Bug#731209: libgtk-3-0: segmentation fault when changing desktop background

Ludovic Lebègue ludovic at lebegue.org
Tue Dec 3 07:26:40 UTC 2013


Package: libgtk-3-0
Version: 3.10.2-1
Severity: important

Hi,

Using gnome-control-center (or right click on the desktop) to change the
desktop background leads to a 'segmentation fault' error.

Here is the valgrind report :

ludo at leonardo ~ % gnome-control-center
zsh: segmentation fault  gnome-control-center
ludo at leonardo ~ %
ludo at leonardo ~ %
ludo at leonardo ~ %
ludo at leonardo ~ % valgrind gnome-control-center
==5213== Memcheck, a memory error detector
==5213== Copyright (C) 2002-2013, and GNU GPL'd, by Julian Seward et al.
==5213== Using Valgrind-3.9.0 and LibVEX; rerun with -h for copyright
info
==5213== Command: gnome-control-center
==5213==
==5213== Invalid read of size 1
==5213==    at 0x4C2D5D4: strcmp (mc_replace_strmem.c:730)
==5213==    by 0xD04F3BF: stub_find_dynamic (in /usr/lib/x86_64-linux-
gnu/libglapi.so.0.0.0)
==5213==    by 0xD04F27D: _glapi_get_proc_address
(in /usr/lib/x86_64-linux-
gnu/libglapi.so.0.0.0)
==5213==    by 0x58BB488: glXGetProcAddress (in /usr/lib/x86_64-linux-
gnu/libGL.so.1.2.0)
==5213==    by 0x14759791: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x1475991D: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x14743E74: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x14788F6B: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x1474D980: cogl_context_new (in /usr/lib/x86_64-linux-
gnu/libcogl.so.12.1.1)
==5213==    by 0x144385B6: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==    by 0x1444F9F2: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==    by 0x14460859: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==  Address 0x2cbf8e52 is 2 bytes inside a block of size 17 free'd
==5213==    at 0x4C2A74C: free (vg_replace_malloc.c:468)
==5213==    by 0x1475979C: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x1475991D: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x14743E74: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x14788F6B: ???
(in /usr/lib/x86_64-linux-gnu/libcogl.so.12.1.1)
==5213==    by 0x1474D980: cogl_context_new (in /usr/lib/x86_64-linux-
gnu/libcogl.so.12.1.1)
==5213==    by 0x144385B6: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==    by 0x1444F9F2: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==    by 0x14460859: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==    by 0x14460A7C: ??? (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==    by 0xBC435B6: g_option_context_parse (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0x1446170F: clutter_init (in /usr/lib/x86_64-linux-
gnu/libclutter-1.0.so.0.1404.0)
==5213==
==5213== Conditional jump or move depends on uninitialised value(s)
==5213==    at 0x1B1F1E04: ??? (in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0x1B1D77D3: ??? (in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0x1B18C770: pixman_image_composite32
(in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0xB6B5F76: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6E15ED: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6E290F: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6E96DD: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6EA2E4: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6EAB3D: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6EAF41: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6A9EE6: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6B9E3E: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==
==5213== Conditional jump or move depends on uninitialised value(s)
==5213==    at 0x1B1F1AFC: ??? (in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0x1B1D77D3: ??? (in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0x1B18C770: pixman_image_composite32
(in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0xB6B5F76: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6F69C3: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6E97CB: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6EA1AA: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6EB038: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6A9EE6: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6B9E3E: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6EDF13: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0xB6B18AB: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==
==5213== Conditional jump or move depends on uninitialised value(s)
==5213==    at 0x2BA84387: ??? (in /usr/lib/x86_64-linux-
gnu/librsvg-2.so.2.40.0)
==5213==    by 0x2BA84F57: rsvg_handle_get_pixbuf_sub
(in /usr/lib/x86_64
-linux-gnu/librsvg-2.so.2.40.0)
==5213==    by 0x36648E45: ??? (in /usr/lib/x86_64-linux-gnu/gdk-
pixbuf-2.0/2.10.0/loaders/libpixbufloader-svg.so)
==5213==    by 0xB221CB9: gdk_pixbuf_loader_close
(in /usr/lib/x86_64-linux-
gnu/libgdk_pixbuf-2.0.so.0.2800.2)
==5213==    by 0xB21E1BA: ??? (in /usr/lib/x86_64-linux-
gnu/libgdk_pixbuf-2.0.so.0.2800.2)
==5213==    by 0xB21F970: gdk_pixbuf_new_from_stream_at_scale (in
/usr/lib/x86_64-linux-gnu/libgdk_pixbuf-2.0.so.0.2800.2)
==5213==    by 0xA232C9A: ??? (in /usr/lib/x86_64-linux-
gnu/libgtk-3.so.0.1000.2)
==5213==    by 0xA236419: gtk_icon_info_load_icon
(in /usr/lib/x86_64-linux-
gnu/libgtk-3.so.0.1000.2)
==5213==    by 0xA2366AB: gtk_icon_theme_load_icon_for_scale (in
/usr/lib/x86_64-linux-gnu/libgtk-3.so.0.1000.2)
==5213==    by 0xA39FECA: ??? (in /usr/lib/x86_64-linux-
gnu/libgtk-3.so.0.1000.2)
==5213==    by 0xA3A0B40: ??? (in /usr/lib/x86_64-linux-
gnu/libgtk-3.so.0.1000.2)
==5213==    by 0xA3A5569: gtk_window_set_icon_name
(in /usr/lib/x86_64-linux-
gnu/libgtk-3.so.0.1000.2)
==5213==
==5213== Invalid read of size 4
==5213==    at 0xA7FE7A4: gdk_pixbuf_get_from_surface
(in /usr/lib/x86_64
-linux-gnu/libgdk-3.so.0.1000.2)
==5213==    by 0x45A4BB: ??? (in /usr/bin/gnome-control-center)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD631A9: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12B18: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xBC383B5: g_main_context_dispatch (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC38707: ??? (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC387AB: g_main_context_iteration
(in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xAD3EA8B: g_application_run (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0x4498C7: main (in /usr/bin/gnome-control-center)
==5213==  Address 0x36b15860 is 0 bytes after a block of size 207,360
alloc'd
==5213==    at 0x4C2B5D0: calloc (vg_replace_malloc.c:618)
==5213==    by 0x1B1A3F49: ??? (in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0x1B1A3FDB: ??? (in /usr/lib/x86_64-linux-
gnu/libpixman-1.so.0.30.2)
==5213==    by 0xB6BA466: ??? (in /usr/lib/x86_64-linux-
gnu/libcairo.so.2.11200.16)
==5213==    by 0x45A441: ??? (in /usr/bin/gnome-control-center)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD631A9: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12B18: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xBC383B5: g_main_context_dispatch (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC38707: ??? (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC387AB: g_main_context_iteration
(in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==
==5213== Invalid read of size 4
==5213==    at 0xA7FE7D7: gdk_pixbuf_get_from_surface
(in /usr/lib/x86_64
-linux-gnu/libgdk-3.so.0.1000.2)
==5213==    by 0x45A4BB: ??? (in /usr/bin/gnome-control-center)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD631A9: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12B18: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xBC383B5: g_main_context_dispatch (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC38707: ??? (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC387AB: g_main_context_iteration
(in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xAD3EA8B: g_application_run (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0x4498C7: main (in /usr/bin/gnome-control-center)
==5213==  Address 0x36b15888 is not stack'd, malloc'd or (recently)
free'd
==5213==
==5213== Invalid read of size 1
==5213==    at 0xA7FE7F0: gdk_pixbuf_get_from_surface
(in /usr/lib/x86_64
-linux-gnu/libgdk-3.so.0.1000.2)
==5213==    by 0x45A4BB: ??? (in /usr/bin/gnome-control-center)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD631A9: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12B18: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xBC383B5: g_main_context_dispatch (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC38707: ??? (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC387AB: g_main_context_iteration
(in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xAD3EA8B: g_application_run (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0x4498C7: main (in /usr/bin/gnome-control-center)
==5213==  Address 0x36b15888 is not stack'd, malloc'd or (recently)
free'd
==5213==
==5213== Conditional jump or move depends on uninitialised value(s)
==5213==    at 0xA7FE7B1: gdk_pixbuf_get_from_surface
(in /usr/lib/x86_64
-linux-gnu/libgdk-3.so.0.1000.2)
==5213==    by 0x45A4BB: ??? (in /usr/bin/gnome-control-center)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD631A9: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12B18: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xBC383B5: g_main_context_dispatch (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC38707: ??? (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC387AB: g_main_context_iteration
(in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xAD3EA8B: g_application_run (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0x4498C7: main (in /usr/bin/gnome-control-center)
==5213==
==5213==
==5213== Process terminating with default action of signal 11 (SIGSEGV)
==5213==  Bad permissions for mapped region at address 0x36C8B000
==5213==    at 0xA7FE7A4: gdk_pixbuf_get_from_surface
(in /usr/lib/x86_64
-linux-gnu/libgdk-3.so.0.1000.2)
==5213==    by 0x45A4BB: ??? (in /usr/bin/gnome-control-center)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD631A9: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12AB6: g_simple_async_result_complete
(in /usr/lib/x86_64
-linux-gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xAD12B18: ??? (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0xBC383B5: g_main_context_dispatch (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC38707: ??? (in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xBC387AB: g_main_context_iteration
(in /lib/x86_64-linux-
gnu/libglib-2.0.so.0.3800.1)
==5213==    by 0xAD3EA8B: g_application_run (in /usr/lib/x86_64-linux-
gnu/libgio-2.0.so.0.3800.1)
==5213==    by 0x4498C7: main (in /usr/bin/gnome-control-center)
==5213==
==5213== HEAP SUMMARY:
==5213==     in use at exit: 17,246,922 bytes in 81,112 blocks
==5213==   total heap usage: 602,948 allocs, 521,836 frees, 66,355,376
bytes
allocated
==5213==
==5213== LEAK SUMMARY:
==5213==    definitely lost: 24,050 bytes in 34 blocks
==5213==    indirectly lost: 20,544 bytes in 836 blocks
==5213==      possibly lost: 175,521 bytes in 2,338 blocks
==5213==    still reachable: 16,771,135 bytes in 76,561 blocks
==5213==         suppressed: 0 bytes in 0 blocks
==5213== Rerun with --leak-check=full to see details of leaked memory
==5213==
==5213== For counts of detected and suppressed errors, rerun with: -v
==5213== Use --track-origins=yes to see where uninitialised values come
from
==5213== ERROR SUMMARY: 410180 errors from 8 contexts (suppressed: 16
from 3)





-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.11-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libgtk-3-0 depends on:
ii  libatk-bridge2.0-0   2.10.0-2
ii  libatk1.0-0          2.10.0-2
ii  libc6                2.17-97
ii  libcairo-gobject2    1.12.16-2
ii  libcairo2            1.12.16-2
ii  libcolord1           1.0.2-1
ii  libcomerr2           1.42.8-1
ii  libcups2             1.6.4-2
ii  libfontconfig1       2.11.0-2
ii  libfreetype6         2.5.1-1
ii  libgcrypt11          1.5.3-2
ii  libgdk-pixbuf2.0-0   2.28.2-1
ii  libglib2.0-0         2.38.1-2
ii  libgnutls26          2.12.23-8
ii  libgssapi-krb5-2     1.11.3+dfsg-3
ii  libgtk-3-common      3.10.2-1
ii  libk5crypto3         1.11.3+dfsg-3
ii  libkrb5-3            1.11.3+dfsg-3
ii  libpango-1.0-0       1.36.0-1
ii  libpangocairo-1.0-0  1.36.0-1
ii  libpangoft2-1.0-0    1.36.0-1
ii  libwayland-client0   1.3.0-1
ii  libwayland-cursor0   1.3.0-1
ii  libx11-6             2:1.6.2-1
ii  libxcomposite1       1:0.4.4-1
ii  libxcursor1          1:1.1.14-1
ii  libxdamage1          1:1.1.4-1
ii  libxext6             2:1.3.2-1
ii  libxfixes3           1:5.0.1-1
ii  libxi6               2:1.7.2-1
ii  libxinerama1         2:1.1.3-1
ii  libxkbcommon0        0.3.1-2
ii  libxrandr2           2:1.4.1-1
ii  multiarch-support    2.17-97
ii  shared-mime-info     1.0-1+b1
ii  zlib1g               1:1.2.8.dfsg-1

Versions of packages libgtk-3-0 recommends:
ii  hicolor-icon-theme  0.12-1
ii  libgtk-3-bin        3.10.2-1

Versions of packages libgtk-3-0 suggests:
ii  gvfs             1.18.2-1
ii  librsvg2-common  2.40.0-1

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 230 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20131203/e887e98a/attachment-0001.sig>


More information about the pkg-gnome-maintainers mailing list