Bug#551687: Corrupt ~/.local/share/gvfs-metadata/home causes segmentation fault

[Matijs van Zuijlen]

Package: gvfs
Version: 1.4.0-3
Severity: normal

After a reboot, several gnome programs started segfaulting in a malloc
called from libgvfsdbus.so. As an example, attached is the stacktrace from
nautilus. The stack is in fact deeper than shown, but I can't seem to get
to the end of the repeated calls to meta_tree_init. Moving the file
/home/matijs/.local/share/gvfs-metadata/home mentioned in stack frame #2
out of the way stops the segfault from happening.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gvfs depends on:
ii  devicekit-disks               008-1      abstraction for enumerating block 
ii  libc6                         2.10.1-1   GNU C Library: Shared libraries
ii  libdbus-1-3                   1.2.16-2   simple interprocess messaging syst
ii  libgconf2-4                   2.28.0-1   GNOME configuration database syste
ii  libgdu0                       2.28.0-1   GObject based Disk Utility Library
ii  libglib2.0-0                  2.22.2-2   The GLib library of C routines
ii  libudev0                      146-5      libudev shared library
ii  x11-utils                     7.4+1      X11 utilities

Versions of packages gvfs recommends:
ii  dbus                          1.2.16-2   simple interprocess messaging syst
ii  policykit-1-gnome             0.94-1     GNOME authentication agent for Pol

Versions of packages gvfs suggests:
ii  gvfs-backends                 1.4.0-2    userspace virtual filesystem - bac

-- no debconf information
-------------- next part --------------
#0  *__GI___libc_malloc (bytes=58) at malloc.c:3593
#1  0x00007f8ca9cba553 in IA__g_malloc (n_bytes=58)
    at /tmp/buildd/glib2.0-2.22.2/glib/gmem.c:131
#2  0x00007f8ca9cd3bf3 in IA__g_strconcat (
    string1=0x24d87c0 "/home/matijs/.local/share/gvfs-metadata/home")
    at /tmp/buildd/glib2.0-2.22.2/glib/gstrfuncs.c:313
#3  0x00007f8ca1488e04 in get_journal_filename (tree=0x24d9050)
    at metatree.c:848
#4  meta_journal_open (tree=0x24d9050) at metatree.c:1137
#5  meta_tree_init (tree=0x24d9050) at metatree.c:502
#6  0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#7  0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#8  0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#9  0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#10 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#11 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#12 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#13 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#14 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#15 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#16 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#17 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#18 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#19 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#20 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#21 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#22 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#23 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#24 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#25 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#26 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#27 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#28 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#29 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#30 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#31 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#32 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#33 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#34 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#35 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#36 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#37 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#38 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#39 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#40 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#41 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#42 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#43 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509
#44 0x00007f8ca1488efd in meta_tree_init (tree=0x24d9050) at metatree.c:509