unity-panel-service crashed with SIGSEGV in gtk_menu_tracker_remove_items()

Bug #1499133 reported by Angel Guzman Maeso
24
This bug affects 4 people
Affects Status Importance Assigned to Milestone
Unity
Triaged
High
Unassigned
unity (Ubuntu)
Triaged
High
Unassigned

Bug Description

Crash in panel using Eclipse (not sure if Eclipse trigger this bug)

ProblemType: Crash
DistroRelease: Ubuntu 15.10
Package: unity-services 7.3.2+15.10.20150921-0ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-22.29-generic 3.16.4
Uname: Linux 3.16.0-22-generic x86_64
.tmp.unity.support.test.0:

ApportVersion: 2.18.1-0ubuntu1
Architecture: amd64
BootLog:

CompizPlugins: No value set for `/apps/compiz-1/general/screen0/options/active_plugins'
CompositorRunning: compiz
CompositorUnredirectDriverBlacklist: '(nouveau|Intel).*Mesa 8.0'
CompositorUnredirectFSW: true
CurrentDesktop: Unity
Date: Thu Sep 24 03:39:33 2015
DistUpgraded: Fresh install
DistroCodename: wily
DistroVariant: ubuntu
DkmsStatus: virtualbox, 5.0.4: added
ExecutablePath: /usr/lib/unity/unity-panel-service
GraphicsCard:
 Advanced Micro Devices, Inc. [AMD/ATI] Madison [Mobility Radeon HD 5650/5750 / 6530M/6550M] [1002:68c1] (prog-if 00 [VGA controller])
   Subsystem: Acer Incorporated [ALI] Mobility Radeon HD 5650 [1025:042f]
InstallationDate: Installed on 2014-05-08 (503 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140417)
MachineType: Acer Aspire 5943G
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.16.0-22-generic root=UUID=e9be64c9-5b7e-438a-ac82-6b89bf946a86 ro quiet splash vt.handoff=7
SegvAnalysis:
 Segfault happened at: 0x7f24b28143ec: mov (%rdi),%rbx
 PC (0x7f24b28143ec) ok
 source "(%rdi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%rbx" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
 ?? () from /usr/lib/x86_64-linux-gnu/libgtk-3.so.0
 ffi_call_unix64 () from /usr/lib/x86_64-linux-gnu/libffi.so.6
 ffi_call () from /usr/lib/x86_64-linux-gnu/libffi.so.6
 g_cclosure_marshal_generic () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
 g_closure_invoke () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: unity-panel-service crashed with SIGSEGV in ffi_call_unix64()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 10/21/2010
dmi.bios.vendor: Acer
dmi.bios.version: V1.15
dmi.board.asset.tag: Base Board Asset Tag
dmi.board.name: Aspire 5943G
dmi.board.vendor: Acer
dmi.board.version: V1.15
dmi.chassis.type: 10
dmi.chassis.vendor: Acer
dmi.chassis.version: V1.15
dmi.modalias: dmi:bvnAcer:bvrV1.15:bd10/21/2010:svnAcer:pnAspire5943G:pvrV1.15:rvnAcer:rnAspire5943G:rvrV1.15:cvnAcer:ct10:cvrV1.15:
dmi.product.name: Aspire 5943G
dmi.product.version: V1.15
dmi.sys.vendor: Acer
version.compiz: compiz 1:0.9.12.2+15.10.20150908-0ubuntu1
version.ia32-libs: ia32-libs N/A
version.libdrm2: libdrm2 2.4.64-1
version.libgl1-mesa-dri: libgl1-mesa-dri 11.0.0-1ubuntu1
version.libgl1-mesa-dri-experimental: libgl1-mesa-dri-experimental N/A
version.libgl1-mesa-glx: libgl1-mesa-glx 11.0.0-1ubuntu1
version.xserver-xorg-core: xserver-xorg-core 2:1.17.2-1ubuntu7
version.xserver-xorg-input-evdev: xserver-xorg-input-evdev 1:2.9.2-1ubuntu1
version.xserver-xorg-video-ati: xserver-xorg-video-ati 1:7.5.0+git20150819-0ubuntu1
version.xserver-xorg-video-intel: xserver-xorg-video-intel 2:2.99.917+git20150808-0ubuntu2
version.xserver-xorg-video-nouveau: xserver-xorg-video-nouveau 1:1.0.11-1ubuntu3
xserver.bootTime: Thu Sep 24 02:58:04 2015
xserver.configfile: default
xserver.errors:

xserver.logfile: /var/log/Xorg.0.log
xserver.version: 2:1.17.2-1ubuntu7
xserver.video_driver: radeon

Revision history for this message
Angel Guzman Maeso (shakaran) wrote :
Revision history for this message
Apport retracing service (apport) wrote :

StacktraceTop:
 gtk_menu_tracker_remove_items (tracker=0x7f2494030ac0, tracker=0x7f2494030ac0, n_items=1, offset=<optimized out>, change_point=0x7f2494121868) at /build/gtk+3.0-gB0ETz/gtk+3.0-3.16.7/./gtk/gtkmenutracker.c:290
 gtk_menu_tracker_model_changed (model=0x1b0c700, position=-1, removed=1, added=1, user_data=0x7f2494030ac0) at /build/gtk+3.0-gB0ETz/gtk+3.0-3.16.7/./gtk/gtkmenutracker.c:451
 ffi_call_unix64 () at ../src/x86/unix64.S:76
 ffi_call (cif=cif@entry=0x7fffc104ac10, fn=<optimized out>, rvalue=0x7fffc104ab70, avalue=avalue@entry=0x7fffc104aaf0) at ../src/x86/ffi64.c:525
 g_cclosure_marshal_generic (closure=0x1b129f0, return_gvalue=0x0, n_param_values=<optimized out>, param_values=0x7fffc104ae40, invocation_hint=<optimized out>, marshal_data=0x0) at /build/glib2.0-QXxxHj/glib2.0-2.45.8/./gobject/gclosure.c:1481

Revision history for this message
Apport retracing service (apport) wrote : Stacktrace.txt
Revision history for this message
Apport retracing service (apport) wrote : StacktraceSource.txt
Revision history for this message
Apport retracing service (apport) wrote : ThreadStacktrace.txt
Changed in unity (Ubuntu):
importance: Undecided → Medium
summary: - unity-panel-service crashed with SIGSEGV in ffi_call_unix64()
+ unity-panel-service crashed with SIGSEGV in
+ gtk_menu_tracker_remove_items()
tags: removed: need-amd64-retrace
Revision history for this message
Sebastien Bacher (seb128) wrote :

getting the same when closing pidgin here

information type: Private → Public
Changed in unity (Ubuntu):
importance: Medium → High
tags: added: rls-w-incoming
Changed in unity (Ubuntu):
status: New → Confirmed
Revision history for this message
Sebastien Bacher (seb128) wrote :

under valgrind it shows that invalid read

==4150== 1 errors in context 1 of 1:
==4150== Invalid read of size 4
==4150== at 0x444FE59: gtk_menu_tracker_remove_items (gtkmenutracker.c:290)
==4150== by 0x444FE59: gtk_menu_tracker_model_changed (gtkmenutracker.c:451)
==4150== by 0x55D1D11: ffi_call_SYSV (sysv.S:65)
==4150== by 0x55D198B: ffi_call (ffi.c:389)
==4150== by 0x4D183AC: g_cclosure_marshal_generic (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D17B8A: g_closure_invoke (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D29FFB: signal_emit_unlocked_R (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D32C95: g_signal_emit_valist (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4D32FC4: g_signal_emit (in /usr/lib/i386-linux-gnu/libgobject-2.0.so.0.4600.0)
==4150== by 0x4BF4F6B: g_menu_model_items_changed (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4BF852D: g_dbus_menu_group_changed (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4BF8C07: g_dbus_menu_path_signal (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4C10DCE: emit_signal_instance_in_idle_cb (in /usr/lib/i386-linux-gnu/libgio-2.0.so.0.4600.0)
==4150== by 0x4DAC40F: g_idle_dispatch (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x4DAFB9A: g_main_context_dispatch (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x4DAFF88: g_main_context_iterate.isra.29 (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x4DB0338: g_main_loop_run (in /lib/i386-linux-gnu/libglib-2.0.so.0.4600.0)
==4150== by 0x442F99D: gtk_main (gtkmain.c:1219)
==4150== by 0x804C313: main (in /usr/lib/unity/unity-panel-service)

Changed in unity:
importance: Undecided → High
status: New → Confirmed
Revision history for this message
Alex Baggott (alex-baggott) wrote :

Thank you for taking the time to report this bug. Unfortunately we can’t work out how to recreate this bug from your description. Please describe the process you go through to trigger this bug and then change the bug status to NEW. See this page for more information. https://wiki.ubuntu.com/BigDesktopBugScrub

Changed in unity:
status: Confirmed → Incomplete
Changed in unity (Ubuntu):
status: Confirmed → Incomplete
tags: added: bugpattern-needed
Revision history for this message
Michael Thayer (michael-thayer) wrote :
Revision history for this message
Andrea Azzarone (azzar1) wrote :

Michael, I don't think so.

Changed in unity:
status: Incomplete → Triaged
Changed in unity (Ubuntu):
status: Incomplete → Triaged
To post a comment you must log in.