[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[help] Bug#543323: /usr/bin/gtk-theme-switch2: crash, bad freelist



tag 543323 help
thanks 


On Mon, Aug 24, 2009 at 10:39:42AM +0200, Erwan David wrote:
> Package: gtk-theme-switch
> Version: 2.1.0-1
> Severity: normal
> File: /usr/bin/gtk-theme-switch2
> 
> When clicking on the "preview" button of gtk-theme-switch2, I got a
> crash with following trace :
> 
> 
> *** glibc detected *** gtk-theme-switch2: free(): invalid next size (fast): 0x08784590 ***
> ======= Backtrace: =========
> /lib/i686/cmov/libc.so.6[0xb76f88f4]
> /lib/i686/cmov/libc.so.6(cfree+0x96)[0xb76fa896]
> /usr/lib/libcairo.so.2[0xb79ed86d]
> /usr/lib/libcairo.so.2[0xb7a0e314]
> /usr/lib/libcairo.so.2[0xb79f308f]
> /usr/lib/libcairo.so.2[0xb79f3325]
> /usr/lib/libcairo.so.2[0xb79daae8]
> /usr/lib/libcairo.so.2(cairo_fill_preserve+0x2d)[0xb79d4cfd]
> /usr/lib/libcairo.so.2(cairo_fill+0x12)[0xb79d4d22]
> /usr/lib/libgdk-x11-2.0.so.0[0xb7b682db]
> /usr/lib/libgdk-x11-2.0.so.0(gdk_window_begin_paint_region+0x1bb)[0xb7b6a5fb]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x505)[0xb7cf3b35]
> /usr/lib/libgdk-x11-2.0.so.0[0xb7b6a9dd]
> /usr/lib/libgdk-x11-2.0.so.0(gdk_window_process_all_updates+0xff)[0xb7b6afef]
> /usr/lib/libgtk-x11-2.0.so.0[0xb7c6b8cf]
> /usr/lib/libgdk-x11-2.0.so.0[0xb7b4e84b]
> /usr/lib/libglib-2.0.so.0[0xb7820581]
> /usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb7822368]
> /usr/lib/libglib-2.0.so.0[0xb78258c3]
> /usr/lib/libglib-2.0.so.0(g_main_context_iteration+0x68)[0xb7825a48]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_main_iteration+0x34)[0xb7cf3c14]
> gtk-theme-switch2[0x804b725]
> gtk-theme-switch2[0x804b8cc]
> /usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x84)[0xb78ba174]
> /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1a3)[0xb78acb13]
> /usr/lib/libgobject-2.0.so.0[0xb78c0b3f]
> /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7b9)[0xb78c1f89]
> /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb78c23e6]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_button_clicked+0x8a)[0xb7c403ba]
> /usr/lib/libgtk-x11-2.0.so.0[0xb7c419a8]
> /usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__VOID+0x84)[0xb78ba174]
> /usr/lib/libgobject-2.0.so.0[0xb78ab299]
> /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1a3)[0xb78acb13]
> /usr/lib/libgobject-2.0.so.0[0xb78c03a8]
> /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x7b9)[0xb78c1f89]
> /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb78c23e6]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_button_released+0x8a)[0xb7c4045a]
> /usr/lib/libgtk-x11-2.0.so.0[0xb7c40493]
> /usr/lib/libgtk-x11-2.0.so.0[0xb7cf9ae6]
> /usr/lib/libgobject-2.0.so.0[0xb78ab299]
> /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x1a3)[0xb78acb13]
> /usr/lib/libgobject-2.0.so.0[0xb78c07e7]
> /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x64f)[0xb78c1e1f]
> /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x26)[0xb78c23e6]
> /usr/lib/libgtk-x11-2.0.so.0[0xb7e12566]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0xec)[0xb7cf25bc]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x2cf)[0xb7cf38ff]
> /usr/lib/libgdk-x11-2.0.so.0[0xb7b8287a]
> /usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1e8)[0xb7822368]
> /usr/lib/libglib-2.0.so.0[0xb78258c3]
> /usr/lib/libglib-2.0.so.0(g_main_loop_run+0x1ca)[0xb7825d8a]
> /usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb7cf3db9]
> gtk-theme-switch2[0x804d457]
> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb76a07a5]
> gtk-theme-switch2[0x804aaf1]
> ======= Memory map: ========
> 08048000-0804e000 r-xp 00000000 09:00 8407427    /usr/bin/gtk-theme-switch2
> 0804e000-0804f000 rw-p 00006000 09:00 8407427    /usr/bin/gtk-theme-switch2
> 085ef000-0879a000 rw-p 085ef000 00:00 0          [heap]
> b6c00000-b6c21000 rw-p b6c00000 00:00 0 
> b6c21000-b6d00000 ---p b6c21000 00:00 0 
> b6d4d000-b6d77000 r-xp 00000000 09:00 10731667   /lib/libgcc_s.so.1
> b6d77000-b6d78000 rw-p 00029000 09:00 10731667   /lib/libgcc_s.so.1
> b6d78000-b6dd8000 rw-s 00000000 00:08 1296826389  /SYSV00000000 (deleted)
> b6dd8000-b6de7000 r-xp 00000000 09:00 10731690   /lib/libbz2.so.1.0.4
> b6de7000-b6de8000 rw-p 0000f000 09:00 10731690   /lib/libbz2.so.1.0.4
> b6de8000-b6f18000 r-xp 00000000 09:00 8406328    /usr/lib/libxml2.so.2.7.3
> b6f18000-b6f1d000 rw-p 00130000 09:00 8406328    /usr/lib/libxml2.so.2.7.3
> b6f1d000-b6f1e000 rw-p b6f1d000 00:00 0 
> b6f1e000-b6f4f000 r-xp 00000000 09:00 8410594    /usr/lib/libcroco-0.6.so.3.0.1
> b6f4f000-b6f52000 rw-p 00030000 09:00 8410594    /usr/lib/libcroco-0.6.so.3.0.1
> b6f52000-b6f86000 r-xp 00000000 09:00 8406682    /usr/lib/libgsf-1.so.114.0.15
> b6f86000-b6f89000 rw-p 00033000 09:00 8406682    /usr/lib/libgsf-1.so.114.0.15
> b6f89000-b6f8a000 rw-p b6f89000 00:00 0 
> b6f8a000-b6fbb000 r-xp 00000000 09:00 8408684    /usr/lib/librsvg-2.so.2.26.0
> b6fbb000-b6fbc000 rw-p 00031000 09:00 8408684    /usr/lib/librsvg-2.so.2.26.0
> b6fcf000-b6fd0000 r-xp 00000000 09:00 8470898    /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
> b6fd0000-b6fd1000 rw-p 00000000 09:00 8470898    /usr/lib/gtk-2.0/2.10.0/loaders/svg_loader.so
> b6fd2000-b706a000 r--p 00000000 09:00 8454150    /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
> b706a000-b7077000 r--p 00000000 09:00 8749139    /usr/share/fonts/truetype/ttf-bitstream-vera/VeraMono.ttf
> b7077000-b7088000 r--p 00000000 09:00 8749132    /usr/share/fonts/truetype/ttf-bitstream-vera/Vera.ttf
> b7088000-b708a000 r-xp 00000000 09:00 8471076    /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
> b708a000-b708b000 rw-p 00001000 09:00 8471076    /usr/lib/pango/1.6.0/modules/pango-basic-fc.so
> b708b000-b7091000 r--s 00000000 09:00 6021566    /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-x86.cache-2
> b7091000-b7097000 r--s 00000000 09:00 6021546    /var/cache/fontconfig/e383d7ea5fbe662a33d9b44caf393297-x86.cache-2
> b7097000-b709a000 r--s 00000000 09:00 6021545    /var/cache/fontconfig/a46337af8a0b4c9b317ad981ec3bdf87-x86.cache-2
> b709a000-b709c000 r--s 00000000 09:00 6021752    /var/cache/fontconfig/b5ea634b0fb353b8ea17632d1f9ef766-x86.cache-2
> b709c000-b70a0000 r--s 00000000 09:00 6021416    /var/cache/fontconfig/926e794c3d5e5dffcaf2fa83ef8d36c2-x86.cache-2
> b70a0000-b70a3000 r--s 00000000 09:00 6021407    /var/cache/fontconfig/6eb3985aa4124903f6ff08ba781cd364-x86.cache-2
> b70a3000-b70a6000 r--s 00000000 09:00 6021757    /var/cache/fontconfig/515ca1ebc4b18308bea979be5704f9db-x86.cache-2
> b70a6000-b70ad000 r--s 00000000 09:00 6021360    /var/cache/fontconfig/6d41288fd70b0be22e8c3a91e032eec0-x86.cache-2
> b70ad000-b70b0000 r--s 00000000 09:00 6021359    /var/cache/fontconfig/de156ccd2eddbdc19d37a45b8b2aac9c-x86.cache-2
> b70b0000-b70b1000 r--s 00000000 09:00 6021358    /varzsh: abort      gtk-theme-switch2
> 
> 
> 
> -- System Information:
> Debian Release: squeeze/sid
>   APT prefers testing
>   APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
> Architecture: i386 (i686)
> 
> Kernel: Linux 2.6.26-2-686 (SMP w/2 CPU cores)
> Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages gtk-theme-switch depends on:
> ii  libatk1.0-0                   1.26.0-1   The ATK accessibility toolkit
> ii  libc6                         2.9-23     GNU C Library: Shared libraries
> ii  libcairo2                     1.8.8-2    The Cairo 2D vector graphics libra
> ii  libfontconfig1                2.6.0-4    generic font configuration library
> ii  libfreetype6                  2.3.9-5    FreeType 2 font engine, shared lib
> ii  libglib2.0-0                  2.20.4-1   The GLib library of C routines
> ii  libgtk2.0-0                   2.16.5-1   The GTK+ graphical user interface 
> ii  libpango1.0-0                 1.24.5-1   Layout and rendering of internatio
> 
> gtk-theme-switch recommends no packages.
> 
> gtk-theme-switch suggests no packages.
> 
> -- no debconf information
> 
> 

Hello,

I can't reproduce it each time into gdb.
I tried to ajust g_malloc value at line 614 (also the fgets value, line
616) to test if it was the culprit. But the bug don't happen each time...
It's very difficult to know exactly the correct value.
Maybe the issue is in another place.
Reproducible with the themes of package gnome-themes-more.
I tag this bug "help" and I send a carbon copy to debian-devel list.
thank you.

best regards

Denis Briand

Attachment: signature.asc
Description: Digital signature


Reply to: