Bug#524164: [libgtk2.0-0] Crash in gnome-settings-daemon
Torsten Marek
marek at ifi.uzh.ch
Wed Apr 15 22:03:24 UTC 2009
Am Mittwoch, den 15.04.2009, 12:30 +0200 schrieb Josselin Mouette:
> Le mercredi 15 avril 2009 à 10:44 +0200, Torsten Marek a écrit :
> > Package: libgtk2.0-0
> > Version: 2.16.1-1
> > Severity: normal
> >
> > Using the volume control via the XF86Audio*, gnome-settings-daemon always crashes after a couple of
> > changes, but not predictably (so far). The stack trace retrieved from g-s-d (2.26.0-1) is:
> >
> > Program terminated with signal 11, Segmentation fault.
> >
> > #0 gdk_window_get_offsets (window=0x19231f0, x_offset=0x7fff10f4f924, y_offset=0x7fff10f4f920)
> > at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:1320
>
> Thanks for the trace, it is helpful. If you have the occasion to debug
> further, I’d appreciate a full trace (bt full) and more information. I’m
> especially interested in the contents of the private and
> private->paint_stack structures.
>
Hi,
where can I locate the "private" structure? I've navigated through the
stack frames and looked at the locals, but to no avail.
I've also uploaded the core files to
http://diotavelli.net/files/core-524164-1.bz2 and -2, respectively.
here's one output from "bt full":
#0 gdk_window_get_offsets (window=0x27131f0, x_offset=0x7fff2b44fe24, y_offset=0x7fff2b44fe20)
at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:1320
paint = 0x7f
#1 0x00007fa1214b7e16 in gdk_window_draw_drawable (drawable=0x27131f0, gc=0x2514b00, src=0x2769f20, xsrc=0, ysrc=0, xdest=0, ydest=
0, width=150, height=20) at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:1725
x_offset = 0
y_offset = 40233392
old_clip_x = 0
old_clip_y = 0
old_ts_x = 0
old_ts_y = 0
#2 0x00007fa12149e771 in IA__gdk_draw_drawable (drawable=0x27131f0, gc=0x2514b00, src=0x2769f20, xsrc=0, ysrc=0, xdest=0, ydest=0,
width=150, height=20) at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkdraw.c:656
composite = 0x2769f20
composite_x_offset = 0
composite_y_offset = 0
__PRETTY_FUNCTION__ = "IA__gdk_draw_drawable"
#3 0x00007fa122edd176 in gtk_progress_expose (widget=<value optimized out>, event=<value optimized out>)
at /tmp/buildd/gtk+2.0-2.16.1/gtk/gtkprogress.c:278
No locals.
#4 0x00007fa122d74958 in _gtk_marshal_BOOLEAN__BOXED (closure=0x275eef0, return_value=0x7fff2b4500c0,
n_param_values=<value optimized out>, param_values=0x27984f0, invocation_hint=<value optimized out>, marshal_data=0x7fa122da83e0)
at /tmp/buildd/gtk+2.0-2.16.1/gtk/gtkmarshalers.c:84
data1 = 0x265e9b0
data2 = 0x7fff2b44fe20
v_return = <value optimized out>
__PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
#5 0x00007fa12216011d in IA__g_closure_invoke (closure=0x275eef0, return_value=0x7fff2b4500c0, n_param_values=2, param_values=
0x27984f0, invocation_hint=0x7fff2b450080) at /tmp/buildd/glib2.0-2.20.1/gobject/gclosure.c:767
marshal = 0x7fa12215e620 <g_type_class_meta_marshal>
marshal_data = 0x188
__PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#6 0x00007fa12217390f in signal_emit_unlocked_R (node=0x275ef60, detail=0, instance=0x265e9b0, emission_return=0x7fff2b450200,
instance_and_params=0x27984f0) at /tmp/buildd/glib2.0-2.20.1/gobject/gsignal.c:3285
accumulator = 0x275efe0
emission = {next = 0x0, instance = 0x265e9b0, ihint = {signal_id = 88, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state =
EMISSION_RUN, chain_type = 41388000}
class_closure = 0x275eef0
handler_list = 0x0
return_accu = 0x7fff2b4500c0
accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float =
0, v_double = 0, v_pointer = 0x0}}}
signal_id = 88
max_sequential_handler_number = 127
return_value_altered = 0
#7 0x00007fa122174ead in IA__g_signal_emit_valist (instance=0x265e9b0, signal_id=<value optimized out>, detail=0, var_args=
0x7fff2b450260) at /tmp/buildd/glib2.0-2.20.1/gobject/gsignal.c:2990
return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0,
v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float =
0, v_double = 0, v_pointer = 0x0}}}
error = <value optimized out>
signal_return_type = 20
param_values = 0x2798508
node = 0x275ef60
i = 1
n_params = 1
__PRETTY_FUNCTION__ = "IA__g_signal_emit_valist"
#8 0x00007fa1221754f3 in IA__g_signal_emit (instance=0x27131f0, signal_id=725941796, detail=725941792)
at /tmp/buildd/glib2.0-2.20.1/gobject/gsignal.c:3037
var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff2b450340, reg_save_area = 0x7fff2b450280}}
#9 0x00007fa122e7c98e in gtk_widget_event_internal (widget=0x265e9b0, event=0x7fff2b4503c0)
at /tmp/buildd/gtk+2.0-2.16.1/gtk/gtkwidget.c:4761
signal_num = <value optimized out>
return_val = 0
#10 0x00007fa122d6e51d in IA__gtk_main_do_event (event=0x7fff2b4503c0) at /tmp/buildd/gtk+2.0-2.16.1/gtk/gtkmain.c:1558
event_widget = 0x265e9b0
grab_widget = 0x265e9b0
window_group = 0x2711520
rewritten_event = 0x0
tmp_list = <value optimized out>
__PRETTY_FUNCTION__ = "IA__gtk_main_do_event"
#11 0x00007fa1214b5b54 in gdk_window_process_updates_internal (window=0x27131f0) at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:2611
event = {type = GDK_EXPOSE, any = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0'}, expose = {type = GDK_EXPOSE,
window = 0x27131f0, send_event = 0 '\0', area = {x = 0, y = 0, width = 150, height = 20}, region = 0x2798550, count = 0},
no_expose = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0'}, visibility = {type = GDK_EXPOSE, window =
0x27131f0, send_event = 0 '\0', state = GDK_VISIBILITY_UNOBSCURED}, motion = {type = GDK_EXPOSE, window = 0x27131f0, send_event =
0 '\0', time = 0, x = 3.1829936864479085e-312, y = 9.8813129168249309e-323, axes = 0x2798550, state = 0, is_hint = 0, device =
0x7fa121c15bc0, x_root = 2.0577968535143587e-316, y_root = 1.9214189251615078e-316}, button = {type = GDK_EXPOSE, window =
0x27131f0, send_event = 0 '\0', time = 0, x = 3.1829936864479085e-312, y = 9.8813129168249309e-323, axes = 0x2798550, state = 0,
button = 0, device = 0x7fa121c15bc0, x_root = 2.0577968535143587e-316, y_root = 1.9214189251615078e-316}, scroll = {
type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', time = 0, x = 3.1829936864479085e-312, y =
9.8813129168249309e-323, state = 41518416, direction = GDK_SCROLL_UP, device = 0x0, x_root = 6.9332248277496515e-310, y_root =
2.0577968535143587e-316}, key = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', time = 0, state = 0, keyval = 150,
length = 20, string = 0x2798550 "\002", hardware_keycode = 0, group = 0 '\0', is_modifier = 0}, crossing = {type =
GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', subwindow = 0x9600000000, time = 20, x = 2.0512823015345544e-316, y = 0,
x_root = 6.9332248277496515e-310, y_root = 2.0577968535143587e-316, mode = 38889952, detail = GDK_NOTIFY_ANCESTOR,
focus = 41522464, state = 0}, focus_change = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', in = 592},
configure = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', x = 0, y = 0, width = 150, height = 20},
property = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', atom = 0x9600000000, time = 20, state = 0},
selection = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', selection = 0x9600000000, target = 0x14,
property = 0x2798550, time = 0, requestor = 0}, owner_change = {type = GDK_EXPOSE, window = 0x27131f0, send_event =
0 '\0', owner = 0, reason = GDK_OWNER_CHANGE_NEW_OWNER, selection = 0x14, time = 41518416, selection_time = 0}, proximity = {
type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', time = 0, device = 0x9600000000}, client = {type =
GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', message_type = 0x9600000000, data_format = 20, data = {b =
"P\205y\002", '\0' <repeats 12 times>, "À[Á!", s = {-31408, 633, 0, 0, 0, 0, 0, 0, 23488, 8641}, l = {41518416, 0,
140330032782272, 41650272, 38889952}}}, dnd = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', context =
0x9600000000, time = 20, x_root = 0, y_root = 0}, window_state = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0',
changed_mask = 0, new_window_state = 0}, setting = {type = GDK_EXPOSE, window = 0x27131f0, send_event = 0 '\0', action =
GDK_SETTING_ACTION_NEW, name = 0x9600000000 <Address 0x9600000000 out of bounds>}, grab_broken = {type = GDK_EXPOSE, window =
0x27131f0, send_event = 0 '\0', keyboard = 0, implicit = 0, grab_window = 0x14}}
window_rect = {x = 0, y = 0, width = 150, height = 20}
expose_region = 0x2798550
window_region = 0x2798300
width = 150
height = 20
save_region = 1
#12 0x00007fa1214b60d1 in IA__gdk_window_process_all_updates () at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:2677
old_update_windows = 0x27be2b0
tmp_list = 0x27be2b0
#13 0x00007fa1214b60f9 in gdk_window_update_idle (data=0x27131f0) at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:2521
No locals.
#14 0x00007fa121499f6b in gdk_threads_dispatch (data=0x27c2340) at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdk.c:498
ret = 0
#15 0x00007fa121ec8f7a in IA__g_main_context_dispatch (context=0x25169e0) at /tmp/buildd/glib2.0-2.20.1/glib/gmain.c:1814
No locals.
#16 0x00007fa121ecc640 in g_main_context_iterate (context=0x25169e0, block=1, dispatch=1, self=<value optimized out>)
at /tmp/buildd/glib2.0-2.20.1/glib/gmain.c:2448
max_priority = 120
timeout = 0
some_ready = 1
nfds = 10
allocated_nfds = <value optimized out>
fds = 0x26c1500
__PRETTY_FUNCTION__ = "g_main_context_iterate"
#17 0x00007fa121eccb0d in IA__g_main_loop_run (loop=0x26c40e0) at /tmp/buildd/glib2.0-2.20.1/glib/gmain.c:2656
self = 0x24df4d0
__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#18 0x00007fa122d6e727 in IA__gtk_main () at /tmp/buildd/gtk+2.0-2.16.1/gtk/gtkmain.c:1205
tmp_list = 0x251d000
functions = 0x0
init = 0x251d850
loop = <value optimized out>
#19 0x00000000004049cd in main ()
Here's another one, because the bug appears to occur in different places:
#0 0x00007f47daf3bca5 in free () from /lib/libc.so.6
No symbol table info available.
#1 0x00007f47db244e52 in IA__g_error_free (error=0x1e681e0) at /tmp/buildd/glib2.0-2.20.1/glib/gerror.c:125
__PRETTY_FUNCTION__ = "IA__g_error_free"
#2 0x00007f47d1355593 in ?? () from /usr/lib/gnome-settings-daemon-2.0/libmedia-keys.so
No symbol table info available.
#3 0x00007f47da8571f4 in gdk_event_translate (display=0x1e520a0, event=0x20d5d70, xevent=0x7fffe47da760,
return_exposes=0) at /tmp/buildd/gtk+2.0-2.16.1/gdk/x11/gdkevents-x11.c:349
window = 0x1e5c010
filter_window = 0x1e5c010
window_impl = 0x1e5c0b0
return_val = <value optimized out>
xoffset = <value optimized out>
yoffset = <value optimized out>
screen = 0x1e580d0
screen_x11 = 0x1e580d0
toplevel = 0x2036fe0
xwindow = 180
filter_xwindow = <value optimized out>
#4 0x00007f47da8588b7 in _gdk_events_queue (display=0x1e520a0)
at /tmp/buildd/gtk+2.0-2.16.1/gdk/x11/gdkevents-x11.c:2298
node = 0x21022c0
event = 0x20d5d70
xevent = {type = 2, xany = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180},
xkey = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180, root = 180, subwindow =
27409087, time = 61919174, x = 711, y = 367, x_root = 711, y_root = 367, state = 0, keycode = 123, same_screen =
1}, xbutton = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180, root = 180, subwindow =
27409087, time = 61919174, x = 711, y = 367, x_root = 711, y_root = 367, state = 0, button = 123, same_screen =
1}, xmotion = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180, root = 180, subwindow =
27409087, time = 61919174, x = 711, y = 367, x_root = 711, y_root = 367, state = 0, is_hint = 123 '{',
same_screen = 1}, xcrossing = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180,
root = 180, subwindow = 27409087, time = 61919174, x = 711, y = 367, x_root = 711, y_root = 367, mode = 0,
detail = 123, same_screen = 1, focus = 0, state = 0}, xfocus = {type = 2, serial = 4299, send_event = 0,
display = 0x1e46800, window = 180, mode = 180, detail = 0}, xexpose = {type = 2, serial = 4299,
send_event = 0, display = 0x1e46800, window = 180, x = 180, y = 0, width = 27409087, height = 0, count =
61919174}, xgraphicsexpose = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, drawable = 180, x =
180, y = 0, width = 27409087, height = 0, count = 61919174, major_code = 0, minor_code = 711}, xnoexpose = {type =
2, serial = 4299, send_event = 0, display = 0x1e46800, drawable = 180, major_code = 180, minor_code = 0},
xvisibility = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180, state = 180},
xcreatewindow = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, parent = 180, window = 180,
x = 27409087, y = 0, width = 61919174, height = 0, border_width = 711, override_redirect = 367},
xdestroywindow = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, event = 180, window = 180},
xunmap = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, event = 180, window = 180,
from_configure = 27409087}, xmap = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, event =
180, window = 180, override_redirect = 27409087}, xmaprequest = {type = 2, serial = 4299, send_event = 0,
display = 0x1e46800, parent = 180, window = 180}, xreparent = {type = 2, serial = 4299, send_event = 0,
display = 0x1e46800, event = 180, window = 180, parent = 27409087, x = 61919174, y = 0,
override_redirect = 711}, xconfigure = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800,
event = 180, window = 180, x = 27409087, y = 0, width = 61919174, height = 0, border_width = 711, above =
1576252998343, override_redirect = 0}, xgravity = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800,
event = 180, window = 180, x = 27409087, y = 0}, xresizerequest = {type = 2, serial = 4299, send_event =
0, display = 0x1e46800, window = 180, width = 180, height = 0}, xconfigurerequest = {type = 2, serial = 4299,
send_event = 0, display = 0x1e46800, parent = 180, window = 180, x = 27409087, y = 0, width = 61919174,
height = 0, border_width = 711, above = 1576252998343, detail = 0, value_mask = 1}, xcirculate = {type =
2, serial = 4299, send_event = 0, display = 0x1e46800, event = 180, window = 180, place = 27409087},
xcirculaterequest = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, parent = 180, window =
180, place = 27409087}, xproperty = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180,
atom = 180, time = 27409087, state = 61919174}, xselectionclear = {type = 2, serial = 4299, send_event =
0, display = 0x1e46800, window = 180, selection = 180, time = 27409087}, xselectionrequest = {type = 2, serial =
4299, send_event = 0, display = 0x1e46800, owner = 180, requestor = 180, selection = 27409087, target = 61919174,
property = 1576252998343, time = 1576252998343}, xselection = {type = 2, serial = 4299, send_event = 0,
display = 0x1e46800, requestor = 180, selection = 180, target = 27409087, property = 61919174, time =
1576252998343}, xcolormap = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180,
colormap = 180, new = 27409087, state = 0}, xclient = {type = 2, serial = 4299, send_event = 0, display =
0x1e46800, window = 180, message_type = 180, format = 27409087, data = {b =
"Æϰ\003\000\000\000\000Ç\002\000\000o\001\000\000Ç\002\000", s = {-12346, 944, 0, 0, 711, 0, 367, 0, 711, 0}, l =
{61919174, 1576252998343, 1576252998343, 528280977408, 1}}}, xmapping = {type = 2, serial = 4299, send_event = 0,
display = 0x1e46800, window = 180, request = 180, first_keycode = 0, count = 27409087}, xerror = {type =
2, display = 0x10cb, resourceid = 0, serial = 31746048, error_code = 180 '´', request_code = 0 '\0', minor_code =
0 '\0'}, xkeymap = {type = 2, serial = 4299, send_event = 0, display = 0x1e46800, window = 180, key_vector =
"´\000\000\000\000\000\000\000¿:¢\001\000\000\000\000Æϰ\003\000\000\000\000Ç\002\000\000o\001\000"}, pad = {2,
4299, 0, 31746048, 180, 180, 27409087, 61919174, 1576252998343, 1576252998343, 528280977408, 1,
0 <repeats 12 times>}}
xdisplay = 0x1e46800
#5 0x00007f47da858c8e in gdk_event_dispatch (source=<value optimized out>, callback=0x20, user_data=0x20674c0)
at /tmp/buildd/gtk+2.0-2.16.1/gdk/x11/gdkevents-x11.c:2358
display = 0x1e520a0
event = <value optimized out>
#6 0x00007f47db254f7a in IA__g_main_context_dispatch (context=0x1e5d9a0)
at /tmp/buildd/glib2.0-2.20.1/glib/gmain.c:1814
No locals.
#7 0x00007f47db258640 in g_main_context_iterate (context=0x1e5d9a0, block=1, dispatch=1, self=<value optimized out>)
at /tmp/buildd/glib2.0-2.20.1/glib/gmain.c:2448
max_priority = 0
timeout = 0
some_ready = 1
nfds = 10
allocated_nfds = <value optimized out>
fds = 0x2008500
__PRETTY_FUNCTION__ = "g_main_context_iterate"
#8 0x00007f47db258b0d in IA__g_main_loop_run (loop=0x200b0e0) at /tmp/buildd/glib2.0-2.20.1/glib/gmain.c:2656
self = 0x1e264d0
__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#9 0x00007f47dc0fa727 in IA__gtk_main () at /tmp/buildd/gtk+2.0-2.16.1/gtk/gtkmain.c:1205
tmp_list = 0x1e64400
functions = 0x0
init = 0x1e64060
loop = <value optimized out>
#10 0x00000000004049cd in main ()
best,
Torsten
More information about the pkg-gnome-maintainers
mailing list