Bug#524164: [libgtk2.0-0] Crash in gnome-settings-daemon

[Torsten Marek]

Am Mittwoch, den 15.04.2009, 12:30 +0200 schrieb Josselin Mouette:
> Le mercredi 15 avril 2009 à 10:44 +0200, Torsten Marek a écrit :
> > Package: libgtk2.0-0
> > Version: 2.16.1-1
> > Severity: normal
> > 
> > Using the volume control via the XF86Audio*, gnome-settings-daemon always crashes after a couple of 
> > changes, but not predictably (so far). The stack trace retrieved from g-s-d (2.26.0-1) is:
> > 
> > Program terminated with signal 11, Segmentation fault.
> > 
> > #0  gdk_window_get_offsets (window=0x19231f0, x_offset=0x7fff10f4f924, y_offset=0x7fff10f4f920)
> >     at /tmp/buildd/gtk+2.0-2.16.1/gdk/gdkwindow.c:1320
> 
> Thanks for the trace, it is helpful. If you have the occasion to debug
> further, I’d appreciate a full trace (bt full) and more information. I’m
> especially interested in the contents of the private and
> private->paint_stack structures.
> 
> Thanks,

Hi again,

here you go:

(gdb) p *((GdkWindowObject*)window)
$4 = {parent_instance = {parent_instance = {g_type_instance = {g_class = 0x24e95a0}, ref_count = 4, qdata = 
    0x272a040}}, impl = 0x2713290, parent = 0x27130b0, user_data = 0x265e9b0, x = 14, y = 68, extension_events = 0, 
  filters = 0x0, children = 0x0, bg_color = {pixel = 4292335059, red = 55255, green = 54741, blue = 54227}, 
  bg_pixmap = 0x0, paint_stack = 0x7fff2b450050, update_area = 0x0, update_freeze_count = 0, window_type = 2 '\002', 
  depth = 32 ' ', resize_count = 0 '\0', state = 0, guffaw_gravity = 0, input_only = 0, modal_hint = 0, composited = 
    0, destroyed = 0, accept_focus = 1, focus_on_map = 1, shaped = 0, event_mask = GDK_EXPOSURE_MASK, 
  update_and_descendants_freeze_count = 0, redirect = 0x0}
(gdb) p *((GdkWindowObject*)window)->paint_stack
$5 = {data = 0x7f, next = 0x27a1130}
...
(gdb) print (GdkWindowPaint*)0x7f
$11 = (struct _GdkWindowPaint *) 0x7f
(gdb) print *(GdkWindowPaint*)0x7f
Cannot access memory at address 0x7f

This is in accordance with the line it crashes on, because on 1320,
"paint" (which is the local variable it's assigned to, is dereferenced):

1319:  GdkWindowPaint *paint = private->paint_stack->data;
1320:  *x_offset = paint->x_offset;

Hope that helps,

Torsten