https://bugzilla.novell.com/show_bug.cgi?id=464029 Summary: Nautilus crashes when an audio CD is inserted (nautilus, libhal, libgnomebreakpad) Product: openSUSE 11.1 Version: Final Platform: x86-64 OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: GNOME AssignedTo: bnc-team-gnome@forge.provo.novell.com ReportedBy: abockover@novell.com QAContact: qa@suse.de CC: jpr@novell.com Found By: --- Nautilus does not show the media action dialog when I insert hardware (specifically testing with an audio CD, but likely this is common to any kind of DeviceAdded message from HAL). Because there also appears to be a crash in libgnomebreakpad, no indication of a crash is presented to the user, Nautilus just restarts and the cursor is "busy" for a few seconds. This is likely a problem inside libhal. I traced it down to filter_func inside of libhal.c inside the handler for the DeviceAdded message: if (ctx->device_removed != NULL) { ctx->device_removed (ctx, udi); } ctx->device_removed is 0x88 for me, which seems like a pretty odd address. In any case, the NULL check fails, it's called, and we crash. Additionally, there appears to be a further crash inside of libgnomebreakpad. Full debugging session below. I have the following debuginfo/debugsource packages installed: dbus-1-glib, glibc, gtk2, hal, nautilus aaron@giggidy:~$ gdb nautilus GNU gdb (GDB; openSUSE 11.1) 6.8.50.20081120-cvs Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-suse-linux". For bug reporting instructions, please see: http://bugs.opensuse.org/... (gdb) run --sm-disable Starting program: /usr/bin/nautilus --sm-disable [Thread debugging using libthread_db enabled] Initializing nautilus-share extension Initializing nautilus-dice extension (nautilus:11093): GLib-GObject-WARNING **: Two different plugins tried to register 'NautilusBurn'. (nautilus:11093): GLib-GObject-CRITICAL **: g_type_add_interface_dynamic: assertion `G_TYPE_IS_INSTANTIATABLE (instance_type)' failed (nautilus:11093): GLib-GObject-CRITICAL **: g_type_add_interface_dynamic: assertion `G_TYPE_IS_INSTANTIATABLE (instance_type)' failed Initializing nautilus-open-terminal extension [New Thread 0x7fffe1cf2950 (LWP 11098)] [New Thread 0x7fffe0dc8950 (LWP 11099)] Nautilus-Share-Message: REFRESHING SHARES Nautilus-Share-Message: ------------------------------------------ Nautilus-Share-Message: spawn arg "net" Nautilus-Share-Message: spawn arg "usershare" Nautilus-Share-Message: spawn arg "info" Nautilus-Share-Message: end of spawn args; SPAWNING Nautilus-Share-Message: returned from spawn: SUCCESS: Nautilus-Share-Message: exit code 255 Nautilus-Share-Message: ------------------------------------------ Nautilus-Share-Message: Called "net usershare info" but it failed: 'net usershare' returned error 255: net usershare: usershares are currently disabled ** (nautilus:11093): WARNING **: Unable to add monitor: Not supported [Thread 0x7fffe0dc8950 (LWP 11099) exited] [Thread 0x7fffe1cf2950 (LWP 11098) exited] Program received signal SIGSEGV, Segmentation fault. 0x0000000000000088 in ?? () (gdb) bt #0 0x0000000000000088 in ?? () #1 0x00007fffe9234259 in filter_func (connection=0x833520, message=0x86ca40, user_data=<value optimized out>) at libhal.c:1065 #2 0x00007fffefb7386b in dbus_connection_dispatch () from /lib64/libdbus-1.so.3 #3 0x00007fffeffc41c5 in message_queue_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at dbus-gmain.c:101 #4 0x00007fffeee0c0db in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0 #5 0x00007fffeee0f8ad in ?? () from /usr/lib64/libglib-2.0.so.0 #6 0x00007fffeee0fddd in g_main_loop_run () from /usr/lib64/libglib-2.0.so.0 #7 0x00007ffff28e4227 in IA__gtk_main () at gtkmain.c:1200 #8 0x0000000000442704 in main (argc=<value optimized out>, argv=0x7fffffffdad8) at nautilus-main.c:596 (gdb) up #1 0x00007fffe9234259 in filter_func (connection=0x833520, message=0x86ca40, user_data=<value optimized out>) at libhal.c:1065 1065 ctx->device_removed (ctx, udi); (gdb) p ctx $1 = (LibHalContext *) 0x84d470 (gdb) pt LibHalContext type = struct LibHalContext_s { DBusConnection *connection; dbus_bool_t is_initialized; dbus_bool_t is_shutdown; dbus_bool_t cache_enabled; dbus_bool_t is_direct; LibHalDeviceAdded device_added; LibHalDeviceRemoved device_removed; LibHalDeviceNewCapability device_new_capability; LibHalDeviceLostCapability device_lost_capability; LibHalDevicePropertyModified device_property_modified; LibHalDeviceCondition device_condition; LibHalGlobalInterfaceLockAcquired global_interface_lock_acquired; LibHalGlobalInterfaceLockReleased global_interface_lock_released; LibHalInterfaceLockAcquired interface_lock_acquired; LibHalInterfaceLockReleased interface_lock_released; LibHalSingletonDeviceAdded singleton_device_added; LibHalSingletonDeviceRemoved singleton_device_removed; void *user_data; } (gdb) p ctx->device_removed $2 = (LibHalDeviceRemoved) 0 (gdb) p ctx->device_added $3 = (LibHalDeviceAdded) 0x88 (gdb) p udi $4 = 0x1055534 "/org/freedesktop/Hal/devices/volume_part_1_size_373985280" (gdb) p (char *)dbus_message_get_path (message) $5 = 0xe1ae18 "/org/freedesktop/Hal/Manager" (gdb) p (char *)dbus_message_get_interface (message) $6 = 0xe1ae40 "org.freedesktop.Hal.Manager" (gdb) p (char *)dbus_message_get_member (message) $7 = 0xe1ae68 "DeviceAdded" (gdb) set ctx->device_added = 0 (gdb) p ctx->device_added $8 = (LibHalDeviceAdded) 0 (gdb) c Continuing. *** glibc detected *** /usr/bin/nautilus: free(): invalid pointer: 0x00007fffef2c7694 *** Program received signal SIGSEGV, Segmentation fault. 0x00007fffeb95554f in ?? () from /lib64/libgcc_s.so.1 (gdb) bt #0 0x00007fffeb95554f in ?? () from /lib64/libgcc_s.so.1 #1 0x00007fffeb955e1b in _Unwind_Backtrace () from /lib64/libgcc_s.so.1 #2 0x00007fffecc3773e in *__GI___backtrace (array=<value optimized out>, size=64) at ../sysdeps/ia64/backtrace.c:85 #3 0x00007fffecbc18fc in __libc_message (do_abort=2, fmt=0x7fffecc75f40 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:150 #4 0x00007fffecbc7118 in malloc_printerr (action=2, str=0x7fffecc73556 "free(): invalid pointer", ptr=<value optimized out>) at malloc.c:5994 #5 0x00007fffecbc8c76 in *__GI___libc_free (mem=0x7ffff7ffe4c0) at malloc.c:3625 #6 0x00007fffeb30e8df in ?? () from /usr/lib64/gtk-2.0/modules/libgnomebreakpad.so #7 0x00007fffeb30e9c9 in ?? () from /usr/lib64/gtk-2.0/modules/libgnomebreakpad.so #8 <signal handler called> #9 0x0000000000000088 in ?? () #10 0x00007fffe9234259 in filter_func (connection=0x833520, message=0x86ca40, user_data=<value optimized out>) at libhal.c:1065 #11 0x00007fffefb7386b in dbus_connection_dispatch () from /lib64/libdbus-1.so.3 #12 0x00007fffeffc41c5 in message_queue_dispatch (source=<value optimized out>, callback=<value optimized out>, user_data=<value optimized out>) at dbus-gmain.c:101 #13 0x00007fffeee0c0db in g_main_context_dispatch () from /usr/lib64/libglib-2.0.so.0 #14 0x00007fffeee0f8ad in ?? () from /usr/lib64/libglib-2.0.so.0 #15 0x00007fffeee0fddd in g_main_loop_run () from /usr/lib64/libglib-2.0.so.0 #16 0x00007ffff28e4227 in IA__gtk_main () at gtkmain.c:1200 #17 0x0000000000442704 in main (argc=<value optimized out>, argv=0x7fffffffdad8) at nautilus-main.c:596 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.