Bug#1108974: 2 more stack traces always in deconstructor

[Jeffrey Cliff]

you can easily reproduce a segfault in GlobalParams::~GlobalParams()
this way but the stack can be slightly different after that point -
but always in GlobalParams::~GlobalParams()

#0  __pthread_kill_implementation (threadid=<optimized out>,
signo=signo at entry=6, no_tid=no_tid at entry=0)
    at ./nptl/pthread_kill.c:44
#1  0x00007f68f62449ff in __pthread_kill_internal (threadid=<optimized
out>, signo=6) at ./nptl/pthread_kill.c:89
#2  0x00007f68f61efcc2 in __GI_raise (sig=sig at entry=6) at
../sysdeps/posix/raise.c:26
#3  0x00007f68f61d84ac in __GI_abort () at ./stdlib/abort.c:73
#4  0x00007f68f61d9291 in __libc_message_impl
(fmt=fmt at entry=0x7f68f635b32d "%s\n") at
../sysdeps/posix/libc_fatal.c:134
#5  0x00007f68f624e465 in malloc_printerr
(str=str at entry=0x7f68f635e6d8 "double free or corruption (out)")
    at ./malloc/malloc.c:5829
#6  0x00007f68f6250560 in _int_free_merge_chunk
    (av=av at entry=0x7f68f6397ac0 <main_arena>,
p=p at entry=0x7f68c8000290, size=size at entry=140088010648576)
    at ./malloc/malloc.c:4718
#7  0x00007f68f6250690 in _int_free_chunk
    (av=av at entry=0x7f68f6397ac0 <main_arena>,
p=p at entry=0x7f68c8000290, size=140088010648576, have_lock=<optimized
out>,
    have_lock at entry=0) at ./malloc/malloc.c:4667
#8  0x00007f68f62533c0 in _int_free (av=0x7f68f6397ac0 <main_arena>,
p=0x7f68c8000290, have_lock=0) at ./malloc/malloc.c:4699
#9  __GI___libc_free (mem=<optimized out>) at ./malloc/malloc.c:3476
#10 0x00007f68e91af0b1 in ??? () at /lib/x86_64-linux-gnu/libpoppler.so.147
#11 0x00007f68e91ac6b5 in GlobalParams::~GlobalParams() () at
/lib/x86_64-linux-gnu/libpoppler.so.147
#12 0x00007f68e91b356b in GlobalParamsIniter::~GlobalParamsIniter() ()
at /lib/x86_64-linux-gnu/libpoppler.so.147
#13 0x00007f68e9489510 in ??? () at /lib/x86_64-linux-gnu/libpoppler-glib.so.8
#14 0x00007f68f74654fe in g_object_unref () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#15 0x00007f68e950d538 in ??? () at
/usr/lib/x86_64-linux-gnu/evince/4/backends/libpdfdocument.so
#16 0x00007f68f7465289 in g_object_unref () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
--Type <RET> for more, q to quit, c to continue without paging--
#17 0x00007f68f752ae2e in ??? () at /lib/x86_64-linux-gnu/libevview3.so.3
#18 0x00007f68f7465289 in g_object_unref () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#19 0x00007f68f752e55f in ??? () at /lib/x86_64-linux-gnu/libevview3.so.3
#20 0x00007f68f752e672 in ??? () at /lib/x86_64-linux-gnu/libevview3.so.3
#21 0x00007f68f737d8c3 in ??? () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#22 0x00007f68f6242b7b in start_thread (arg=<optimized out>) at
./nptl/pthread_create.c:448
#23 0x00007f68f62c07b8 in __GI___clone3 () at
../sysdeps/unix/sysv/linux/x86_64/clone3.S:78



#0  __pthread_kill_implementation (threadid=<optimized out>,
signo=signo at entry=6, no_tid=no_tid at entry=0)
    at ./nptl/pthread_kill.c:44
#1  0x00007f316cf379ff in __pthread_kill_internal (threadid=<optimized
out>, signo=6) at ./nptl/pthread_kill.c:89
#2  0x00007f316cee2cc2 in __GI_raise (sig=sig at entry=6) at
../sysdeps/posix/raise.c:26
#3  0x00007f316cecb4ac in __GI_abort () at ./stdlib/abort.c:73
#4  0x00007f316cecc291 in __libc_message_impl
(fmt=fmt at entry=0x7f316d04e32d "%s\n") at
../sysdeps/posix/libc_fatal.c:134
#5  0x00007f316cf41465 in malloc_printerr
(str=str at entry=0x7f316d0510c0 "munmap_chunk(): invalid pointer")
    at ./malloc/malloc.c:5829
#6  0x00007f316cf416ec in munmap_chunk (p=p at entry=0x7f313c169520) at
./malloc/malloc.c:3042
#7  0x00007f316cf46398 in __GI___libc_free (mem=0x7f313c169530) at
./malloc/malloc.c:3466
#8  0x00007f315fdaf0b1 in ??? () at /lib/x86_64-linux-gnu/libpoppler.so.147
#9  0x00007f315fdac6b5 in GlobalParams::~GlobalParams() () at
/lib/x86_64-linux-gnu/libpoppler.so.147
#10 0x00007f315fdb356b in GlobalParamsIniter::~GlobalParamsIniter() ()
at /lib/x86_64-linux-gnu/libpoppler.so.147
#11 0x00007f316418b510 in ??? () at /lib/x86_64-linux-gnu/libpoppler-glib.so.8
#12 0x00007f316e1674fe in g_object_unref () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#13 0x00007f316420f538 in ??? () at
/usr/lib/x86_64-linux-gnu/evince/4/backends/libpdfdocument.so
#14 0x00007f316e167289 in g_object_unref () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#15 0x00007f316e22ce2e in ??? () at /lib/x86_64-linux-gnu/libevview3.so.3
#16 0x00007f316e167289 in g_object_unref () at
/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#17 0x00007f316e23055f in ??? () at /lib/x86_64-linux-gnu/libevview3.so.3
#18 0x00007f316e230672 in ??? () at /lib/x86_64-linux-gnu/libevview3.so.3
#19 0x00007f316e07f8c3 in ??? () at /lib/x86_64-linux-gnu/libglib-2.0.so.0
#20 0x00007f316cf35b7b in start_thread (arg=<optimized out>) at
./nptl/pthread_create.c:448
#21 0x00007f316cfb37b8 in __GI___clone3 () at
../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

-- 
------------------------------------------------------------------------------------------------
End the campaign to Cancel Richard Stallman - go to stallmansupport.org !
------------------------------------------------------------------------------------------------