[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#711584: gnome-control-center: *** Error in `gnome-control-center': free(): invalid pointer: 0x00007f6e3619c000 ***



Here is the backtrace with llvm debug symbols.



On Mon, 2013-06-10 at 20:41 +0200, Emilio Pozuelo Monfort wrote:
> On 10/06/13 20:31, Emilio Pozuelo Monfort wrote:
> > Given the gdb and valgrind traces from below, this definitely looks like a bug
> > in mesa or in llvm. Reassigning to mesa for now.
> 
> Can you install libllvm3.2-dbg and get another valgrind trace? Also attach the
> whole trace as there are more errors than the one you posted and the others may
> be relevant.
> 
> Thanks,
> Emilio
> 
> > 
> > Emilio
> > 
> >> 20130610-711584-valgrind-report
> >>
> >>
> >> ==4938== Memcheck, a memory error detector
> >> ==4938== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
> >> ==4938== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
> >> ==4938== Command: gnome-control-center
> >> ==4938== 
> >> ==4938== Invalid free() / delete / delete[] / realloc()
> >> ==4938==    at 0x4C2A64C: operator delete(void*) (vg_replace_malloc.c:480)
> >> ==4938==    by 0x28A9ECCB: ??? (in /usr/lib/x86_64-linux-gnu/libLLVM-3.2.so.1)
> >> ==4938==    by 0x7156B40: __run_exit_handlers (exit.c:77)
> >> ==4938==    by 0x7156BC4: exit (exit.c:99)
> >> ==4938==    by 0x713EA5B: (below main) (libc-start.c:294)
> >> ==4938==  Address 0x2a3813c0 is not stack'd, malloc'd or (recently) free'd
> >> ==4938== 
> >> ==4938== 
> >> ==4938== HEAP SUMMARY:
> >> ==4938==     in use at exit: 12,112,272 bytes in 61,580 blocks
> >> ==4938==   total heap usage: 410,774 allocs, 349,201 frees, 40,880,875 bytes allocated
> >> ==4938== 
> >> ==4938== LEAK SUMMARY:
> >> ==4938==    definitely lost: 24,106 bytes in 19 blocks
> >> ==4938==    indirectly lost: 11,744 bytes in 365 blocks
> >> ==4938==      possibly lost: 2,392,073 bytes in 21,204 blocks
> >> ==4938==    still reachable: 9,684,349 bytes in 39,992 blocks
> >> ==4938==         suppressed: 0 bytes in 0 blocks
> >> ==4938== Rerun with --leak-check=full to see details of leaked memory
> >> ==4938== 
> >> ==4938== For counts of detected and suppressed errors, rerun with: -v
> >> ==4938== ERROR SUMMARY: 7 errors from 1 contexts (suppressed: 2 from 2)
> >>
> >>
> >> gdb.txt
> >>
> >>
> >> Starting program: /usr/bin/gnome-control-center 
> >> warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000
> >> warning: Could not load shared library symbols for linux-vdso.so.1.
> >> Do you need "set solib-search-path" or "set sysroot"?
> >> [Thread debugging using libthread_db enabled]
> >> Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
> >> [New Thread 0x7fffef838700 (LWP 5990)]
> >> [New Thread 0x7fffd1fe9700 (LWP 5991)]
> >>
> >> Program received signal SIGABRT, Aborted.
> >> 0x00007ffff5779295 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
> >> 56	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
> >> #0  0x00007ffff5779295 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
> >> #1  0x00007ffff577c438 in __GI_abort () at abort.c:90
> >> #2  0x00007ffff57b486b in __libc_message (do_abort=do_abort@entry=2, 
> >>     fmt=fmt@entry=0x7ffff58b0d28 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
> >> #3  0x00007ffff57beac6 in malloc_printerr (action=3, str=0x7ffff58accca "free(): invalid pointer", ptr=<optimized out>)
> >>     at malloc.c:4902
> >> #4  0x00007ffff57bf843 in _int_free (av=<optimized out>, p=0x7fffd16ecff0, have_lock=0) at malloc.c:3758
> >> #5  0x00007fffd38f570e in get_mesa_program (shader=0x1041590, shader_program=0xb942c0, ctx=0xaf6140)
> >>     at ../../../../src/mesa/state_tracker/st_glsl_to_tgsi.cpp:5045
> >> #6  st_link_shader (ctx=0xaf6140, prog=0xb942c0) at ../../../../src/mesa/state_tracker/st_glsl_to_tgsi.cpp:5222
> >> #7  0x00007fffd3963672 in _mesa_glsl_link_shader (ctx=0xaf6140, prog=0xb942c0)
> >>     at ../../../../../src/mesa/program/ir_to_mesa.cpp:3182
> >> #8  0x00007fffd3825617 in create_new_program (key=0x7fffffffd7c0, ctx=0xaf6140)
> >>     at ../../../../src/mesa/main/ff_fragment_shader.cpp:1352
> >> #9  _mesa_get_fixed_func_fragment_program (ctx=ctx@entry=0xaf6140) at ../../../../src/mesa/main/ff_fragment_shader.cpp:1398
> >> #10 0x00007fffd387234a in update_program (ctx=0xaf6140) at ../../../../src/mesa/main/state.c:153
> >> #11 _mesa_update_state_locked (ctx=ctx@entry=0xaf6140) at ../../../../src/mesa/main/state.c:557
> >> #12 0x00007fffd38725c1 in _mesa_update_state (ctx=ctx@entry=0xaf6140) at ../../../../src/mesa/main/state.c:588
> >> #13 0x00007fffd3838106 in check_extra (func=0x7fffd3b65ee7 "glGetIntegerv", ctx=0xaf6140, d=<optimized out>)
> >>     at ../../../../src/mesa/main/get.c:948
> >> #14 find_value (func=func@entry=0x7fffd3b65ee7 "glGetIntegerv", pname=<optimized out>, p=p@entry=0x7fffffffd998, 
> >>     v=v@entry=0x7fffffffd9a0) at ../../../../src/mesa/main/get.c:1063
> >> #15 0x00007fffd38386b3 in _mesa_GetIntegerv (pname=<optimized out>, params=0x7fffffffdb6c) at ../../../../src/mesa/main/get.c:1281
> >> #16 0x00007fffd548eb2c in ?? () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
> >> #17 0x00007fffd54d961a in ?? () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
> >> #18 0x00007fffd54972bb in cogl_context_new () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
> >> #19 0x00007fffd5970333 in clutter_backend_real_create_context (error=0x7fffffffdde8, backend=0x83d790) at ./clutter-backend.c:341
> >> #20 clutter_backend_real_create_context (backend=0x83d790, error=0x7fffffffdde8) at ./clutter-backend.c:256
> >> #21 0x00007fffd59872b3 in _clutter_feature_init (error=error@entry=0x7fffffffdde8) at ./clutter-feature.c:107
> >> #22 0x00007fffd5992cda in clutter_init_real (error=error@entry=0x7fffffffdde8) at ./clutter-main.c:1571
> >> #23 0x00007fffd5992f0b in post_parse_hook (error=0x7fffffffdde8, context=<optimized out>, group=<optimized out>, 
> >>     data=<optimized out>) at ./clutter-main.c:1782
> >> #24 post_parse_hook (context=<optimized out>, group=<optimized out>, data=<optimized out>, error=0x7fffffffdde8)
> >>     at ./clutter-main.c:1750
> >> #25 0x00007ffff609c757 in g_option_context_parse () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
> >> #26 0x00007fffd59931d2 in clutter_parse_args (error=0x7fffffffdde0, argv=0x0, argc=0x0) at ./clutter-main.c:2018
> >> #27 clutter_init (argc=0x0, argv=0x0) at ./clutter-main.c:2080
> >> #28 0x00007fffd5e54e34 in cheese_gtk_init () from /usr/lib/x86_64-linux-gnu/libcheese-gtk.so.21
> >> #29 0x00007fffd60782e3 in g_io_module_load () from /usr/lib/control-center-1/panels/libuser-accounts.so
> >> #30 0x00007ffff65ef4f6 in ?? () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
> >> #31 0x00007ffff63775a1 in g_type_module_use () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> >> #32 0x00007ffff65ef8d4 in g_io_modules_load_all_in_directory_with_scope () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
> >> #33 0x00000000004098da in ?? ()
> >> #34 0x00007ffff637493f in g_type_create_instance () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> >> #35 0x00007ffff6359758 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> >> #36 0x00007ffff635b211 in g_object_newv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> >> #37 0x00007ffff635b85c in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> >> #38 0x0000000000407c62 in main ()
> >> A debugging session is active.
> > 
> 

Starting program: /usr/bin/gnome-control-center 
warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000
warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffef838700 (LWP 4995)]
[New Thread 0x7fffd1fe9700 (LWP 4998)]

Program received signal SIGABRT, Aborted.
0x00007ffff5779295 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
#0  0x00007ffff5779295 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007ffff577c438 in __GI_abort () at abort.c:90
#2  0x00007ffff57b486b in __libc_message (do_abort=do_abort@entry=2, 
    fmt=fmt@entry=0x7ffff58b0d28 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
#3  0x00007ffff57beac6 in malloc_printerr (action=3, str=0x7ffff58accca "free(): invalid pointer", ptr=<optimized out>)
    at malloc.c:4902
#4  0x00007ffff57bf843 in _int_free (av=<optimized out>, p=0x7fffd16ecff0, have_lock=0) at malloc.c:3758
#5  0x00007fffd38f570e in get_mesa_program (shader=0x105b270, shader_program=0xbadf80, ctx=0xb0fe00)
    at ../../../../src/mesa/state_tracker/st_glsl_to_tgsi.cpp:5045
#6  st_link_shader (ctx=0xb0fe00, prog=0xbadf80) at ../../../../src/mesa/state_tracker/st_glsl_to_tgsi.cpp:5222
#7  0x00007fffd3963672 in _mesa_glsl_link_shader (ctx=0xb0fe00, prog=0xbadf80)
    at ../../../../../src/mesa/program/ir_to_mesa.cpp:3182
#8  0x00007fffd3825617 in create_new_program (key=0x7fffffffd790, ctx=0xb0fe00)
    at ../../../../src/mesa/main/ff_fragment_shader.cpp:1352
#9  _mesa_get_fixed_func_fragment_program (ctx=ctx@entry=0xb0fe00) at ../../../../src/mesa/main/ff_fragment_shader.cpp:1398
#10 0x00007fffd387234a in update_program (ctx=0xb0fe00) at ../../../../src/mesa/main/state.c:153
#11 _mesa_update_state_locked (ctx=ctx@entry=0xb0fe00) at ../../../../src/mesa/main/state.c:557
#12 0x00007fffd38725c1 in _mesa_update_state (ctx=ctx@entry=0xb0fe00) at ../../../../src/mesa/main/state.c:588
#13 0x00007fffd3838106 in check_extra (func=0x7fffd3b65ee7 "glGetIntegerv", ctx=0xb0fe00, d=<optimized out>)
    at ../../../../src/mesa/main/get.c:948
#14 find_value (func=func@entry=0x7fffd3b65ee7 "glGetIntegerv", pname=<optimized out>, p=p@entry=0x7fffffffd968, 
    v=v@entry=0x7fffffffd970) at ../../../../src/mesa/main/get.c:1063
#15 0x00007fffd38386b3 in _mesa_GetIntegerv (pname=<optimized out>, params=0x7fffffffdb3c) at ../../../../src/mesa/main/get.c:1281
#16 0x00007fffd548eb2c in ?? () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
#17 0x00007fffd54d961a in ?? () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
#18 0x00007fffd54972bb in cogl_context_new () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
#19 0x00007fffd5970333 in ?? () from /usr/lib/x86_64-linux-gnu/libclutter-1.0.so.0
#20 0x00007fffd59872b3 in ?? () from /usr/lib/x86_64-linux-gnu/libclutter-1.0.so.0
#21 0x00007fffd5992cda in ?? () from /usr/lib/x86_64-linux-gnu/libclutter-1.0.so.0
#22 0x00007fffd5992f0b in ?? () from /usr/lib/x86_64-linux-gnu/libclutter-1.0.so.0
#23 0x00007ffff609c757 in g_option_context_parse () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#24 0x00007fffd59931d2 in clutter_init () from /usr/lib/x86_64-linux-gnu/libclutter-1.0.so.0
#25 0x00007fffd5e54e34 in cheese_gtk_init () from /usr/lib/x86_64-linux-gnu/libcheese-gtk.so.21
#26 0x00007fffd60782e3 in g_io_module_load () from /usr/lib/control-center-1/panels/libuser-accounts.so
#27 0x00007ffff65ef4f6 in ?? () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
#28 0x00007ffff63775a1 in g_type_module_use () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#29 0x00007ffff65ef8d4 in g_io_modules_load_all_in_directory_with_scope () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
#30 0x00000000004098da in ?? ()
#31 0x00007ffff637493f in g_type_create_instance () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#32 0x00007ffff6359758 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#33 0x00007ffff635b211 in g_object_newv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#34 0x00007ffff635b85c in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#35 0x0000000000407c62 in main ()
A debugging session is active.

	Inferior 1 [process 4975] will be killed.

Quit anyway? (y or n) 
==4929== Memcheck, a memory error detector
==4929== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
==4929== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
==4929== Command: gnome-control-center
==4929== Parent PID: 4692
==4929== 
==4929== Invalid free() / delete / delete[] / realloc()
==4929==    at 0x4C2A64C: operator delete(void*) (vg_replace_malloc.c:480)
==4929==    by 0x28A9ECCB: llvm::cl::opt<std::string, false, llvm::cl::parser<std::string> >::~opt() (in /usr/lib/x86_64-linux-gnu/libLLVM-3.2.so.1)
==4929==    by 0x7156B40: __run_exit_handlers (exit.c:77)
==4929==    by 0x7156BC4: exit (exit.c:99)
==4929==    by 0x713EA5B: (below main) (libc-start.c:294)
==4929==  Address 0x2a3813c0 is not stack'd, malloc'd or (recently) free'd
==4929== 
==4929== 
==4929== HEAP SUMMARY:
==4929==     in use at exit: 11,853,688 bytes in 61,162 blocks
==4929==   total heap usage: 415,576 allocs, 354,421 frees, 41,576,047 bytes allocated
==4929== 
==4929== LEAK SUMMARY:
==4929==    definitely lost: 24,106 bytes in 19 blocks
==4929==    indirectly lost: 11,744 bytes in 365 blocks
==4929==      possibly lost: 2,047,742 bytes in 19,034 blocks
==4929==    still reachable: 9,770,096 bytes in 41,744 blocks
==4929==         suppressed: 0 bytes in 0 blocks
==4929== Rerun with --leak-check=full to see details of leaked memory
==4929== 
==4929== For counts of detected and suppressed errors, rerun with: -v
==4929== ERROR SUMMARY: 7 errors from 1 contexts (suppressed: 2 from 2)

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: