Bug#711584: gnome-control-center: *** Error in `gnome-control-center': free(): invalid pointer: 0x00007f6e3619c000 ***

[Emilio Pozuelo Monfort]

reassign 711584 libgl1-mesa-dri 9.1.3-6
thanks

Hi,

On 10/06/13 19:54, Ludovic Lebègue wrote:
> The failure always happen ; whether I launch the control center from
> gnome menu or from command line.
> 
> Incidently using "valgrind gnome-control-center" command was a good
> workaround : the control center was displayed ...
> 
> Nevertheless I added the valgrind report and gdb backtrace.
> 
> I had to install libgl1-mesa-dri-dbg to obtain nouveau_dri.so traces.

Given the gdb and valgrind traces from below, this definitely looks like a bug
in mesa or in llvm. Reassigning to mesa for now.

Emilio

> 20130610-711584-valgrind-report
> 
> 
> ==4938== Memcheck, a memory error detector
> ==4938== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
> ==4938== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
> ==4938== Command: gnome-control-center
> ==4938== 
> ==4938== Invalid free() / delete / delete[] / realloc()
> ==4938==    at 0x4C2A64C: operator delete(void*) (vg_replace_malloc.c:480)
> ==4938==    by 0x28A9ECCB: ??? (in /usr/lib/x86_64-linux-gnu/libLLVM-3.2.so.1)
> ==4938==    by 0x7156B40: __run_exit_handlers (exit.c:77)
> ==4938==    by 0x7156BC4: exit (exit.c:99)
> ==4938==    by 0x713EA5B: (below main) (libc-start.c:294)
> ==4938==  Address 0x2a3813c0 is not stack'd, malloc'd or (recently) free'd
> ==4938== 
> ==4938== 
> ==4938== HEAP SUMMARY:
> ==4938==     in use at exit: 12,112,272 bytes in 61,580 blocks
> ==4938==   total heap usage: 410,774 allocs, 349,201 frees, 40,880,875 bytes allocated
> ==4938== 
> ==4938== LEAK SUMMARY:
> ==4938==    definitely lost: 24,106 bytes in 19 blocks
> ==4938==    indirectly lost: 11,744 bytes in 365 blocks
> ==4938==      possibly lost: 2,392,073 bytes in 21,204 blocks
> ==4938==    still reachable: 9,684,349 bytes in 39,992 blocks
> ==4938==         suppressed: 0 bytes in 0 blocks
> ==4938== Rerun with --leak-check=full to see details of leaked memory
> ==4938== 
> ==4938== For counts of detected and suppressed errors, rerun with: -v
> ==4938== ERROR SUMMARY: 7 errors from 1 contexts (suppressed: 2 from 2)
> 
> 
> gdb.txt
> 
> 
> Starting program: /usr/bin/gnome-control-center 
> warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000
> warning: Could not load shared library symbols for linux-vdso.so.1.
> Do you need "set solib-search-path" or "set sysroot"?
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
> [New Thread 0x7fffef838700 (LWP 5990)]
> [New Thread 0x7fffd1fe9700 (LWP 5991)]
> 
> Program received signal SIGABRT, Aborted.
> 0x00007ffff5779295 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
> 56	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
> #0  0x00007ffff5779295 in __GI_raise (sig=sig at entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
> #1  0x00007ffff577c438 in __GI_abort () at abort.c:90
> #2  0x00007ffff57b486b in __libc_message (do_abort=do_abort at entry=2, 
>     fmt=fmt at entry=0x7ffff58b0d28 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
> #3  0x00007ffff57beac6 in malloc_printerr (action=3, str=0x7ffff58accca "free(): invalid pointer", ptr=<optimized out>)
>     at malloc.c:4902
> #4  0x00007ffff57bf843 in _int_free (av=<optimized out>, p=0x7fffd16ecff0, have_lock=0) at malloc.c:3758
> #5  0x00007fffd38f570e in get_mesa_program (shader=0x1041590, shader_program=0xb942c0, ctx=0xaf6140)
>     at ../../../../src/mesa/state_tracker/st_glsl_to_tgsi.cpp:5045
> #6  st_link_shader (ctx=0xaf6140, prog=0xb942c0) at ../../../../src/mesa/state_tracker/st_glsl_to_tgsi.cpp:5222
> #7  0x00007fffd3963672 in _mesa_glsl_link_shader (ctx=0xaf6140, prog=0xb942c0)
>     at ../../../../../src/mesa/program/ir_to_mesa.cpp:3182
> #8  0x00007fffd3825617 in create_new_program (key=0x7fffffffd7c0, ctx=0xaf6140)
>     at ../../../../src/mesa/main/ff_fragment_shader.cpp:1352
> #9  _mesa_get_fixed_func_fragment_program (ctx=ctx at entry=0xaf6140) at ../../../../src/mesa/main/ff_fragment_shader.cpp:1398
> #10 0x00007fffd387234a in update_program (ctx=0xaf6140) at ../../../../src/mesa/main/state.c:153
> #11 _mesa_update_state_locked (ctx=ctx at entry=0xaf6140) at ../../../../src/mesa/main/state.c:557
> #12 0x00007fffd38725c1 in _mesa_update_state (ctx=ctx at entry=0xaf6140) at ../../../../src/mesa/main/state.c:588
> #13 0x00007fffd3838106 in check_extra (func=0x7fffd3b65ee7 "glGetIntegerv", ctx=0xaf6140, d=<optimized out>)
>     at ../../../../src/mesa/main/get.c:948
> #14 find_value (func=func at entry=0x7fffd3b65ee7 "glGetIntegerv", pname=<optimized out>, p=p at entry=0x7fffffffd998, 
>     v=v at entry=0x7fffffffd9a0) at ../../../../src/mesa/main/get.c:1063
> #15 0x00007fffd38386b3 in _mesa_GetIntegerv (pname=<optimized out>, params=0x7fffffffdb6c) at ../../../../src/mesa/main/get.c:1281
> #16 0x00007fffd548eb2c in ?? () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
> #17 0x00007fffd54d961a in ?? () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
> #18 0x00007fffd54972bb in cogl_context_new () from /usr/lib/x86_64-linux-gnu/libcogl.so.9
> #19 0x00007fffd5970333 in clutter_backend_real_create_context (error=0x7fffffffdde8, backend=0x83d790) at ./clutter-backend.c:341
> #20 clutter_backend_real_create_context (backend=0x83d790, error=0x7fffffffdde8) at ./clutter-backend.c:256
> #21 0x00007fffd59872b3 in _clutter_feature_init (error=error at entry=0x7fffffffdde8) at ./clutter-feature.c:107
> #22 0x00007fffd5992cda in clutter_init_real (error=error at entry=0x7fffffffdde8) at ./clutter-main.c:1571
> #23 0x00007fffd5992f0b in post_parse_hook (error=0x7fffffffdde8, context=<optimized out>, group=<optimized out>, 
>     data=<optimized out>) at ./clutter-main.c:1782
> #24 post_parse_hook (context=<optimized out>, group=<optimized out>, data=<optimized out>, error=0x7fffffffdde8)
>     at ./clutter-main.c:1750
> #25 0x00007ffff609c757 in g_option_context_parse () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
> #26 0x00007fffd59931d2 in clutter_parse_args (error=0x7fffffffdde0, argv=0x0, argc=0x0) at ./clutter-main.c:2018
> #27 clutter_init (argc=0x0, argv=0x0) at ./clutter-main.c:2080
> #28 0x00007fffd5e54e34 in cheese_gtk_init () from /usr/lib/x86_64-linux-gnu/libcheese-gtk.so.21
> #29 0x00007fffd60782e3 in g_io_module_load () from /usr/lib/control-center-1/panels/libuser-accounts.so
> #30 0x00007ffff65ef4f6 in ?? () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
> #31 0x00007ffff63775a1 in g_type_module_use () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> #32 0x00007ffff65ef8d4 in g_io_modules_load_all_in_directory_with_scope () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
> #33 0x00000000004098da in ?? ()
> #34 0x00007ffff637493f in g_type_create_instance () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> #35 0x00007ffff6359758 in ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> #36 0x00007ffff635b211 in g_object_newv () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> #37 0x00007ffff635b85c in g_object_new () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
> #38 0x0000000000407c62 in main ()
> A debugging session is active.