[Bug 374470] New: gnome-main-menu crash
https://bugzilla.novell.com/show_bug.cgi?id=374470 Summary: gnome-main-menu crash Product: openSUSE 11.0 Version: Factory Platform: i686 OS/Version: openSUSE 11.0 Status: NEW Severity: Normal Priority: P5 - None Component: GNOME AssignedTo: bnc-team-gnome@forge.provo.novell.com ReportedBy: james@usr-local-bin.org QAContact: qa@suse.de Found By: --- Created an attachment (id=204377) --> (https://bugzilla.novell.com/attachment.cgi?id=204377) Trace. Unlocked gnome-screensaver, gnome-main-menu crashed. Attaching trace. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=374470 Federico Mena Quintero <federico@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |federico@novell.com Blocks| |341831 Severity|Normal |Major Status Whiteboard| |gnome-crash -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=374470 User federico@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=374470#c1 --- Comment #1 from Federico Mena Quintero <federico@novell.com> 2008-03-31 17:42:30 MST --- I get a similar crash, apparently when my DHCP lease gets renewed. Valgrind says this: ==18365== Invalid read of size 4 ==18365== at 0x51B9C3B: g_object_unref (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x521D50A: (within /usr/lib/libglib-2.0.so.0.1600.1) ==18365== by 0x521E453: (within /usr/lib/libglib-2.0.so.0.1600.1) ==18365== by 0x4069E06: (within /usr/lib/libnm_glib.so.0.0.0) ==18365== by 0x51C499B: g_cclosure_marshal_VOID__BOXED (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x44587DE: (within /usr/lib/libdbus-glib-1.so.2.1.0) ==18365== by 0x51B7C3A: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x51CC41C: (within /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x51CD94D: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x51CDDB5: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x4459A66: (within /usr/lib/libdbus-glib-1.so.2.1.0) ==18365== by 0x462B724: dbus_connection_dispatch (in /lib/libdbus-1.so.3.4.0) ==18365== Address 0x64b34c0 is 0 bytes inside a block of size 382 free'd ==18365== at 0x4024E7C: realloc (in /usr/lib/valgrind/x86-linux/vgpreload_memcheck.so) ==18365== by 0x4F0F7CD: (within /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x4F0FB38: (within /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x4F0FB85: (within /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x4F10752: (within /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x4F10885: FcCharSetUnion (in /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x4F194DD: FcFontSetSort (in /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x4F1977A: FcFontSort (in /usr/lib/libfontconfig.so.1.2.0) ==18365== by 0x43B6ACB: (within /usr/lib/libpangoft2-1.0.so.0.2000.0) ==18365== by 0x4E5B379: pango_font_map_load_fontset (in /usr/lib/libpango-1.0.so.0.2000.0) ==18365== by 0x4E58F8B: (within /usr/lib/libpango-1.0.so.0.2000.0) ==18365== by 0x4E5946E: pango_itemize_with_base_dir (in /usr/lib/libpango-1.0.so.0.2000.0) ==18365== ==18365== Invalid read of size 4 ==18365== at 0x51B9C41: g_object_unref (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x521D50A: (within /usr/lib/libglib-2.0.so.0.1600.1) ==18365== by 0x521E453: (within /usr/lib/libglib-2.0.so.0.1600.1) ==18365== by 0x4069E06: (within /usr/lib/libnm_glib.so.0.0.0) ==18365== by 0x51C499B: g_cclosure_marshal_VOID__BOXED (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x44587DE: (within /usr/lib/libdbus-glib-1.so.2.1.0) ==18365== by 0x51B7C3A: g_closure_invoke (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x51CC41C: (within /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x51CD94D: g_signal_emit_valist (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x51CDDB5: g_signal_emit (in /usr/lib/libgobject-2.0.so.0.1600.1) ==18365== by 0x4459A66: (within /usr/lib/libdbus-glib-1.so.2.1.0) ==18365== by 0x462B724: dbus_connection_dispatch (in /lib/libdbus-1.so.3.4.0) ==18365== Address 0x10000 is not stack'd, malloc'd or (recently) free'd So the bug seems to have been introduced with gnome-main-menu_to_NM7.patch. Some things that seem suspicious from the patch: * network_status_agent_dispose() should NULL out priv->nm_client, as the dispose method may be called more than once. * network-status-agent.c:nm_get_first_active_device_info() connects to "status-changed" on the device object, with the "agent" as the closure. What's the lifetime of the agent? If the agent can be freed before the underlying device is freed, then the agent should disconnect from the device at dispose time. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=374470 JP Rosevear <jpr@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-gnome@forge.provo.novell.com |federico@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=374470 User federico@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=374470#c2 Federico Mena Quintero <federico@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE --- Comment #2 from Federico Mena Quintero <federico@novell.com> 2008-04-07 09:30:18 MST --- *** This bug has been marked as a duplicate of bug 377019 *** https://bugzilla.novell.com/show_bug.cgi?id=377019 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com