Bug#708559: SIGSEGV in gtk_tray_icon_manager_filter

infernix infernix at infernix.net
Tue Jul 7 21:40:08 UTC 2015


Here's another report on a segfault in gtk_tray_icon_manager_filter 
using Chrome under AwesomeWM.

It does not happen consistently but once in every 10 to 50 times where a 
Save file or Open file dialog is triggered.

This is on sid.

gdb /opt/google/chrome/chrome ./google-chrome-stable-core

GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /opt/google/chrome/chrome...b(no debugging symbols 
found)...done.
[New LWP 3773]
[New LWP 3827]
[New LWP 3801]
[New LWP 3804]
[New LWP 29670]
[New LWP 3806]
[New LWP 3788]
[New LWP 3809]
[New LWP 3825]
[New LWP 3830]
[New LWP 29660]
[New LWP 3815]
[New LWP 3837]
[New LWP 29663]
[New LWP 29666]
[New LWP 3808]
[New LWP 4475]
[New LWP 29659]
[New LWP 5183]
[New LWP 29664]
[New LWP 3807]
[New LWP 3855]
[New LWP 3798]
[New LWP 3963]
[New LWP 29661]
[New LWP 29665]
[New LWP 3803]
[New LWP 5128]
[New LWP 3864]
[New LWP 13336]
[New LWP 3805]
[New LWP 3813]
[New LWP 3802]
[New LWP 3818]
[New LWP 29667]
[New LWP 29669]
[New LWP 3811]
[New LWP 3847]
[New LWP 3810]
[New LWP 4474]
[New LWP 935]
[New LWP 3796]
[New LWP 3797]
[New LWP 3814]
[New LWP 3829]
[New LWP 3949]
[New LWP 6654]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
tCore was generated by `/opt/google/chrome/chrome --enable-logging --v'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f90b7eab7a6 in gtk_tray_icon_manager_filter 
(xevent=0x7ffcbaa07730, event=<optimized out>, user_data=0xe77e3eaf3b0)
     at /tmp/buildd/gtk+2.0-2.24.28/gtk/gtktrayicon-x11.c:400
400	  else if (xev->xany.window == icon->priv->manager_window)
(gdb) bt
#0  0x00007f90b7eab7a6 in gtk_tray_icon_manager_filter 
(xevent=0x7ffcbaa07730, event=<optimized out>, user_data=0xe77e3eaf3b0)
     at /tmp/buildd/gtk+2.0-2.24.28/gtk/gtktrayicon-x11.c:400
#1  0x00007f90b798cdd1 in gdk_event_apply_filters 
(xevent=0x7ffcbaa07730, event=0xe77edde3660, window=0x0)
     at /tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:371
#2  0x00007f90b798e0d4 in gdk_event_translate (display=0xe77e3e04020 
[GdkDisplayX11], event=0xe77edde3660, xevent=0x7ffcbaa07730, 
return_exposes=return_exposes at entry=0) at 
/tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:969
#3  0x00007f90b798fae6 in _gdk_events_queue 
(display=display at entry=0xe77e3e04020 [GdkDisplayX11])
     at /tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:2358
#4  0x00007f90b798fb8e in gdk_event_dispatch (source=<optimized out>, 
callback=<optimized out>, user_data=<optimized out>)
     at /tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:2419
#5  0x00007f90bc92bc3d in g_main_context_dispatch 
(context=0xe77e3dc6b00) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3122
#6  0x00007f90bc92bc3d in g_main_context_dispatch 
(context=context at entry=0xe77e3dc6b00) at 
/tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3737
#7  0x00007f90bc92bf20 in g_main_context_iterate 
(context=context at entry=0xe77e3dc6b00, block=block at entry=0, 
dispatch=dispatch at entry=1, self=<optimized out>)
     at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3808
#8  0x00007f90bc92bfcc in g_main_context_iteration 
(context=0xe77e3dc6b00, may_block=0) at 
/tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3869
#9  0x00007f90be6d3e32 in  ()
#10 0x00000e77e3ddf000 in  ()
#11 0x00000001be6db600 in  ()
#12 0x0000000000000001 in  ()
#13 0x00007ffcbaa07a18 in  ()
#14 0x00007f90be0fe048 in  ()
#15 0x00007ffcbaa07cc0 in  ()
#16 0x00007ffcbaa079a8 in  ()
#17 0x00000e77e3de0ea0 in  ()
#18 0x00007f90c34b57d0 in  ()
#19 0x00007f90be69b560 in  ()
#20 0x00007f90c34b57d0 in  ()
#21 0x000000001d25af40 in  ()
#22 0x00000e77e3ddec80 in  ()
#23 0x00000e7700061fdd in  ()
#24 0x0000000000000000 in  ()
(gdb) bt full
#0  0x00007f90b7eab7a6 in gtk_tray_icon_manager_filter 
(xevent=0x7ffcbaa07730, event=<optimized out>, user_data=0xe77e3eaf3b0)
     at /tmp/buildd/gtk+2.0-2.24.28/gtk/gtktrayicon-x11.c:400
         icon = 0xe77e3eaf3b0
         xev = 0x7ffcbaa07730
#1  0x00007f90b798cdd1 in gdk_event_apply_filters 
(xevent=0x7ffcbaa07730, event=0xe77edde3660, window=0x0)
     at /tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:371
         filter = 0xe77e5acf8c0
         node = <optimized out>
         tmp_list = 0xe77e5929980 = {0xe77e5acf8c0}
         result = <optimized out>
#2  0x00007f90b798e0d4 in gdk_event_translate (display=0xe77e3e04020 
[GdkDisplayX11], event=0xe77edde3660, xevent=0x7ffcbaa07730, 
return_exposes=return_exposes at entry=0) at 
/tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:969
         return_val = -1163888848
#3  0x00007f90b798fae6 in _gdk_events_queue 
(display=display at entry=0xe77e3e04020 [GdkDisplayX11])
     at /tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:2358
         node = 0xe77e59a9c20 = {0xe77edde3660}
         event = 0xe77edde3660
         xevent =
             {type = 28, xany = {type = 28, serial = 42915, send_event = 
0, display = 0xe77e3df8800, window = 35657038}, xkey = {type = 28, 
serial = 42915, send_event = 0, display = 0xe77e3df8800, window = 
35657038, root = 305, subwindow = 539759959, time = 34359738368, x = 
255, y = 3, x_root = 539429255, y_root = 0, state = 0, keycode = 3, 
same_screen = 1}, xbutton = {type = 28, serial = 42915, send_event = 0, 
display = 0xe77e3df8800, window = 35657038, root = 305, subwindow = 
539759959, time = 34359738368, x = 255, y = 3, x_root = 539429255, 
y_root = 0, state = 0, button = 3, same_screen = 1}, xmotion = {type = 
28, serial = 42915, send_event = 0, display = 0xe77e3df8800, window = 
35657038, root = 305, subwindow = 539759959, time = 34359738368, x = 
255, y = 3, x_root = 539429255, y_root = 0, state = 0, is_hint = 3 
'\003', same_screen = 1}, xcrossing = {type = 28, serial = 42915, 
send_event = 0, display = 0xe77e3df8800, window = 35657038, root = 305, 
subwindow = 539759959, time = 34359738368, x = 255, y = 3, x_root = 
539429255, y_root = 0, mode = 0, detail = 3, same_screen = 1, focus = 0, 
state = 16}, xfocus = {type = 28, serial = 42915, send_event = 0, 
display = 0xe77e3df8800, window = 35657038, mode = 305, detail = 0}, 
xexpose = {type = 28, serial = 42915, send_event = 0, display = 
0xe77e3df8800, window = 35657038, x = 305, y = 0, width = 539759959, 
height = 0, count = 0}, xgraphicsexpose = {type = 28, serial = 42915, 
send_event = 0, display = 0xe77e3df8800, drawable = 35657038, x = 305, y 
= 0, width = 539759959, height = 0, count = 0, major_code = 8, 
minor_code = 255}, xnoexpose = {type = 28, serial = 42915, send_event = 
0, display = 0xe77e3df8800, drawable = 35657038, major_code = 305, 
minor_code = 0}, xvisibility = {type = 28, serial = 42915, send_event = 
0, display = 0xe77e3df8800, window = 35657038, state = 305}, 
xcreatewindow = {type = 28, serial = 42915, send_event = 0, display = 
0xe77e3df8800, parent = 35657038, window = 305, x = 539759959, y = 0, 
width = 0, height = 8, border_width = 255, override_redirect = 3}, 
xdestroywindow = {type = 28, serial = 42915, send_event = 0, display = 
0xe77e3df8800, event = 35657038, window = 305}, xunmap = {type = 28, 
serial = 42915, send_event = 0, display = 0xe77e3df8800, event = 
35657038, window = 305, from_configure = 539759959}, xmap = {type = 28, 
serial = 42915, send_event = 0, display = 0xe77e3df8800, event = 
35657038, window = 305, override_redirect = 539759959}, xmaprequest = 
{type = 28, serial = 42915, send_event = 0, display = 0xe77e3df8800, 
parent = 35657038, window = 305}, xreparent = {type = 28, serial = 
42915, send_event = 0, display = 0xe77e3df8800, event = 35657038, window 
= 305, parent = 539759959, x = 0, y = 8, override_redirect = 255}, 
xconfigure = {type = 28, serial = 42915, send_event = 0, display = 
0xe77e3df8800, event = 35657038, window = 305, x = 539759959, y = 0, 
width = 0, height = 8, border_width = 255, above = 539429255, 
override_redirect = 0}, xgravity = {type = 28, serial = 42915, 
send_event = 0, display = 0xe77e3df8800, event = 35657038, window = 305, 
x = 539759959, y = 0}, xresizerequest = {type = 28, serial = 42915, 
send_event = 0, display = 0xe77e3df8800, window = 35657038, width = 305, 
height = 0}, xconfigurerequest = {type = 28, serial = 42915, send_event 
= 0, display = 0xe77e3df8800, parent = 35657038, window = 305, x = 
539759959, y = 0, width = 0, height = 8, border_width = 255, above = 
539429255, detail = 0, value_mask = 1}, xcirculate = {type = 28, serial 
= 42915, send_event = 0, display = 0xe77e3df8800, event = 35657038, 
window = 305, place = 539759959}, xcirculaterequest = {type = 28, serial 
= 42915, send_event = 0, display = 0xe77e3df8800, parent = 35657038, 
window = 305, place = 539759959}, xproperty = {type = 28, serial = 
42915, send_event = 0, display = 0xe77e3df8800, window = 35657038, atom 
= 305, time = 539759959, state = 0}, xselectionclear = {type = 28, 
serial = 42915, send_event = 0, display = 0xe77e3df8800, window = 
35657038, selection = 305, time = 539759959}, xselectionrequest = {type 
= 28, serial = 42915, send_event = 0, display = 0xe77e3df8800, owner = 
35657038, requestor = 305, selection = 539759959, target = 34359738368, 
property = 12884902143, time = 539429255}, xselection = {type = 28, 
serial = 42915, send_event = 0, display = 0xe77e3df8800, requestor = 
35657038, selection = 305, target = 539759959, property = 343---Type 
<return> to continue, or q <return> to quit---
59738368, time = 12884902143}, xcolormap = {type = 28, serial = 42915, 
send_event = 0, display = 0xe77e3df8800, window = 35657038, colormap = 
305, new = 539759959, state = 0}, xclient = {type = 28, serial = 42915, 
send_event = 0, display = 0xe77e3df8800, window = 35657038, message_type 
= 305, format = 539759959, data = {b = 
"\000\000\000\000\b\000\000\000\377\000\000\000\003\000\000\000\207\t' 
", s = {0, 0, 8, 0, 255, 0, 3, 0, 2439, 8231}, l = {34359738368, 
12884902143, 539429255, 12884901888, 1}}}, xmapping = {type = 28, serial 
= 42915, send_event = 0, display = 0xe77e3df8800, window = 35657038, 
request = 305, first_keycode = 0, count = 539759959}, xerror = {type = 
28, display = 0xa7a3, resourceid = 0, serial = 15908086974464, 
error_code = 78 'N', request_code = 21 '\025', minor_code = 32 ' '}, 
xkeymap = {type = 28, serial = 42915, send_event = 0, display = 
0xe77e3df8800, window = 35657038, key_vector = 
"1\001\000\000\000\000\000\000W\025, 
\000\000\000\000\000\000\000\000\b\000\000\000\377\000\000\000\003\000\000"}, 
xgeneric = {type = 28, serial = 42915, send_event = 0, display = 
0xe77e3df8800, extension = 35657038, evtype = 0}, xcookie = {type = 28, 
serial = 42915, send_event = 0, display = 0xe77e3df8800, extension = 
35657038, evtype = 0, cookie = 305, data = 0x202c1557}, pad = 
{-17179869156, 42915, 0, 15908086974464, 35657038, 305, 539759959, 
34359738368, 12884902143, 539429255, 12884901888, 1, -4294967280, 
-4294967296, 90194313224, -4294967296, 94489280541, 2980707303476, 
-4294967296, 0, 0, 0, 15908373998552, 0}}
         xdisplay = 0xe77e3df8800
#4  0x00007f90b798fb8e in gdk_event_dispatch (source=<optimized out>, 
callback=<optimized out>, user_data=<optimized out>)
     at /tmp/buildd/gtk+2.0-2.24.28/gdk/x11/gdkevents-x11.c:2419
         display = 0xe77e3e04020 [GdkDisplayX11]
         event = <optimized out>
#5  0x00007f90bc92bc3d in g_main_context_dispatch 
(context=0xe77e3dc6b00) at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3122
         dispatch = 0x7f90b798fb70 <gdk_event_dispatch>
         prev_source = 0x0
         was_in_call = 0
         user_data = 0x0
         callback = 0x0
         cb_funcs = <optimized out>
         cb_data = <optimized out>
         need_destroy = <optimized out>
         source = 0xe77e3dc3460
         current = 0xe77e3ee0b20
         i = 0
#6  0x00007f90bc92bc3d in g_main_context_dispatch 
(context=context at entry=0xe77e3dc6b00) at 
/tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3737
#7  0x00007f90bc92bf20 in g_main_context_iterate 
(context=context at entry=0xe77e3dc6b00, block=block at entry=0, 
dispatch=dispatch at entry=1, self=<optimized out>)
     at /tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3808
         max_priority = 0
         timeout = 0
         some_ready = 1
         nfds = <optimized out>
         allocated_nfds = 5
         fds = 0xe77e3fd4990
#8  0x00007f90bc92bfcc in g_main_context_iteration 
(context=0xe77e3dc6b00, may_block=0) at 
/tmp/buildd/glib2.0-2.44.1/./glib/gmain.c:3869
         retval = <optimized out>
#9  0x00007f90be6d3e32 in  ()
#10 0x00000e77e3ddf000 in  ()
#11 0x00000001be6db600 in  ()
#12 0x0000000000000001 in  ()
#13 0x00007ffcbaa07a18 in  ()
#14 0x00007f90be0fe048 in  ()
#15 0x00007ffcbaa07cc0 in  ()
#16 0x00007ffcbaa079a8 in  ()
---Type <return> to continue, or q <return> to quit---
#17 0x00000e77e3de0ea0 in  ()
#18 0x00007f90c34b57d0 in  ()
#19 0x00007f90be69b560 in  ()
#20 0x00007f90c34b57d0 in  ()
#21 0x000000001d25af40 in  ()
#22 0x00000e77e3ddec80 in  ()
#23 0x00000e7700061fdd in  ()
#24 0x0000000000000000 in  ()



More information about the pkg-gnome-maintainers mailing list