
        handler = 0x1e89af0
        i = 1
        hlbsa = <value optimized out>
        __PRETTY_FUNCTION__ = "g_signal_handlers_destroy"
#15 0x00007f2db8a9eb0d in g_object_real_dispose (object=0x0)
    at /build/buildd/glib2.0-2.26.1/gobject/gobject.c:887
No locals.
#16 0x00007f2db8a9ed8a in g_object_unref (_object=<value optimized out>)
    at /build/buildd/glib2.0-2.26.1/gobject/gobject.c:2675
        object = 0x1dc5600
        old_ref = 1
        __PRETTY_FUNCTION__ = "g_object_unref"
#17 0x00007f2db9e1db5d in free_node (node=<value optimized out>)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:1126
        info = 0x1ef5d00
#18 0x00007f2db9e1e28e in update_node (self=0x1b9f8f0, node=0x2195350,
    in_popup=1, popup_accels=0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:2807
        child = 0x0
        action = <value optimized out>
        action_name = 0x7f2da8009700 "Restore From Trash"
        __PRETTY_FUNCTION__ = "update_node"
#19 0x00007f2db9e1e205 in update_node (self=0x1b9f8f0, node=0x250f180,
    in_popup=1, popup_accels=0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:2785
        child = 0x0
        action = <value optimized out>
        action_name = 0x0
        __PRETTY_FUNCTION__ = "update_node"
#20 0x00007f2db9e1e205 in update_node (self=0x1b9f8f0, node=0x2536670,
    in_popup=1, popup_accels=0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:2785
        child = 0x20ea090
        action = <value optimized out>
        action_name = 0x0
        __PRETTY_FUNCTION__ = "update_node"
#21 0x00007f2db9e1e205 in update_node (self=0x1b9f8f0, node=0x2344b80,
    in_popup=0, popup_accels=0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:2785
        child = 0x24b0ad0
        action = <value optimized out>
        action_name = 0x0
        __PRETTY_FUNCTION__ = "update_node"
#22 0x00007f2db9e1f181 in do_updates (self=0x1b9f8f0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:2827
No locals.
#23 IA__gtk_ui_manager_ensure_update (self=0x1b9f8f0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:2882
No locals.
#24 0x00007f2db9e21b99 in gtk_ui_manager_real_get_widget (self=0x0, path=0x0)
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkuimanager.c:558
        node = 0x7f2db81f1550
#25 0x00000000004444a4 in refresh_go_menu (data=<value optimized out>)
    at nautilus-navigation-window-menus.c:453
        ui_manager = <value optimized out>
        node = <value optimized out>
        menuitem = <value optimized out>
        index = <value optimized out>
#26 refresh_go_menu_idle_callback (data=<value optimized out>)
    at nautilus-navigation-window-menus.c:483
        __PRETTY_FUNCTION__ = "refresh_go_menu_idle_callback"
#27 0x00007f2db81a8342 in g_main_dispatch (context=0x19f81d0)
    at /build/buildd/glib2.0-2.26.1/glib/gmain.c:2149
        dispatch = 0x7f2db81a6380 <g_idle_dispatch>
        user_data = 0x1dc22a0
        callback = 0x444330 <refresh_go_menu_idle_callback>
        cb_funcs = 0x7f2db8448610
        cb_data = 0x1f5e540
        current_source_link = {data = 0x1eeaee0, next = 0x0}
        source = 0x1eeaee0
        current = 0x1a5ab90
        i = 0
#28 g_main_context_dispatch (context=0x19f81d0)
    at /build/buildd/glib2.0-2.26.1/glib/gmain.c:2702
No locals.
#29 0x00007f2db81ac2a8 in g_main_context_iterate (context=0x19f81d0,
    block=<value optimized out>, dispatch=<value optimized out>,
    self=<value optimized out>)
    at /build/buildd/glib2.0-2.26.1/glib/gmain.c:2780
        max_priority = 200
        timeout = 0
        some_ready = 1
        nfds = 18
        allocated_nfds = -1206152816
        fds = <value optimized out>
        __PRETTY_FUNCTION__ = "g_main_context_iterate"
#30 0x00007f2db81ac7b5 in g_main_loop_run (loop=0x1ceb420)
    at /build/buildd/glib2.0-2.26.1/glib/gmain.c:2988
        self = 0x19c1010
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#31 0x00007f2db9d083e7 in IA__gtk_main ()
    at /build/buildd/gtk+2.0-2.22.0/gtk/gtkmain.c:1237
        tmp_list = 0x1a51990
        functions = 0x0
        init = 0x0
        loop = <value optimized out>
#32 0x0000000000441d42 in main (argc=1, argv=0x7fffb62ac5b8)
    at nautilus-main.c:544
        kill_shell = 0
        no_default_window = 1
        browser_window = 0
        no_desktop = 0
        version = 0
        autostart_mode = 1
        autostart_id = <value optimized out>
        geometry = 0x0
        remaining = 0x0
        perform_self_check = 0
        application = <value optimized out>
        context = <value optimized out>
        file = 0x1
        uri = <value optimized out>
        uris = 0x0
        uris_array = <value optimized out>
        error = 0x0
        options = {{long_name = 0x553463 "check", short_name = 99 'c',
            flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fffb62ac4a8,
            description = 0x5534a8 "Perform a quick set of self-check tests.",
            arg_description = 0x0}, {long_name = 0x573e99 "version",
            short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE,
            arg_data = 0x7fffb62ac4ac,
            description = 0x5534d8 "Show the version of the program.",
            arg_description = 0x0}, {long_name = 0x55759c "geometry",
            short_name = 103 'g', flags = 0, arg = G_OPTION_ARG_STRING,
            arg_data = 0x7fffb62ac4a0,
            description = 0x553500 "Create the initial window with the given geometry.", arg_description = 0x5533a1 "GEOMETRY"}, {
            long_name = 0x5533aa "no-default-window", short_name = 110 'n',
            flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7fffb62ac4b8,
            description = 0x553538 "Only create windows for explicitly specified URIs.", arg_description = 0x0}, {long_name = 0x5533bc "no-desktop",
            short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE,
            arg_data = 0x7fffb62ac4b0,
            description = 0x553570 "Do not manage the desktop (ignore the preference set in the preferences dialog).", arg_description = 0x0}, {
            long_name = 0x54fc7f "browser", short_name = 0 '\000', flags = 0,
            arg = G_OPTION_ARG_NONE, arg_data = 0x7fffb62ac4b4,
            description = 0x5533c7 "open a browser window.",
            arg_description = 0x0}, {long_name = 0x575e71 "quit",
            short_name = 113 'q', flags = 0, arg = G_OPTION_ARG_NONE,
            arg_data = 0x7fffb62ac4bc,
            description = 0x5533de "Quit Nautilus.", arg_description = 0x0}, {
            long_name = 0x558ccf "", short_name = 0 '\000', flags = 0,
            arg = G_OPTION_ARG_STRING_ARRAY, arg_data = 0x7fffb62ac498,
            description = 0x0, arg_description = 0x5533ed "[URI...]"}, {
            long_name = 0x0, short_name = 0 '\000', flags = 0,
            arg = G_OPTION_ARG_NONE, arg_data = 0x0, description = 0x0,
            arg_description = 0x0}}

6) SSH server information:
- Remote server runs Ubuntu 10.10 (Server) 32-bit.
- openssh-server version 1:5.5p1-4ubuntu5

[Wong Yong Jie (yjwong)]

This is possibly related (or may the same as) #680968, based on the backtrace.