[heap corruption?] compiz crashed with SIGSEGV in _int_malloc() from g_realloc() from ... from g_dbus_connection_send_message_with_reply() from g_object_unref() from unity::dash::HomeLens::Impl::~Impl() from unity::dash::HomeLens::~HomeLens()

Bug #931201 reported by Jeroen Roovers
204
This bug affects 26 people
Affects Status Importance Assigned to Milestone
Unity
Fix Released
Critical
Brandon Schaefer
unity (Ubuntu)
Fix Released
Critical
Unassigned
Precise
Fix Released
Critical
Unassigned

Bug Description

SRU testcase

1. install unity from precise-proposed
2. make sure unity does not crash while enabling/disabling a plugin in CCSM

while changing some settings and waiting for them to get committed

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: libnux-2.0-0 2.2.0-0ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-15.24-generic 3.2.5
Uname: Linux 3.2.0-15-generic i686
ApportVersion: 1.91-0ubuntu1
Architecture: i386
Date: Mon Feb 13 01:20:52 2012
EcryptfsInUse: Yes
ExecutablePath: /usr/bin/compiz
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
ProcCmdline: compiz
SegvAnalysis:
 Segfault happened at: 0x555f49: mov %ecx,0x8(%ebp)
 PC (0x00555f49) ok
 source "%ecx" ok
 destination "0x8(%ebp)" (0x0220000e) not located in a known VMA region (needed writable region)!
SegvReason: writing unknown VMA
Signal: 11
SourcePackage: nux
StacktraceTop:
 ?? () from /lib/i386-linux-gnu/libc.so.6
 ?? () from /lib/i386-linux-gnu/libc.so.6
 realloc () from /lib/i386-linux-gnu/libc.so.6
 ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
 g_realloc () from /lib/i386-linux-gnu/libglib-2.0.so.0
Title: compiz crashed with SIGSEGV in realloc()
UpgradeStatus: Upgraded to precise on 2011-12-04 (70 days ago)
UserGroups: adm admin audio cdrom dialout lpadmin plugdev sambashare

Related branches

Revision history for this message
Jeroen Roovers (jer-gentoo) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 _int_malloc (av=0x682440, bytes=513) at malloc.c:3598
 _int_realloc (av=0x682440, oldp=0x9bd5008, oldsize=264, nb=520) at malloc.c:4370
 __GI___libc_realloc (oldmem=0x9bd5010, bytes=512) at malloc.c:3060
 standard_realloc (mem=0x9bd5010, n_bytes=512) at /build/buildd/glib2.0-2.31.16/./glib/gmem.c:92
 g_realloc (mem=0x9bd5010, n_bytes=512) at /build/buildd/glib2.0-2.31.16/./glib/gmem.c:224

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in nux (Ubuntu):
importance: Undecided → Medium
summary: - compiz crashed with SIGSEGV in realloc()
+ compiz crashed with SIGSEGV in _int_malloc()
tags: removed: need-i386-retrace
Revision history for this message
Launchpad Janitor (janitor) wrote : Re: compiz crashed with SIGSEGV in _int_malloc()

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in nux (Ubuntu):
status: New → Confirmed
William Grant (wgrant)
visibility: private → public
summary: - compiz crashed with SIGSEGV in _int_malloc()
+ [heap corruption?] compiz crashed with SIGSEGV in _int_malloc() from
+ g_realloc() from ... from g_dbus_connection_send_message_with_reply()
+ from g_object_unref() from unity::dash::HomeLens::Impl::~Impl() from
+ unity::dash::HomeLens::~HomeLens()
affects: nux (Ubuntu) → unity (Ubuntu)
Changed in unity:
status: New → Confirmed
Changed in unity:
importance: Undecided → High
milestone: none → 5.12.0
milestone: 5.12.0 → 5.10.0
Changed in unity:
importance: High → Critical
Omer Akram (om26er)
Changed in unity (Ubuntu):
importance: Medium → Critical
Michal Hruby (mhr3)
tags: added: apport-request-retrace
Revision history for this message
Apport retracing service (apport) wrote : Updated stack trace from duplicate bug 974609

Package: libnux-2.0-0 2.8.0-0ubuntu1
ProcCmdline: compiz

Revision history for this message
Apport retracing service (apport) wrote : Dependencies.txt
Revision history for this message
Apport retracing service (apport) wrote : ProcMaps.txt
Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
tags: removed: apport-request-retrace
Changed in unity:
milestone: 5.10.0 → 5.12.0
Changed in unity:
assignee: nobody → Brandon Schaefer (brandontschaefer)
Changed in unity:
status: Confirmed → Fix Committed
Changed in unity (Ubuntu):
status: Confirmed → Fix Committed
Omer Akram (om26er)
description: updated
Changed in unity (Ubuntu Precise):
status: Fix Committed → Confirmed
Changed in unity:
status: Fix Committed → Fix Released
Revision history for this message
Martin Pitt (pitti) wrote : Please test proposed package

Hello Jeroen, or anyone else affected,

Accepted unity into precise-proposed. The package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Changed in unity (Ubuntu Precise):
status: Confirmed → Fix Committed
tags: added: verification-needed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (6.0 KiB)

This bug was fixed in the package unity - 5.12-0ubuntu1

---------------
unity (5.12-0ubuntu1) precise-proposed; urgency=low

  * New upstream release.
    - Launcher, Alt-Tab - clicking on launcher item or selecting a app in Alt-
      Tab raises all app windows, not just most recently focused (LP: #959339)
    - [heap corruption?] compiz crashed with SIGSEGV in _int_malloc() from
      g_realloc() from ... from g_dbus_connection_send_message_with_reply()
      from g_object_unref() from unity::dash::HomeLens::Impl::~Impl() from
      unity::dash::HomeLens::~HomeLens() (LP: #931201)
    - compiz crashed with SIGSEGV in _int_malloc() from __libc_calloc() from
      XOpenDisplay() from nux::WindowThread::ThreadCtor() (LP: #947844)
    - Regression: Installing apps causes a terrible visual glitch-- have to
      restart X.org. (LP: #981168)
    - Window management - unity doesn't realise when applications bring their
      windows to the front (LP: #802816)
    - Dash - Clicking on the desktop dash border should do nothing, *NOT*
      close the dash (LP: #839472)
    - [FFe, UIFe] HUD - The HUD does not respect launcher icon size settings
      in autohide mode (LP: #921506)
    - compiz crashed with SIGSEGV in g_volume_get_mount() (LP: #918548)
    - multiple instances or double icons of application detected on bamfdaemon
      respawn (LP: #928912)
    - Panel is transparent when Dash is open; no blur no average BG color
      (LP: #965323)
    - Unity crashes with SIGSEGV when hitting debug DBus interface hard
      (LP: #979429)
    - compiz crashed with SIGSEGV in _int_malloc() from g_object_unref() from
      unity::dash::Model<unity::dash::FilterAdaptor>::~Model() (LP: #941750)
    - indicators menu are sometimes cut off at screen edge (LP: #883317)
    - the shortcut keys in workspace section of the shortcut overlay aren't
      translated (LP: #980828)
    - [regression] Dash keeps repainting unnecessarily (LP: #980924)
    - compiz crashed with SIGSEGV in nux::NTextureData::ClearData() from
      nux::NTextureData::~NTextureData() from nux::Texture2D::~Texture2D()
      (LP: #952378)
    - compiz crashed with SIGSEGV in g_object_unref() from
      unity::dash::Settings::~Settings() from
      unity::UnityScreen::~UnityScreen() (LP: #981764)
    - compiz crashed with SIGSEGV in unity::dash::ResultView::~ResultView()
      from unity::dash::ResultViewGrid::~ResultViewGrid() from
      nux::Object::Destroy() from nux::Object::UnReference() (LP: #942286)
    - compiz crashed with SIGSEGV in
      ends_with_iter_select<__gnu_cxx::__normal_iterator<char const*,
      std::basic_string<char> >, char const*, boost::algorithm::is_iequal>()
      from unity::ui::PointerBarrierWrapper::EmitCurrentData() (LP: #983268)
    - Chinese can't be shown completely in dash filter (LP: #984583)
    - [Unity 5.10] compiz crashed with SIGSEGV in
      unity::hud::HudIconTextureSource::ColorForIcon() from
      unity::hud::Icon::Icon() from emit from unity::IconTexture::IconLoaded
      (LP: #983646)
    - [regression] Close button does not close the dash/HUD (LP: #986264)
    - compiz crashed with SIGSEGV in g_volume_eject_with_operation_finish()
      fro...

Read more...

Changed in unity (Ubuntu):
status: Confirmed → Fix Released
Changed in unity (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.