unity-panel-service crashed with SIGSEGV in gtk_menu_tracker_remove_items()

[Michael Blennerhassett]

1. get an app to stop responding (ie the window gets dimmed)
2. wait for it to recover
3. notice that it has no menus now (is there a bug somewhere for that?)
4. close the app
5. crash

(Note: I think this is chain of events, I haven't been able to reproduce)

ProblemType: Crash
DistroRelease: Ubuntu 14.04
Package: unity-services 7.1.2+14.04.20140320.1-0ubuntu1
ProcVersionSignature: Ubuntu 3.13.0-18.38-generic 3.13.6
Uname: Linux 3.13.0-18-generic x86_64
ApportVersion: 2.13.3-0ubuntu1
Architecture: amd64
CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CurrentDesktop: Unity
Date: Sat Mar 22 19:09:26 2014
ExecutablePath: /usr/lib/unity/unity-panel-service
InstallationDate: Installed on 2013-06-22 (273 days ago)
InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Alpha amd64 (20130621)
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcEnviron:
 PATH=(custom, no user)
 LANGUAGE=en_AU:en
 XDG_RUNTIME_DIR=<set>
 LANG=en_AU.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7ff2bf1b3ffc: mov (%rdi),%rbx
 PC (0x7ff2bf1b3ffc) ok
 source "(%rdi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rbx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
 ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
 ffi_call_unix64 () from /usr/lib/x86_64-linux-gnu/libffi.so.6
 ffi_call () from /usr/lib/x86_64-linux-gnu/libffi.so.6
 g_cclosure_marshal_generic () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
 g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: unity-panel-service crashed with SIGSEGV in ffi_call_unix64()
UpgradeStatus: Upgraded to trusty on 2013-12-05 (106 days ago)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

[Apport retracing service (apport)]

StacktraceTop:
 gtk_menu_tracker_remove_items (tracker=0x7ff2a817b810, tracker=0x7ff2a817b810, n_items=1, offset=0, change_point=0x7ff2a81c4f58) at /build/buildd/gtk+3.0-3.10.7/./gtk/gtkmenutracker.c:250
 gtk_menu_tracker_model_changed (model=0x7ff2a80b8580, position=0, removed=1, added=0, user_data=0x7ff2a817b810) at /build/buildd/gtk+3.0-3.10.7/./gtk/gtkmenutracker.c:354
 ffi_call_unix64 () at ../src/x86/unix64.S:76
 ffi_call (cif=0x7fff4f09f880, fn=0x7ff2bf1b3f70 <gtk_menu_tracker_model_changed>, rvalue=0x7fff4f09f7f0, avalue=0x7fff4f09f770) at ../src/x86/ffi64.c:522
 ?? ()

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Sebastien Bacher (seb128)]

e.u.c report on https://errors.ubuntu.com/problem/fb90c5cd261c59daee2e455c7e2445e2787affde

[Michael Blennerhassett (mjblenner)]

Was able to reproduce this. The app needs to stop responding before it creates its menus (say for example shotwell, when trying to import photos from a camera)