[Aptitude-devel] Bug#794705: libcwidget3v5: aptitude segfaults on cursor down keypress

[Axel Beckert]

Package: libcwidget3v5
Version: 0.5.17-3.1
Severity: important
Control: affects -1 aptitude

Hi,

running aptitude 0.7-1 without any command option or parameter in an
uptodate "pbuilder login" session and then pressing the cursor down key,
aptitude segfaults as follows:

** Error in `/usr/bin/aptitude': munmap_chunk(): invalid pointer: 0x0000555555cb9480 ***
--- Not Installed Packages (46843)
Program received signal SIGABRT, Aborted. (2)
0x00007ffff5a20107 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007ffff5a20107 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007ffff5a214e8 in __GI_abort () at abort.c:89
#2  0x00007ffff5a5e214 in __libc_message (do_abort=do_abort at entry=1, fmt=fmt at entry=0x7ffff5b51000 "*** Error in `%s': %s: 0x%s ***\n")
    at ../sysdeps/posix/libc_fatal.c:175
#3  0x00007ffff5a639ee in malloc_printerr (action=1, str=0x7ffff5b51028 "munmap_chunk(): invalid pointer", ptr=<optimized out>) at malloc.c:4996
#4  0x00007ffff71edd1e in cwidget::widgets::text_layout::set_fragment(cwidget::fragment*) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#5  0x000055555564adfd in set_no_package (this=0x5555562ecb80) at ../../src/pkg_view.cc:221
#6  info_area_multiplex::set_description (this=0x5555563142c0, s=...) at ../../src/pkg_view.cc:491
#7  0x0000555555633338 in emit (_A_a1=..., impl=0x55555630f7d0) at /usr/include/sigc++-2.0/sigc++/signal.h:1010
#8  emit (this=<optimized out>, _A_a1=...) at /usr/include/sigc++-2.0/sigc++/signal.h:2801
#9  operator() (_A_a1=..., this=<optimized out>) at /usr/include/sigc++-2.0/sigc++/signal.h:2809
#10 pkg_subtree::do_highlighted_changed (this=<optimized out>, highlighted=<optimized out>) at ../../src/pkg_subtree.cc:168
#11 0x00007ffff71fc5ad in sigc::internal::signal_emit1<void, cwidget::widgets::treeitem*, sigc::nil>::emit(sigc::internal::signal_impl*, cwidget::widgets::treeitem* const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#12 0x00007ffff71f6947 in cwidget::widgets::tree::line_down() () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#13 0x00007ffff71fa8ce in cwidget::widgets::tree::handle_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#14 0x0000555555615a2d in menu_tree::handle_key (this=this at entry=0x555555cc1860, k=...) at ../../src/menu_tree.cc:430
#15 0x00005555556343bb in pkg_tree::handle_key (this=0x555555cc1860, k=...) at ../../src/pkg_tree.cc:350
#16 0x00007ffff7200513 in cwidget::widgets::widget::dispatch_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#17 0x00007ffff71e8897 in cwidget::widgets::table::handle_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#18 0x00007ffff7200513 in cwidget::widgets::widget::dispatch_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#19 0x00007ffff71d3cab in cwidget::widgets::passthrough::handle_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#20 0x00007ffff7200513 in cwidget::widgets::widget::dispatch_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#21 0x00007ffff71e8897 in cwidget::widgets::table::handle_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#22 0x00007ffff7200513 in cwidget::widgets::widget::dispatch_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#23 0x00007ffff71d3cab in cwidget::widgets::passthrough::handle_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#24 0x00007ffff7200513 in cwidget::widgets::widget::dispatch_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#25 0x00007ffff71b4571 in cwidget::widgets::menubar::handle_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#26 0x00007ffff7200513 in cwidget::widgets::widget::dispatch_key(cwidget::config::key const&) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#27 0x00007ffff7181e09 in cwidget::toplevel::input_thread::get_input_event::dispatch() () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#28 0x00007ffff7179735 in cwidget::toplevel::mainloop(int) () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#29 0x000055555568d72a in ui_main () at ../../src/ui.cc:2907
#30 0x00005555555b60ce in main (argc=<optimized out>, argv=<optimized out>) at ../../src/main.cc:1307
(gdb)

Feel free to reassign this bug report to another package if you think,
libcwidget3v5 is not the root cause.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.1.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libcwidget3v5 depends on:
ii  libc6               2.19-19
ii  libgcc1             1:5.2.1-14
ii  libncursesw5        5.9+20150516-2
ii  libsigc++-2.0-0c2a  2.4.1-1
ii  libstdc++6          5.2.1-14
ii  libtinfo5           5.9+20150516-2

libcwidget3v5 recommends no packages.

Versions of packages libcwidget3v5 suggests:
pn  libcwidget-dev  <none>

-- no debconf information