Comment 5 for bug 1239381

here with some dbgsym's installed - not sure I believe some of the values though, and anyway if it's an allocation problem might not help anyway, but still might be useful to someone

(gdb) bt full
#0 0x00007f7a0955ff77 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = 0
        pid = 2046
        selftid = 2046
#1 0x00007f7a095635e8 in __GI_abort () at abort.c:90
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x7fff74eefbca, sa_sigaction = 0x7fff74eefbca}, sa_mask = {__val = {
              6, 140162120737932, 2, 140735155207134, 2, 140162120726900, 1, 140162120737928, 3, 140735155207108, 12,
              140162120737932, 2, 140735155207920, 18, 140735155209680}}, sa_flags = 80, sa_restorer = 0x7}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2 0x00007f7a0959d4fb in __libc_message (do_abort=do_abort@entry=2,
    fmt=fmt@entry=0x7f7a096b0740 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
        ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff74ef05e0, reg_save_area = 0x7fff74ef04f0}}
        ap_copy = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7fff74ef05e0, reg_save_area = 0x7fff74ef04f0}}
        fd = 2
        on_2 = <optimised out>
        list = <optimised out>
        nlist = <optimised out>
        cp = <optimised out>
        written = <optimised out>
#3 0x00007f7a095a9996 in malloc_printerr (ptr=0x54ab030, str=0x7f7a096b08e0 "free(): invalid next size (fast)",
    action=3) at malloc.c:4923
        buf = "00000000054ab030"
        cp = <optimised out>
#4 _int_free (av=<optimised out>, p=0x54ab020, have_lock=0) at malloc.c:3779
        size = <optimised out>
        fb = <optimised out>
        nextchunk = <optimised out>
        nextsize = <optimised out>
        nextinuse = <optimised out>
        prevsize = <optimised out>
        bck = <optimised out>
        fwd = <optimised out>
        errstr = <optimised out>
        locked = <optimised out>
        __func__ = "_int_free"
#5 0x00007f79e6b7f407 in insert_run (line=line@entry=0x2fd0940, state=state@entry=0x7fff74ef0850,
    run_item=run_item@entry=0x381c940, last_run=last_run@entry=1)
    at /build/buildd/pango1.0-1.32.5/./pango/pango-layout.c:3288
        run = 0x7f79b0001200
#6 0x00007f79e6b7f6f8 in process_item (layout=layout@entry=0x53354d0, line=line@entry=0x2fd0940,
    state=state@entry=0x7fff74ef0850, force_fit=force_fit@entry=1, no_break_at_end=no_break_at_end@entry=0)
    at /build/buildd/pango1.0-1.32.5/./pango/pango-layout.c:3393
        item = 0x381c940
        width = <optimised out>
        length = <optimised out>
        i = <optimised out>
        processing_new_item = <optimised out>
#7 0x00007f79e6b9230a in process_line (state=0x7fff74ef0850, layout=0x53354d0)
    at /build/buildd/pango1.0-1.32.5/./pango/pango-layout.c:3651
        old_remaining_width = -1
        item = 0x381c940
        result = <optimised out>
        old_num_chars = 8
        first_item_in_line = 0
        have_break = 0
        break_remaining_width = 0
        break_start_offset = 0
        break_link = 0x0
        wrapped = 0
---Type <return> to continue, or q <return> to quit---
#8 pango_layout_check_lines (layout=<optimised out>) at /build/buildd/pango1.0-1.32.5/./pango/pango-layout.c:3974
        delim_len = <optimised out>
        end = <optimised out>
        delimiter_index = 79
        next_para_index = 79
        attrs = 0xf6c0c0
        iter = 0xf05820
        prev_base_dir = <optimised out>
        done = <optimised out>
        start_offset = <optimised out>
        state = {line_height = -1, remaining_height = -2, attrs = 0xf6c0c0, items = 0xf10860,
          base_dir = PANGO_DIRECTION_LTR, line_of_par = 2, glyphs = 0x0, start_offset = 21, properties = {
            uline = PANGO_UNDERLINE_NONE, strikethrough = 0, rise = 0, letter_spacing = 0, shape_set = 0,
            shape_ink_rect = 0x0, shape_logical_rect = 0x0}, log_widths = 0x54ab030, log_widths_offset = 0,
          line_start_index = 55, line_start_offset = 21, line_width = 141312, remaining_width = -1}
        start = <optimised out>
        base_dir = <optimised out>
        layout = <optimised out>
#9 0x00007f79e6b94720 in pango_layout_get_iter (layout=layout@entry=0x53354d0)
    at /build/buildd/pango1.0-1.32.5/./pango/pango-layout.c:5598
        run_start_index = <optimised out>
        iter = 0x4d18020
        logical_rect = {x = -671081136, y = 32633, width = -424046462, height = 32633}
        __PRETTY_FUNCTION__ = "pango_layout_get_iter"
#10 0x00007f79e6b9987c in pango_renderer_draw_layout (renderer=renderer@entry=0x7f79d8001d50,
    layout=layout@entry=0x53354d0, x=x@entry=0, y=y@entry=0)
    at /build/buildd/pango1.0-1.32.5/./pango/pango-renderer.c:181
        iter = <optimised out>
        __PRETTY_FUNCTION__ = "pango_renderer_draw_layout"
#11 0x00007f79e6dc525a in _pango_cairo_do_layout (cr=0x52dfd40, layout=0x53354d0, do_path=0)
    at /build/buildd/pango1.0-1.32.5/./pango/pangocairo-render.c:877
        crenderer = 0x7f79d8001d50
        renderer = 0x7f79d8001d50
#12 0x00007f79e7ff71ed in unity::dash::ResultRendererTile::LoadText (this=0x56c7b90, row=...)
    at /build/buildd/unity-7.1.2+13.10.20131011/dash/ResultRendererTile.cpp:449
        _cairoGraphics = {m_surface_format = CAIRO_FORMAT_ARGB32, _cairo_surface = 0x52b3460, _cr = 0x5725d60,
          _width = 138, _height = 35, _zoom = 1, _opacity = 1, _opacity_stack = {
            c = {<std::_Deque_base<float, std::allocator<float> >> = {
                _M_impl = {<std::allocator<float>> = {<__gnu_cxx::new_allocator<float>> = {<No data fields>}, <No data fields>}, _M_map = 0x535f600, _M_map_size = 8, _M_start = {_M_cur = 0x49d6310, _M_first = 0x49d6310, _M_last = 0x49d6510,
                    _M_node = 0x535f618}, _M_finish = {_M_cur = 0x49d6310, _M_first = 0x49d6310, _M_last = 0x49d6510,
                    _M_node = 0x535f618}}}, <No data fields>}}}
        cr = 0x52dfd40
        layout = 0x53354d0
        desc = 0x7f79f01366a0
        pango_context = 0x2c47aa0
        font = {<boost::noncopyable_::noncopyable> = {<No data fields>}, string_ = 0x5dbbce0 "Ubuntu 11"}
        dpi = 98304
        escaped_text = <optimised out>
        screen = <optimised out>
        style = <optimised out>
        container = <optimised out>
#13 0x00007f79e7ffec0a in unity::dash::ResultViewGrid::DoLazyLoad (this=0x56c4fc0)
    at /build/buildd/unity-7.1.2+13.10.20131011/dash/ResultViewGrid.cpp:267
        it = {<std::iterator<std::random_access_iterator_tag, unity::dash::Result, long, unity::dash::Result*, unity::dash::Result&>> = {<No data fields>}, model_ = {object_ = 0x5622870}, iter_ = 0x7f79f001e180, tag_ = 0x1,
          iter_result_ = <incomplete type>}
        timer = {start_time_ = 112444853}
        queue_additional_load = false
        index = 0
---Type <return> to continue, or q <return> to quit---
        items_per_row = 6
#14 0x00007f79e62f788a in unity::glib::Source::SourceCallback(void*) () from /usr/lib/libunity-core-6.0.so.8
No symbol table info available.
#15 0x00007f7a07e783a6 in g_main_context_dispatch () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#16 0x00007f7a07e786f8 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#17 0x00007f7a07e78afa in g_main_loop_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#18 0x00007f7a09e4ad7b in compiz::private_screen::EventManager::startEventLoop(_XDisplay*) ()
   from /usr/lib/libcompiz_core.so.ABI-20130415
No symbol table info available.
#19 0x0000000000401971 in main ()
No symbol table info available.