[Pkg-phototools-devel] Bug#958720: Acknowledgement (darktable: Error at start - free(): invalid next size (fast))

[Ronny Bachmann]

So, here are my further tests...

Darktable crashes as soon as I load a directory with raw images in the
light table, which already contains an edited photo. A directory with
exclusively unedited photos is loaded without any problems.

But as soon as I open a photo for editing, it crashes. Here is the
debug info, hopefully it helps:

$ gdb darktable
GNU gdb (Debian 9.1-3) 9.1
Copyright (C) 2020 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <
http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>;.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>;.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from darktable...
Reading symbols from /usr/lib/debug/.build-
id/9d/9b84e4c2f04980a412a0af818454910a89287f.debug...
(gdb) r
Starting program: /usr/bin/darktable 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-
gnu/libthread_db.so.1".
[New Thread 0x7ffff0abf700 (LWP 28492)]
[New Thread 0x7fffebfff700 (LWP 28493)]
[New Thread 0x7fffeb7fe700 (LWP 28494)]
[New Thread 0x7fffeaffd700 (LWP 28495)]
[New Thread 0x7fffea7fc700 (LWP 28496)]
[New Thread 0x7fffe9ffb700 (LWP 28497)]
[New Thread 0x7fffe97fa700 (LWP 28498)]
[New Thread 0x7fffe8ff9700 (LWP 28499)]
[New Thread 0x7fffcbfff700 (LWP 28500)]
[New Thread 0x7fffcb7fe700 (LWP 28501)]
[New Thread 0x7fffcaffd700 (LWP 28502)]
[New Thread 0x7fffca7fc700 (LWP 28503)]
[New Thread 0x7fffc9ffb700 (LWP 28504)]
[New Thread 0x7fffc97fa700 (LWP 28505)]
[New Thread 0x7fffc8ff9700 (LWP 28506)]
[New Thread 0x7fffb14d4700 (LWP 28507)]
[New Thread 0x7fffb0cd3700 (LWP 28508)]
[New Thread 0x7fffaa9c8700 (LWP 28509)]
[New Thread 0x7fffabfff700 (LWP 28510)]
[Thread 0x7fffabfff700 (LWP 28510) exited]
[New Thread 0x7fffabfff700 (LWP 28511)]
[Thread 0x7fffabfff700 (LWP 28511) exited]
[New Thread 0x7fffabfff700 (LWP 28512)]
[Thread 0x7fffabfff700 (LWP 28512) exited]
[New Thread 0x7fffabfff700 (LWP 28513)]
[Thread 0x7fffabfff700 (LWP 28513) exited]
[New Thread 0x7fffabfff700 (LWP 28514)]
[New Thread 0x7fffab7fe700 (LWP 28515)]
[New Thread 0x7fffa8b90700 (LWP 28516)]
[New Thread 0x7fffa1a91700 (LWP 28517)]
[New Thread 0x7fffa1290700 (LWP 28518)]
[New Thread 0x7fff7a38b700 (LWP 28519)]
[New Thread 0x7fff79b8a700 (LWP 28520)]
[New Thread 0x7fff7b754700 (LWP 28521)]
[Thread 0x7fff79b8a700 (LWP 28520) exited]
[Thread 0x7fffa8b90700 (LWP 28516) exited]
[Thread 0x7fffebfff700 (LWP 28493) exited]
[Thread 0x7fff7b754700 (LWP 28521) exited]
[New Thread 0x7fff7b754700 (LWP 28522)]
[New Thread 0x7fffebfff700 (LWP 28523)]
[Thread 0x7fffebfff700 (LWP 28523) exited]
[Thread 0x7fff7b754700 (LWP 28522) exited]
[New Thread 0x7fffebfff700 (LWP 28524)]
[Thread 0x7fffab7fe700 (LWP 28515) exited]
[New Thread 0x7fffab7fe700 (LWP 28525)]
[New Thread 0x7fff7b754700 (LWP 28526)]
[New Thread 0x7fffa8b90700 (LWP 28527)]
[New Thread 0x7fff79b8a700 (LWP 28528)]
[New Thread 0x7fffa0a8f700 (LWP 28529)]
[Thread 0x7fffab7fe700 (LWP 28525) exited]
free(): invalid next size (fast)

Thread 1 "darktable" received signal SIGABRT, Aborted.
__GI_raise (sig=sig at entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
50	../sysdeps/unix/sysv/linux/raise.c: Datei oder Verzeichnis
nicht gefunden.
(gdb) bt
#0  __GI_raise (sig=sig at entry=6) at
../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00007ffff7a6055b in __GI_abort () at abort.c:79
#2  0x00007ffff7ab9038 in __libc_message (action=action at entry=do_abort,
fmt=fmt at entry=0x7ffff7bc5f3e "%s\n") at
../sysdeps/posix/libc_fatal.c:181
#3  0x00007ffff7ac03da in malloc_printerr (str=str at entry=0x7ffff7bc7bc0
"free(): invalid next size (fast)") at malloc.c:5339
#4  0x00007ffff7ac1e4c in _int_free (av=0x7ffff7bf7b80 <main_arena>,
p=0x5555571334b0, have_lock=0) at malloc.c:4249
#5  0x00007ffff5f49ebf in sqlite3_free () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#6  0x00007ffff5f5e380 in  () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#7  0x00007ffff5f5e191 in  () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#8  0x00007ffff5fe06df in  () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#9  0x00007ffff5fe82b0 in  () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#10 0x00007ffff5fec543 in  () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#11 0x00007ffff5fec8df in  () at /usr/lib/x86_64-linux-
gnu/libsqlite3.so.0
#12 0x00007ffff5fec9d6 in sqlite3_prepare_v2 () at /usr/lib/x86_64-
linux-gnu/libsqlite3.so.0
#13 0x00007ffff7da5454 in _dev_auto_apply_presets (dev=<optimized out>)
at ./src/develop/develop.c:1334
#14 0x00007ffff7da9b3e in dt_dev_read_history_ext (no_image=0, imgid=1,
dev=0x5555564f2d40) at ./src/develop/develop.c:1549
#15 dt_dev_read_history_ext (dev=0x5555564f2d40, imgid=1, no_image=0)
at ./src/develop/develop.c:1512
#16 0x00007ffff7daad2e in dt_dev_load_image (dev=0x5555564f2d40,
imgid=1) at ./src/develop/develop.c:708
#17 0x00007fffe80b50a9 in enter (self=0x5555564f1970) at
./src/views/darkroom.c:2543
#18 0x00007ffff7e6e0f5 in dt_view_manager_switch_by_view
(vm=0x55555642b7d0, nv=0x5555564f1970) at ./src/views/view.c:451
#19 0x00007ffff7e6e3d5 in dt_view_manager_switch (vm=<optimized out>, 
view_name=view_name at entry=0x7ffff7f4c2c2 "darkroom") at
./src/views/view.c:281
#20 0x00007ffff7d745d0 in _dt_ctl_switch_mode_to
(user_data=0x7ffff7f4c2c2) at ./src/control/control.c:373
#21 0x00007ffff77bf685 in g_main_context_invoke_full () at
/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#22 0x00007ffff7e160a0 in button_pressed (w=0x5555563a3450,
event=0x555556e6eb20, user_data=<optimized out>) at ./src/gui/gtk.c:971
#23 0x00007ffff73a30fb in  () at /usr/lib/x86_64-linux-gnu/libgtk-
3.so.0
#24 0x00007ffff6b07fd2 in g_closure_invoke () at /usr/lib/x86_64-linux-
gnu/libgobject-2.0.so.0
#25 0x00007ffff6b1b784 in  () at /usr/lib/x86_64-linux-gnu/libgobject-
2.0.so.0
#26 0x00007ffff6b26078 in g_signal_emit_valist () at /usr/lib/x86_64-
linux-gnu/libgobject-2.0.so.0
#27 0x00007ffff6b26edf in g_signal_emit () at /usr/lib/x86_64-linux-
gnu/libgobject-2.0.so.0
#28 0x00007ffff734ef12 in  () at /usr/lib/x86_64-linux-gnu/libgtk-
3.so.0
#29 0x00007ffff720ec98 in  () at /usr/lib/x86_64-linux-gnu/libgtk-
3.so.0
#30 0x00007ffff7210e5b in gtk_main_do_event () at /usr/lib/x86_64-
linux-gnu/libgtk-3.so.0
#31 0x00007ffff6f0c815 in  () at /usr/lib/x86_64-linux-gnu/libgdk-
3.so.0
#32 0x00007ffff6f3ea62 in  () at /usr/lib/x86_64-linux-gnu/libgdk-
3.so.0
#33 0x00007ffff77be60d in g_main_context_dispatch () at
/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0
#34 0x00007ffff77be890 in  () at /usr/lib/x86_64-linux-gnu/libglib-
2.0.so.0
#35 0x00007ffff77beb63 in g_main_loop_run () at /usr/lib/x86_64-linux-
gnu/libglib-2.0.so.0
#36 0x00007ffff720fe85 in gtk_main () at /usr/lib/x86_64-linux-
gnu/libgtk-3.so.0
#37 0x00007ffff7e1904d in dt_gui_gtk_run (gui=<optimized out>) at
./src/gui/gtk.c:1350
#38 0x00005555555550a0 in main (argc=<optimized out>, argv=<optimized
out>) at ./src/main.c:93
(gdb) quit
A debugging session is active.

	Inferior 1 [process 28487] will be killed.

Quit anyway? (y or n) y