unity-panel-service crashed due to heap corruption in g_free() from service_proxy_name_changed() [libindicator/indicator-service-manager.c:574]

Bug #969360 reported by Stefan Steinborn on 2012-03-30
882
This bug affects 147 people
Affects Status Importance Assigned to Milestone
Unity
Fix Released
Critical
Marco Trevisan (Treviño)
libindicator
Fix Released
Critical
Marco Trevisan (Treviño)
unity (Ubuntu)
Critical
Marco Trevisan (Treviño)
Precise
Critical
Marco Trevisan (Treviño)

Bug Description

?

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: unity-services 5.8.0-0ubuntu2
ProcVersionSignature: Ubuntu 3.2.0-20.33-generic 3.2.12
Uname: Linux 3.2.0-20-generic i686
NonfreeKernelModules: nvidia
.proc.driver.nvidia.gpus.0: Error: [Errno 21] Ist ein Verzeichnis: '/proc/driver/nvidia/gpus/0'
.proc.driver.nvidia.registry: Binary: ""
.tmp.unity.support.test.0:

ApportVersion: 2.0-0ubuntu1
Architecture: i386
CompizPlugins: [core,composite,opengl,compiztoolbox,decor,vpswitch,snap,mousepoll,resize,place,move,wall,grid,regex,imgpng,session,gnomecompat,animation,fade,unitymtgrabhandles,workarounds,scale,expo,ezoom,unityshell]
CompositorRunning: compiz
Date: Fri Mar 30 18:14:54 2012
DistUpgraded: 2012-03-19 13:42:49,103 DEBUG enabling apt cron job
DistroCodename: precise
DistroVariant: ubuntu
ExecutablePath: /usr/lib/unity/unity-panel-service
InstallationMedia: Ubuntu 10.04.3 LTS "Lucid Lynx" - Release i386 (20110720.1)
MachineType: Hewlett-Packard HP Compaq 8710p
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.2.0-20-generic root=UUID=cc2e9546-1434-4d06-8241-c896ebafcc17 ro quiet splash vt.handoff=7
Signal: 6
SourcePackage: unity
Title: unity-panel-service crashed with SIGABRT in raise()
UpgradeStatus: Upgraded to precise on 2012-03-19 (11 days ago)
UserGroups: adm admin audio backup bin bluetooth cdrom couchdb crontab daemon dialout dip disk fax floppy fuse games lp lpadmin netdev news operator plugdev powerdev pulse pulse-access root sambashare scanner tape users utmp uucp vboxusers video voice
dmi.bios.date: 02/12/2008
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: 68MAD Ver. F.0B
dmi.board.name: 30C3
dmi.board.vendor: Hewlett-Packard
dmi.board.version: KBC Version 73.31
dmi.chassis.type: 10
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvr68MADVer.F.0B:bd02/12/2008:svnHewlett-Packard:pnHPCompaq8710p:pvrF.0B:rvnHewlett-Packard:rn30C3:rvrKBCVersion73.31:cvnHewlett-Packard:ct10:cvr:
dmi.product.name: HP Compaq 8710p
dmi.product.version: F.0B
dmi.sys.vendor: Hewlett-Packard
version.compiz: compiz 1:0.9.7.2-0ubuntu4
version.libdrm2: libdrm2 2.4.32-1ubuntu1
version.libgl1-mesa-dri: libgl1-mesa-dri 8.0.2-0ubuntu3
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 8.0.2-0ubuntu3
version.nvidia-graphics-drivers: nvidia-graphics-drivers N/A
version.xserver-xorg-core: xserver-xorg-core 2:1.11.4-0ubuntu8
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.7.0-0ubuntu1
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:6.14.99~git20111219.aacbd629-0ubuntu2
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.17.0-1ubuntu4
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:0.0.16+git20111201+b5534a1-1build2

Related branches

Changed in unity (Ubuntu):
importance: Undecided → Medium
summary: - unity-panel-service crashed with SIGABRT in raise()
+ unity-panel-service crashed with SIGABRT in __libc_message()
tags: removed: need-i386-retrace

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in unity (Ubuntu):
status: New → Confirmed
tags: added: bugpattern-needed
Omer Akram (om26er) on 2012-04-01
security vulnerability: yes → no
visibility: private → public
summary: - unity-panel-service crashed with SIGABRT in __libc_message()
+ unity-panel-service crashed due to heap corruption in g_free() from
+ service_proxy_name_changed() [libindicator/indicator-service-
+ manager.c:574]
Changed in unity:
milestone: none → 5.10.0
status: New → Confirmed
importance: Undecided → Medium
importance: Medium → High
Changed in libindicator:
status: New → Confirmed
importance: Undecided → High
Omer Akram (om26er) on 2012-04-01
Changed in unity (Ubuntu):
importance: Medium → Critical
Changed in unity:
importance: High → Critical
Changed in libindicator:
importance: High → Critical
Andrea Cimitan (cimi) on 2012-04-01
Changed in libindicator:
assignee: nobody → Andrea Cimitan (cimi)
Changed in unity:
assignee: nobody → Andrea Cimitan (cimi)
Changed in unity (Ubuntu Precise):
assignee: nobody → Andrea Cimitan (cimi)
Andrea Cimitan (cimi) on 2012-04-01
Changed in libindicator:
status: Confirmed → In Progress
Changed in unity:
status: Confirmed → In Progress
Changed in unity (Ubuntu Precise):
status: Confirmed → In Progress
Chris Moore (melonhead122908) wrote :

This occured when launching chrome from launch pad.

Changed in libindicator:
assignee: Andrea Cimitan (cimi) → Marco Trevisan (Treviño) (3v1n0)
Changed in unity:
assignee: Andrea Cimitan (cimi) → Marco Trevisan (Treviño) (3v1n0)
Changed in unity (Ubuntu Precise):
assignee: Andrea Cimitan (cimi) → Marco Trevisan (Treviño) (3v1n0)
Changed in libindicator:
status: In Progress → Fix Committed
Changed in unity:
status: In Progress → Fix Committed
Changed in unity (Ubuntu Precise):
status: In Progress → Fix Committed
Timothy Matias (nspyraishn) wrote :

This bug happens for me consistently when I close my netbook to go into suspend mode. My workaround (although not a good one, as I normally suspend all the time) is to disable all suspend options. I will keep this workaround until this bug is resolved.

SteveDude (stevedude-) wrote :

Rebooted into Ubuntu (Unity) interface and at the terminal used "gnome-shell --replace" command and the system crashed.

wistle (charl-wentzel) wrote :

When this bug occurs I see no visible effects on the desktop other than the pop-up to report the problem.

Ulrich Albert (ulrich-albert) wrote :

I am not sure that this is the correct bug for me. I only comment here because apport sent me to bug #969393, which is a duplicate of this bug.

I was copying a partition to another with gparted on my external USB drive. This must have created a bottleneck (neither on the cpu nor with swap). As a consequence my desktop became unresponsive. Every window greyed out from time to time including the active one. To investigate the problem i switched to tty1 with ctrl-alt-F1. When I came back to my graphical desktop, apport reported this internal error of ubuntu. Aside from the unresponsiveness only my name in the indicator got wrong. It now shows [invalid UTF-8].

I hope, this helps.

Charles Kerr (charlesk) wrote :

Marco: ugh. Thanks very much for this fix.

Ulrich: Well, bug #969393 is definitely a duplicate of this one. Regarding the use case you described, please try it again after doing an upgrade to pick up Marco's fix for this bug, and please report a new bug if the problem persists. Thanks!

Tanupy ume (tanupy) wrote :

me 2 4 several times

tatojo (j-manuel-x) wrote :

After this morning upgrade no more trouble with starting unity.

Steffen Goetz (steffengoetz) wrote :

This bug occurs when I start the update manager to check for updates. I can not see no effects on the desktop other than the pop-up to report the problem.

Cheers,
Steffen

janf (janooogle) wrote :

Upgraded DDR 3 system memory from 4GB to 8 GB two days ago. ubuntu 11.10 and Linux Mint 12 on this same machine have exhibited no problems with this configuration. Ububtu 12.04 did not have any problems until a rather large update was performed and the computer was restarted. Performing a search in Synaptic when the problem occurred.

Ted Gould (ted) on 2012-04-04
Changed in libindicator:
status: Fix Committed → Fix Released
milestone: none → 0.4.95
Ubuntu QA Website (ubuntuqa) wrote :

This bug has been reported on the Ubuntu laptop testing tracker.

A list of all reports related to this bug can be found here:
http://laptop.qa.ubuntu.com/qatracker/reports/bugs/969360

tags: added: laptop-testing
tags: added: rls-mgr-p-tracking
Didier Roche (didrocks) on 2012-04-12
Changed in unity:
status: Fix Committed → Fix Released
Launchpad Janitor (janitor) wrote :
Download full text (9.2 KiB)

This bug was fixed in the package unity - 5.10.0-0ubuntu3

---------------
unity (5.10.0-0ubuntu3) precise-proposed; urgency=low

  [ Oliver Grawert ]
  * Enable subarch specific quilt support
  * add linaros disable_standalone-clients.patch to make unity build with GLES

  [ Didier Roche ]
  * remove a symlink and replace with a real file for
    debian/patches/series.<arch> as not supported in non v3 (and we don't
    want v3 format with full source upstream derived branch)

unity (5.10.0-0ubuntu2) precise-proposed; urgency=low

  [ Ricardo Salveti de Araujo ]
  * Enabling build with OpenGL ES2.0 support for ARM and disable maintainer
     mode on that arch to avoid -Werror failure (LP: #980544)

unity (5.10.0-0ubuntu1) precise-proposed; urgency=low

  * New upstream release:
    - bamfdaemon crashed with SIGABRT in g_assertion_message() (LP: #926208)
    - We are using 1 bad hack for compiz hanging on startup (LP: #963264)
    - GConf backend steals glib events from compiz (LP: #965220)
    - when I closed QupZill brawser it crashed and then and then I sow
      worrning that compiz crashed but fire fox and chrome is estle working.
      gtk-window-decorator crashed with SIGSEGV in max_window_name_width()
      (LP: #948580)
    - compiz crashed with SIGSEGV in std::basic_string<...>::basic_string()
      from unity::launcher::HudLauncherIcon::HudLauncherIcon()::{lambda} from
      unity::UBusManager::OnCallback (LP: #964897)
    - unity-panel-service crashed due to heap corruption in g_free() from
      service_proxy_name_changed() [libindicator/indicator-service-
      manager.c:574] (LP: #969360)
    - Opening dash while an application is maximized makes unity completely
      useless, have to relogin (LP: #975103)
    - unity crash on alt-tab (LP: #975168)
    - Top bar - Menus should be condensed to fit panel/overlay of appmenu
      (LP: #655184)
    - Topbar - window controls for maximised windows in the top bar should
      conform to Fitts's law (LP: #839690)
    - [FFe, UIFe] Dash - When the Dash is open and there is a maximised app in
      the background, the top bar background should not disappear
      (LP: #839480)
    - Dash - The inner bottom left, bottom right and top right corners of the
      desktop dash border are rendered incorrectly (LP: #839476)
    - Showdesktoped window contents invisible in window spread (LP: #877778)
    - Maximized windows can be accidentally closed from wrong monitor.
      (LP: #865701)
    - Unity launcher on-screen corruption on resume from suspend with nVidia
      proprietary driver (LP: #915265)
    - Launcher - Inserting items into launcher makes unnecessary animations on
      other monitors (LP: #925021)
    - Far left character in panel (and launcher popups) distorted
      (LP: #927441)
    - Jenkins build failure: SetAcceptKeyNavFocusOnMouseEnter not declared
      (LP: #938037)
    - super+<unbound key> and sometimes super+<number> keys now cause launch
      to wedge with the key hints shown and retains focus instead of selecting
      the requested window (LP: #934084)
    - three-finger move does not move (Precise) (LP: #940612)
    - compiz crashed with SIGSEGV in std::__de...

Read more...

Changed in unity (Ubuntu Precise):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers