What I did: 1 - Selected text tool 2 - Changed style to outline and fill 3 - Tried to change the solid color of the outline Expected behaviour is not crashing. Package is used on its out-of-box configuration. No change was made. Kernel version: Linux debian-pc 6.12.38+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.38-1 (2025-07-16) x86_64 GNU/Linux CPU: AMD Ryzen 3 5300G RAM: 32 GB DDR4 GPU: Integrated OS: Debian 13 <!-- Copy-paste this whole debug data to report to developers --> ``` GNU Image Manipulation Program version 3.0.4 git-describe: GIMP_3_0_4 Build: unknown rev 0 for linux # C compiler # Using built-in specs. COLLECT_GCC=/usr/bin/cc COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa OFFLOAD_TARGET_DEFAULT=1 Target: x86_64-linux-gnu Configured with: ../src/configure -v --with-pkgversion='Debian 14.2.0-19' --with-bugurl=file:///usr/share/doc/gcc-14/README.Bugs --enable-languages=c,ada,c++,go,d,fortran,objc,obj-c++,m2,rust --prefix=/usr --with-gcc-major-version-only --program-suffix=-14 --program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id --libexecdir=/usr/libexec --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-libstdcxx-backtrace --enable-gnu-unique-object --disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib --enable-libphobos-checking=release --with-target-system-zlib=auto --enable-objc-gc=auto --enable-multiarch --disable-werror --enable-cet --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-offload-targets=nvptx-none=/build/reproducible-path/gcc-14-14.2.0/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/reproducible-path/gcc-14-14.2.0/debian/tmp-gcn/usr --enable-offload-defaulted --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu --with-build-config=bootstrap-lto-lean --enable-link-serialization=3 Thread model: posix Supported LTO compression algorithms: zlib zstd gcc version 14.2.0 (Debian 14.2.0-19) # Libraries # using babl version 0.1.114 (compiled against version 0.1.114) using GEGL version 0.4.62 (compiled against version 0.4.62) using GLib version 2.84.3 (compiled against version 2.84.3) using GdkPixbuf version 2.42.12 (compiled against version 2.42.12) using GTK+ version 3.24.49 (compiled against version 3.24.49) using Pango version 1.56.3 (compiled against version 1.56.3) using Fontconfig version 2.15.0 (compiled against version 2.15.0) using Cairo version 1.18.4 (compiled against version 1.18.4) using gexiv2 version 0.14.3 (compiled against version 0.14.3) using exiv2 version 0.28.5 ``` ``` /lib/x86_64-linux-gnu/libgimpbase-3.0.so.0(gimp_stack_trace_print+0x4a2) [0x7f6f864a5702] /usr/bin/gimp-3.0(+0x2b8eab) [0x5612d8f6ceab] /usr/bin/gimp-3.0(+0x2b94ce) [0x5612d8f6d4ce] /usr/bin/gimp-3.0(+0x2bc23d) [0x5612d8f7023d] /lib/x86_64-linux-gnu/libc.so.6(+0x3fdf0) [0x7f6f8490edf0] /lib/x86_64-linux-gnu/libc.so.6(+0x9495c) [0x7f6f8496395c] /lib/x86_64-linux-gnu/libc.so.6(gsignal+0x12) [0x7f6f8490ecc2] /lib/x86_64-linux-gnu/libc.so.6(abort+0x22) [0x7f6f848f74ac] /lib/x86_64-linux-gnu/libc.so.6(+0x29291) [0x7f6f848f8291] /lib/x86_64-linux-gnu/libc.so.6(+0x9e465) [0x7f6f8496d465] /lib/x86_64-linux-gnu/libc.so.6(__libc_free+0x19c) [0x7f6f849723dc] /usr/bin/gimp-3.0(+0x39898c) [0x5612d904c98c] /lib/x86_64-linux-gnu/libgimpwidgets-3.0.so.0(+0x2c2ab) [0x7f6f8602c2ab] /lib/x86_64-linux-gnu/libgimpwidgets-3.0.so.0(gimp_color_selection_set_config+0x69) [0x7f6f860326b9] /usr/bin/gimp-3.0(gimp_color_dialog_new+0x350) [0x5612d90c06b0] /usr/bin/gimp-3.0(+0x398027) [0x5612d904c027] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x17b81) [0x7f6f85fb4b81] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x2d8b8) [0x7f6f85fca8b8] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x36) [0x7f6f85fd05a6] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x93) [0x7f6f85fd0663] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0xe1eff) [0x7f6f84ee1eff] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x17b81) [0x7f6f85fb4b81] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x2d8b8) [0x7f6f85fca8b8] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x36) [0x7f6f85fd05a6] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x93) [0x7f6f85fd0663] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0xe0224) [0x7f6f84ee0224] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x9e01e) [0x7f6f84e9e01e] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x17b81) [0x7f6f85fb4b81] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x2d8b8) [0x7f6f85fca8b8] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x36) [0x7f6f85fd05a6] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x93) [0x7f6f85fd0663] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x1bc68e) [0x7f6f84fbc68e] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_cclosure_marshal_VOID__BOXEDv+0xa1) [0x7f6f85fb7d81] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x17b81) [0x7f6f85fb4b81] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x2d8b8) [0x7f6f85fca8b8] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x36) [0x7f6f85fd05a6] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x93) [0x7f6f85fd0663] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x1b975b) [0x7f6f84fb975b] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x1bad63) [0x7f6f84fbad63] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x1bdf7a) [0x7f6f84fbdf7a] /lib/x86_64-linux-gnu/libgtk-3.so.0(gtk_event_controller_handle_event+0x71) [0x7f6f84f82861] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x353e6d) [0x7f6f85153e6d] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x97d7a) [0x7f6f84e97d7a] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x17b81) [0x7f6f85fb4b81] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x2cb33) [0x7f6f85fc9b33] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x36) [0x7f6f85fd05a6] /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x93) [0x7f6f85fd0663] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x3558fc) [0x7f6f851558fc] /lib/x86_64-linux-gnu/libgtk-3.so.0(+0x20616e) [0x7f6f8500616e] /lib/x86_64-linux-gnu/libgtk-3.so.0(gtk_main_do_event+0x736) [0x7f6f85007f56] /lib/x86_64-linux-gnu/libgdk-3.so.0(+0x405c9) [0x7f6f84d305c9] /lib/x86_64-linux-gnu/libgdk-3.so.0(+0x97226) [0x7f6f84d87226] /lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x5c3c5) [0x7f6f85ea13c5] /lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x5e5f7) [0x7f6f85ea35f7] /lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_context_iteration+0x30) [0x7f6f85ea3d60] /lib/x86_64-linux-gnu/libgio-2.0.so.0(g_application_run+0x1ed) [0x7f6f85c27edd] /usr/bin/gimp-3.0(app_run+0x1cd) [0x5612d8f6c9ad] /usr/bin/gimp-3.0(main+0x38f) [0x5612d8da1eff] /lib/x86_64-linux-gnu/libc.so.6(+0x29ca8) [0x7f6f848f8ca8] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x85) [0x7f6f848f8d65] /usr/bin/gimp-3.0(_start+0x21) [0x5612d8da2071] ```
On Tue, 29 Jul 2025 12:54:00 -0300 Breno <breno05martins@gmail.com> wrote:> Package: gimp Hello, this crash seems to have similarities to this upstream bug report: https://gitlab.gnome.org/GNOME/gimp/-/issues/14047 At least at the top the calls to gimp_color_dialog_new and gimp_color_selection_set_config are visible. Except here we "abort" below a call to "free". Upstream seems to have solved issue 14047 with this commit: https://gitlab.gnome.org/GNOME/gimp/-/commit/1685c86af5d6253151d0056a9677ba469ea10164 These bugs seems to contain similar backtraces as this report, #1110085: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112555 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110107 This is the line of the "free" which fails in Debian's gimp: https://sources.debian.org/src/gimp/3.0.4-3/app/widgets/gimpcolorselectorpalette.c#L109 The issue is quite easy to reproduce, below is the top of a backtrace with a minimal Debian Trixie, showing the palette pointer passed into "gimp_color_selector_palette_palette_changed" being a NULL pointer. Kind regards, Bernhard (gdb) bt #0 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at ./nptl/pthread_kill.c:44 #1 0x00007f685ea329ff in __pthread_kill_internal (threadid=<optimized out>, signo=6) at ./nptl/pthread_kill.c:89 #2 0x00007f685e9ddcc2 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26 #3 0x00007f685e9c64ac in __GI_abort () at ./stdlib/abort.c:73 #4 0x00007f685e9c7291 in __libc_message_impl (fmt=fmt@entry=0x7f685eb4932d "%s\n") at ../sysdeps/posix/libc_fatal.c:134 #5 0x00007f685ea3c465 in malloc_printerr (str=str@entry=0x7f685eb47100 "free(): invalid pointer") at ./malloc/malloc.c:5829 #6 0x00007f685ea413dc in _int_free_check (av=0x7f685eb85ac0 <main_arena>, p=0x5636f67da400, size=<optimized out>) at ./malloc/malloc.c:4560 #7 _int_free (av=0x7f685eb85ac0 <main_arena>, p=0x5636f67da400, have_lock=0) at ./malloc/malloc.c:4692 #8 __GI___libc_free (mem=0x5636f67da410) at ./malloc/malloc.c:3476 #9 0x00005636c3d6898c in gimp_color_selector_palette_palette_changed (context=<optimized out>, palette=0x0, select=0x5636f6e21c80) at ../app/widgets/gimpcolorselectorpalette.c:109 #10 gimp_color_selector_palette_set_config (selector=0x5636f6e21c80, config=<optimized out>) at ../app/widgets/gimpcolorselectorpalette.c:185 #11 0x00007f686022c2ab in ?? () from /lib/x86_64-linux-gnu/libgimpwidgets-3.0.so.0 #12 0x00007f68602326b9 in gimp_color_selection_set_config () from /lib/x86_64-linux-gnu/libgimpwidgets-3.0.so.0 #13 0x00005636c3ddc6b0 in gimp_color_dialog_new (viewable=viewable@entry=0x0, context=0x5636f6ace720, user_context_aware=<optimized out>, title=<optimized out>, icon_name=icon_name@entry=0x0, desc=desc@entry=0x0, parent=0x5636f67da410, dialog_factory=0x0, dialog_identifier=0x0, color=0x5636f7102a40, wants_updates=0, show_alpha=1) at ../app/widgets/gimpcolordialog.c:526 #14 0x00005636c3d68027 in gimp_color_panel_clicked (button=0x5636f67da410) at ../app/widgets/gimpcolorpanel.c:186 ...
I confirm this bug still present at this time in the packaged 3.0.4 release. The issue has been fixed upstream in the stable release 3.0.6.