uim-xim bombs out in free() (and the uim version is old.)

Bug #240804 reported by moof
2
Affects Status Importance Assigned to Milestone
uim (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

uim-xim, part of the uim package, has a nasty tendency to bomb out in free:

** glibc detected *** uim-xim: free(): invalid next size (normal): 0x084b0498 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7c1fa85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7c234f0]
/lib/tls/i686/cmov/libc.so.6[0xb7bcc037]
/lib/tls/i686/cmov/libc.so.6(iconv_close+0x1c)[0xb7bcb61c]
uim-xim[0x805d54b]
uim-xim[0x805e5e3]
uim-xim[0x805e970]
uim-xim[0x805ea34]
uim-xim[0x8056a2f]
uim-xim[0x805542b]
uim-xim[0x8051a40]
uim-xim[0x8051aff]
uim-xim[0x804bdd9]
uim-xim[0x804c4ba]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7bca450]
uim-xim(__gxx_personality_v0+0x115)[0x804b211]
======= Memory map: ========
08048000-08068000 r-xp 00000000 08:01 7062081 /usr/bin/uim-xim
08068000-08069000 rw-p 0001f000 08:01 7062081 /usr/bin/uim-xim
08069000-084e0000 rw-p 08069000 00:00 0 [heap]
b6300000-b6321000 rw-p b6300000 00:00 0
b6321000-b6400000 ---p b6321000 00:00 0
b6432000-b64bb000 rw-p b6432000 00:00 0
b64bb000-b64d3000 r--s 00000000 00:09 99516436 /SYSV00000000 (deleted)
[rest of memory map elided]

I'd note that the version of uim in hardy, 1.4.1, is relatively ancient; http://code.google.com/p/uim/ indicates 1.5.1 is now out. It'd probably be far easier to just upgrade the package than to try and figure out what's going on in 1.4.1.

Revision history for this message
Anders Kaseorg (andersk) wrote :

Hardy is no longer supported, and I’m pretty sure this was fixed a long time ago.

Changed in uim (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.