#653865 gthumb: segfaults

Package:
gthumb
Source:
gthumb
Description:
image viewer and browser
Submitter:
Cristian Ionescu-Idbohrn
Date:
2011-12-31 17:51:04 UTC
Severity:
important
#653865#5
Date:
2011-12-31 17:46:38 UTC
From:
To:
Been seeing that for a while now.

Looks like being associated with the presence of a user instance of
'/usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session'
at the point when gthumb is started.  It seems there might be a timing
problem somewhere too, as after the segfault I find these processes:

	dbus-launch --autolaunch 059bbcd6c1bb98d7b2d00900466ad4fb --binary-syntax --close-stderr
	/usr/bin/dbus-daemon --fork --print-pid 5 --print-address 7 --session

started on my behalf.  Suspecting a timing problem as sometimes it
just starts, no segfault.  Got a coredump and a backtrace after a:

	*** glibc detected *** gthumb: malloc(): memory corruption (fast): 0x08bd88a7 ***

,----
| $ gdb /usr/bin/gthumb ./core
| ...
| Reading symbols from /usr/bin/gthumb...(no debugging symbols found)...done.
| [New LWP 4267]
| [New LWP 4266]
| [New LWP 4255]
| [New LWP 4264]
|
| warning: Can't read pathname for load map: Input/output error.
| [Thread debugging using libthread_db enabled]
| Core was generated by `gthumb .'.
| Program terminated with signal 11, Segmentation fault.
| #0  0xb6c72a14 in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| (gdb) bt
| #0  0xb6c72a14 in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #1  0xb6c714a7 in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #2  0xb6c71521 in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #3  0xb6c70637 in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #4  0xb6c70f68 in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #5  0xb6c55baf in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #6  0xb6c59ddb in ?? () from /lib/i386-linux-gnu/libdbus-1.so.3
| #7  0xb6c6a63f in dbus_pending_call_block ()
|    from /lib/i386-linux-gnu/libdbus-1.so.3
| #8  0xb6c591fb in dbus_connection_send_with_reply_and_block ()
|    from /lib/i386-linux-gnu/libdbus-1.so.3
| #9  0xb7817332 in gconf_engine_get_fuller () from /usr/lib/libgconf-2.so.4
| #10 0xb7817727 in gconf_engine_get_entry () from /usr/lib/libgconf-2.so.4
| #11 0xb7811301 in ?? () from /usr/lib/libgconf-2.so.4
| #12 0xb7813ae6 in ?? () from /usr/lib/libgconf-2.so.4
| #13 0x08088579 in eel_gconf_get_boolean ()
| #14 0xb638aff2 in ?? () from /usr/lib/gthumb/extensions/libcomments.so
| #15 0x080c3ec3 in ?? ()
| #16 0xb6ea1fee in g_hook_list_marshal ()
|    from /lib/i386-linux-gnu/libglib-2.0.so.0
| #17 0x080c40cf in gth_hook_invoke ()
| #18 0x080e02ae in ?? ()
| #19 0xb7027b8d in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
| #20 0xb70183ec in ?? () from /usr/lib/i386-linux-gnu/libgio-2.0.so.0
| #21 0xb6edc207 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
| #22 0xb6ed9dd4 in ?? () from /lib/i386-linux-gnu/libglib-2.0.so.0
| #23 0xb6e19c39 in start_thread (arg=0xb06ffb70) at pthread_create.c:304
| #24 0xb6d8698e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
| Backtrace stopped: Not enough registers or memory available to unwind further
`----

On another occasion I've seen this:

,----
| $ gthumb .
|
| (gthumb:29316): GConf-WARNING **: Got Disconnected from DBus.
|
|
| (gthumb:29316): GConf-WARNING **: The connection to DBus was broken. Can't reinitialize it.
|
| ** (gthumb:29316): WARNING **: GConf error:
|   No D-BUS daemon running
|
| *** glibc detected *** gthumb: double free or corruption (fasttop): 0x09d313d0 ***
| ======= Backtrace: =========
| /lib/i386-linux-gnu/i686/cmov/libc.so.6(+0x6aa81)[0xb6bfda81]
| /lib/i386-linux-gnu/i686/cmov/libc.so.6(+0x6c2e8)[0xb6bff2e8]
| /lib/i386-linux-gnu/i686/cmov/libc.so.6(+0x6ffe1)[0xb6c02fe1]
| /lib/i386-linux-gnu/i686/cmov/libc.so.6(realloc+0xdd)[0xb6c0346d]
| /usr/lib/i386-linux-gnu/libX11.so.6(+0x43fab)[0xb6a22fab]
| ======= Memory map: ========
| 08048000-0813b000 r-xp 00000000 fd:02 267445     /usr/bin/gthumb
| 0813b000-08140000 rw-p 000f2000 fd:02 267445     /usr/bin/gthumb
| 09d12000-09f00000 rw-p 00000000 00:00 0          [heap]
| aff13000-aff14000 ---p 00000000 00:00 0
| aff14000-b0714000 rw-p 00000000 00:00 0
| b0714000-b0774000 rw-s 00000000 00:04 300679170  /SYSV00000000 (deleted)
| b0774000-b07a3000 r-xp 00000000 fd:02 391436     /usr/lib/i386-linux-gnu/libbluray.so.1.1.0
| ...
`----