ibus-engine-chewing crashed with SIGSEGV

[BlueT - Matthew Lien - 練喆明]

I was typing chinese and english, switching them by hitting Ctrl-Space. After some typing, I'm not able to switch to chinese mode and it crashed.

ProblemType: Crash
DistroRelease: Ubuntu 10.04
Package: ibus-chewing 1.2.0.20091211-1
ProcVersionSignature: Ubuntu 2.6.32-34.76-generic 2.6.32.44+drm33.19
Uname: Linux 2.6.32-34-generic x86_64
Architecture: amd64
Date: Tue Sep 6 03:57:50 2011
Disassembly: => 0x7f99c3a473d0: Cannot access memory at address 0x7f99c3a473d0
ExecutablePath: /usr/lib/ibus-chewing/ibus-engine-chewing
ProcCmdline: /usr/lib/ibus-chewing/ibus-engine-chewing --ibus
ProcEnviron:
 LANGUAGE=zh_TW:en_US:en
 PATH=(custom, user)
 LANG=zh_TW.UTF-8
 SHELL=/bin/bash
SegvAnalysis:
 Segfault happened at: 0x7f99c3a473d0: Cannot access memory at address 0x7f99c3a473d0
 PC (0x7f99c3a473d0) ok
 SP (0x7fff92517fb8) ok
 Reason could not be automatically determined.
Signal: 11
SourcePackage: ibus-chewing
StacktraceTop:
 ?? ()
 ?? ()
 ?? ()
 ?? ()
 ?? ()
Title: ibus-engine-chewing crashed with SIGSEGV
UserGroups: adm admin cdrom dialout libvirtd lpadmin plugdev sambashare vboxusers

[Chen_Min_Chin (chenminchin-redhat-bugs)]

abrt version: 1.1.13
architecture: x86_64
Attached file: backtrace
cmdline: /usr/libexec/ibus-engine-chewing --ibus
component: ibus-chewing
crash_function: _wordcopy_bwd_aligned
executable: /usr/libexec/ibus-engine-chewing
kernel: 2.6.33.6-147.2.4.fc13.x86_64
package: ibus-chewing-1.3.6.20100730-1.fc13
rating: 4
reason: Process /usr/libexec/ibus-engine-chewing was killed by signal 11 (SIGSEGV)
release: Fedora release 13 (Goddard)
time: 1282371265
uid: 500

[Chen_Min_Chin (chenminchin-redhat-bugs)]

Created an attachment (id=440081)
File: backtrace

[Ding-Yi (ding-yi-redhat-bugs)]

This looks more like the libchewing's bug, I will do further investigation.

[Ding-Yi (ding-yi-redhat-bugs)]

*** Bug 627452 has been marked as a duplicate of this bug. ***

[Ding-Yi (ding-yi-redhat-bugs)]

*** Bug 626390 has been marked as a duplicate of this bug. ***

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc12 has been submitted as an update for Fedora 12.
https://admin.fedoraproject.org/updates/libchewing-0.3.2-28.fc12

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc13 has been submitted as an update for Fedora 13.
https://admin.fedoraproject.org/updates/libchewing-0.3.2-28.fc13

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/libchewing-0.3.2-28.fc14

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc14 has been pushed to the Fedora 14 testing repository. If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with
 su -c 'yum --enablerepo=updates-testing update libchewing'. You can provide feedback for this update here: https://admin.fedoraproject.org/updates/libchewing-0.3.2-28.fc14

[Ding-Yi (ding-yi-redhat-bugs)]

*** Bug 630670 has been marked as a duplicate of this bug. ***

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.

[Fedora (fedora-redhat-bugs)]

libchewing-0.3.2-28.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.

[Apport retracing service (apport)]

StacktraceTop:
 _wordcopy_bwd_aligned (dstp=25030656, srcp=25030640, len=2305843009210611336) at wordcopy.c:310
 __GI_memmove (dest=0x2f63bf8, src=<optimized out>, len=18446744073709551608) at memmove.c:99
 AddChi (phone=<optimized out>, pgdata=0x2f58a60) at /usr/include/bits/string3.h:59
 chewing_handle_Default (ctx=<optimized out>, key=52) at chewingio.c:1177
 ibus_chewing_engine_handle_Default ()

[Rex Tsai (chihchun)]

I'm marking this bug as 'bitesize' as it looks like an issue that is easy to fix and suitable for newcomers in Ubuntu development. If you need any help with fixing it, talk to me about it.

[Rex Tsai (chihchun)]

This is issue of libchewing3 0.3.2, the wch_t structure is not aligned.

[Rex Tsai (chihchun)]

patch and ppa will be available soon at the following urls
https://code.launchpad.net/~chihchun/ubuntu/lucid/libchewing/bug-842115
https://launchpad.net/~chihchun/+archive/lucid-experimental

Need to be tested to confirm the patch fix the issue.

[BlueT - Matthew Lien - 練喆明 (bluet)]

Hi chihchun,
Just installed and testing, thanks.

[Rex Tsai (chihchun)]

The issue has been fixed in upstream libchewing-0.3.3, which is available in precise[1][2].

[1] http://packages.ubuntu.com/precise/libchewing3
[2] http://changelogs.ubuntu.com/changelogs/pool/main/libc/libchewing/libchewing_0.3.3-1/changelog
[3] https://code.launchpad.net/~ubuntu-branches/ubuntu/precise/libchewing/precise

[James Page (james-page)]

Rex

If we wait to SRU this fix then this bug report needs to be updated inline with the SRU process requirements - see https://wiki.ubuntu.com/StableReleaseUpdates.

I've marked it 'Fixed Released' for precise and raised tasks for Lucid->Oneiric as the same version of the package exists in all of those releases.

Cheers

James

[James Page (james-page)]

Rex

As the same version of this package is in Lucid->Oneiric please note the guidelines re version number in this scenario in https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Update_the_packaging.

Cheers

James

[Clint Byrum (clint-fewbar)]

Since the debdiff is not suitable for upload yet, removing from ubuntu sponsorship queue by unsubscribing ubuntu-sponsors.

Rex, thanks for the first debdiff! Very close. Once you've updated the debdiff with the versions as outlined in the link in comment #12, please re-subscribe ubuntu-sponsors and somebody will take a look at it very soon.

[Clint Byrum (clint-fewbar)]

Also to whomever ends up uploading the package to *-proposed, please re-subscribe ubuntu-sru at that time. Unsubbing ubuntu-sru for now.

[Rex Tsai (chihchun)]

Clint, I have fixed the version[1][2] for lucid-proposed at the same day james send me feedback.

All the following series should have same issue, just need to change the version.
Lucid - 0.3.2-2
Maverick - 0.3.2-2
Natty - 0.3.2-2
Oneiric - 0.3.2-2

[1] https://code.launchpad.net/~chihchun/ubuntu/lucid/libchewing/bug-842115
[2] http://bazaar.launchpad.net/~chihchun/ubuntu/lucid/libchewing/bug-842115/revision/9

[Daniel Holbach (dholbach)]

Uploaded to lucid-proposed. It might still sit in the review queue. Once it is available in -proposed, please test and give feedback on the bug report.

[Martin Pitt (pitti)]

Hello BlueT, or anyone else affected,

Accepted libchewing into lucid-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[Rex Tsai (chihchun)]

I have the debdiff for Maverick, Natty and Oneiric. But it seems this issue only happen with lucid. Does anyone have same issue in newer series?

[Stéphane Graber (stgraber)]

Unsubscribing sponsors for now as the SRU is pending review for lucid and it's not sure we actually need one for the others.

If it turns out we actually need to SRU for > lucid, then please attach the debdiffs and subscribe ubuntu-sponsors again.

Thanks for your work!

[Brian Murray (brian-murray)]

The fix for this bug has been awaiting testing feedback in the -proposed repository for lucid for more than 90 days. Please test this fix and update the bug appropriately with the results. In the event that the fix for this bug is still not verified 15 days from now, the package will be removed from the -proposed repository.

[Brian Murray (brian-murray)]

The version of libchewing in lucid-proposed has been removed as this bug report was not verified in a timely fashion.

[Rolf Leggewie (r0lf)]

oneiric has seen the end of its life and is no longer receiving any updates. Marking the oneiric task for this ticket as "Won't Fix".

[Rolf Leggewie (r0lf)]

lucid has seen the end of its life and is no longer receiving any updates. Marking the lucid task for this ticket as "Won't Fix".