unity-panel-service crashed with SIGSEGV in gtk_menu_tracker_remove_items()

[Angel Guzman Maeso]

Crash in panel using Eclipse (not sure if Eclipse trigger this bug)

ProblemType: Crash
DistroRelease: Ubuntu 15.10
Package: unity-services 7.3.2+15.10.20150921-0ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-22.29-generic 3.16.4
Uname: Linux 3.16.0-22-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 2.18.1-0ubuntu1
Architecture: amd64
BootLog:

CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: compiz
CompositorUnredirectDriverBlacklist: '(nouveau|Intel).*Mesa 8.0'
CompositorUnredirectFSW: true
CurrentDesktop: Unity
Date: Thu Sep 24 03:39:33 2015
DistUpgraded: Fresh install
DistroCodename: wily
DistroVariant: ubuntu
DkmsStatus: virtualbox, 5.0.4: added
ExecutablePath: /usr/lib/unity/unity-panel-service
GraphicsCard:
 Advanced Micro Devices, Inc. [AMD/ATI] Madison [Mobility Radeon HD 5650/5750 / 6530M/6550M] [1002:68c1] (prog-if 00 [VGA controller])
   Subsystem: Acer Incorporated [ALI] Mobility Radeon HD 5650 [1025:042f]
InstallationDate: Installed on 2014-05-08 (503 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417)
MachineType: Acer Aspire 5943G
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.16.0-22-generic root=UUID=e9be64c9-5b7e-438a-ac82-6b89bf946a86 ro quiet splash vt.handoff=7
SegvAnalysis:
 Segfault happened at: 0x7f24b28143ec: mov (%rdi),%rbx
 PC (0x7f24b28143ec) ok
 source "(%rdi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rbx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
 ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
 ffi_call_unix64 () from /usr/lib/x86_64-linux-gnu/libffi.so.6
 ffi_call () from /usr/lib/x86_64-linux-gnu/libffi.so.6
 g_cclosure_marshal_generic () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
 g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: unity-panel-service crashed with SIGSEGV in ffi_call_unix64()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 10/21/2010
dmi.bios.vendor: Acer
dmi.bios.version: V1.15
dmi.board.asset.tag: Base Board Asset Tag
dmi.board.name: Aspire 5943G
dmi.board.vendor: Acer
dmi.board.version: V1.15
dmi.chassis.type: 10
dmi.chassis.vendor: Acer
dmi.chassis.version: V1.15
dmi.modalias: dmi:bvnAcer:bvrV1.15:bd10/21/2010:svnAcer:pnAspire5943G:pvrV1.15:rvnAcer:rnAspire5943G:rvrV1.15:cvnAcer:ct10:cvrV1.15:
dmi.product.name: Aspire 5943G
dmi.product.version: V1.15
dmi.sys.vendor: Acer
version.compiz: compiz 1:0.9.12.2+15.10.20150908-0ubuntu1
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.64-1
version.libgl1-mesa-dri: libgl1-mesa-dri 11.0.0-1ubuntu1
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 11.0.0-1ubuntu1
version.xserver-xorg-core: xserver-xorg-core 2:1.17.2-1ubuntu7
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.9.2-1ubuntu1
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:7.5.0+git20150819-0ubuntu1
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.99.917+git20150808-0ubuntu2
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:1.0.11-1ubuntu3
xserver.bootTime: Thu Sep 24 02:58:04 2015
xserver.configfile: default
xserver.errors:

xserver.logfile: /var/log/Xorg.0.log
xserver.version: 2:1.17.2-1ubuntu7
xserver.video_driver: radeon

[Apport retracing service (apport)]

StacktraceTop:
 gtk_menu_tracker_remove_items (tracker=0x7f2494030ac0, tracker=0x7f2494030ac0, n_items=1, offset=<optimized out>, change_point=0x7f2494121868) at /build/gtk+3.0-gB0ETz/gtk+3.0-3.16.7/./gtk/gtkmenutracker.c:290
 gtk_menu_tracker_model_changed (model=0x1b0c700, position=-1, removed=1, added=1, user_data=0x7f2494030ac0) at /build/gtk+3.0-gB0ETz/gtk+3.0-3.16.7/./gtk/gtkmenutracker.c:451
 ffi_call_unix64 () at ../src/x86/unix64.S:76
 ffi_call (cif=cif@entry=0x7fffc104ac10, fn=<optimized out>, rvalue=0x7fffc104ab70, avalue=avalue@entry=0x7fffc104aaf0) at ../src/x86/ffi64.c:525
 g_cclosure_marshal_generic (closure=0x1b129f0, return_gvalue=0x0, n_param_values=<optimized out>, param_values=0x7fffc104ae40, invocation_hint=<optimized out>, marshal_data=0x0) at /build/glib2.0-QXxxHj/glib2.0-2.45.8/./gobject/gclosure.c:1481

[Sebastien Bacher (seb128)]

getting the same when closing pidgin here

[Sebastien Bacher (seb128)]

under valgrind it shows that invalid read

==4150== 1 errors in context 1 of 1:
==4150== Invalid read of size 4
==4150== at 0x444FE59: gtk_menu_tracker_remove_items (gtkmenutracker.c:290)
==4150== by 0x444FE59: gtk_menu_tracker_model_changed (gtkmenutracker.c:451)
==4150== by 0x55D1D11: ffi_call_SYSV (sysv.S:65)
==4150== by 0x55D198B: ffi_call (ffi.c:389)
==4150== by 0x4D183AC: g_cclosure_marshal_generic (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D17B8A: g_closure_invoke (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D29FFB: signal_emit_unlocked_R (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D32C95: g_signal_emit_valist (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D32FC4: g_signal_emit (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4BF4F6B: g_menu_model_items_changed (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4BF852D: g_dbus_menu_group_changed (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4BF8C07: g_dbus_menu_path_signal (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4C10DCE: emit_signal_instance_in_idle_cb (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4DAC40F: g_idle_dispatch (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x4DAFB9A: g_main_context_dispatch (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x4DAFF88: g_main_context_iterate.isra.29 (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x4DB0338: g_main_loop_run (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x442F99D: gtk_main (gtkmain.c:1219)
==4150== by 0x804C313: main (in /usr/lib/unity/unity-panel-service)

[Alex Baggott (alex-baggott)]

Thank you for taking the time to report this bug. Unfortunately we can’t work out how to recreate this bug from your description. Please describe the process you go through to trigger this bug and then change the bug status to NEW. See this page for more information. https://wiki.ubuntu.com/BigDesktopBugScrub

[Michael Thayer (michael-thayer)]

Might this be related to bug 1499747<1>?

<1> https://bugs.launchpad.net/ubuntu/+source/gedit/+bug/1499747

[Andrea Azzarone (azzar1)]

Michael, I don't think so.