[Bug 34263] New: Crashes when receiving a Call

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=34263

           Summary: Crashes when receiving a Call
           Product: Telepathy
           Version: git master
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: gabble
        AssignedTo: telepathy-bugs at lists.freedesktop.org
        ReportedBy: pochu27 at gmail.com
         QAContact: telepathy-bugs at lists.freedesktop.org


This is with gabble 0.11.6

I'm adding support for Call in Empathy, and testing with gabble I've got it to
crash. I'm testing from one gabble account to another one in the same Empathy
instance, and apparently the caller is disconnected because of some gstreamer
error. And when closing the receiver's call window, gabble crashes:


Program received signal SIGSEGV, Segmentation fault.
g_value_array_free (value_array=0x151c050) at
/tmp/buildd/glib2.0-2.28.0/./gobject/gvaluearray.c:147
147    /tmp/buildd/glib2.0-2.28.0/./gobject/gvaluearray.c: No such file or
directory.
    in /tmp/buildd/glib2.0-2.28.0/./gobject/gvaluearray.c
(gdb) bt
#0  g_value_array_free (value_array=0x151c050) at
/tmp/buildd/glib2.0-2.28.0/./gobject/gvaluearray.c:147
#1  0x00007ffff5f636f3 in g_value_unset (value=0x7fffffffda30) at
/tmp/buildd/glib2.0-2.28.0/./gobject/gvalue.c:275
#2  0x00007ffff7bd4ff8 in ptrarray_free (type=<value optimized out>,
val=0x154a4c0) at dbus-gvalue-utils.c:1022
#3  0x00007ffff5f3b66a in g_boxed_free (boxed_type=16286512, boxed=0x154a4c0)
    at /tmp/buildd/glib2.0-2.28.0/./gobject/gboxed.c:395
#4  0x00000000004f8d02 in tpy_base_media_call_stream_finalize (object=0x7ff530)
at base-media-call-stream.c:372
#5  0x00007ffff5f40504 in g_object_unref (_object=<value optimized out>)
    at /tmp/buildd/glib2.0-2.28.0/./gobject/gobject.c:2734
#6  0x00007ffff5f3e14e in g_closure_invoke (closure=0xeb05a0, return_value=0x0,
n_param_values=1, 
    param_values=0xec8ae0, invocation_hint=0x7fffffffdc40) at
/tmp/buildd/glib2.0-2.28.0/./gobject/gclosure.c:767
#7  0x00007ffff5f56657 in signal_emit_unlocked_R (node=0xe6e340, detail=<value
optimized out>, 
    instance=<value optimized out>, emission_return=<value optimized out>,
instance_and_params=<value optimized out>)
    at /tmp/buildd/glib2.0-2.28.0/./gobject/gsignal.c:3252
#8  0x00007ffff5f57cd6 in g_signal_emit_valist (instance=0x15205e0,
signal_id=<value optimized out>, detail=0, 
    var_args=0x7fffffffde30) at
/tmp/buildd/glib2.0-2.28.0/./gobject/gsignal.c:2983
#9  0x00007ffff5f58223 in g_signal_emit (instance=0x600000007, signal_id=0,
detail=7)
    at /tmp/buildd/glib2.0-2.28.0/./gobject/gsignal.c:3040
#10 0x00000000004cfb31 in gabble_call_member_content_remove (self=0x15205e0) at
call-member-content.c:475
#11 0x00000000004ce91c in gabble_call_member_shutdown (self=<value optimized
out>) at call-member.c:602
#12 0x00000000004f6d8a in gabble_base_call_channel_shutdown_all_members
(self=<value optimized out>)
    at base-call-channel.c:318
#13 0x00000000004ef48a in tpy_base_call_channel_hangup (iface=<value optimized
out>, reason=1, 
    detailed_reason=0xaddcd0 "", message=0x14ac3f0 "", context=0xefd9e0) at
base-call-channel.c:725
#14 0x00007ffff7bc99db in invoke_object_method (connection=<value optimized
out>, message=0x1511d10, 
    user_data=<value optimized out>) at dbus-gobject.c:1724
#15 object_registration_message (connection=<value optimized out>,
message=0x1511d10, 
    user_data=<value optimized out>) at dbus-gobject.c:1944
#16 0x00007ffff79956ae in _dbus_object_tree_dispatch_and_unlock (tree=0x77a970,
message=0x1511d10)
    at dbus-object-tree.c:858
#17 0x00007ffff7988c8c in dbus_connection_dispatch (connection=0x77acb0) at
dbus-connection.c:4688
#18 0x00007ffff7bc5bb5 in message_queue_dispatch (source=<value optimized out>,
callback=<value optimized out>, 
    user_data=<value optimized out>) at dbus-gmain.c:101
#19 0x00007ffff56782e2 in g_main_dispatch (context=0x77db20) at
/tmp/buildd/glib2.0-2.28.0/./glib/gmain.c:2440
#20 g_main_context_dispatch (context=0x77db20) at
/tmp/buildd/glib2.0-2.28.0/./glib/gmain.c:3013
#21 0x00007ffff567c9a8 in g_main_context_iterate (context=0x77db20,
block=<value optimized out>, 
    dispatch=<value optimized out>, self=<value optimized out>) at
/tmp/buildd/glib2.0-2.28.0/./glib/gmain.c:3091
#22 0x00007ffff567ceb5 in g_main_loop_run (loop=0x773af0) at
/tmp/buildd/glib2.0-2.28.0/./glib/gmain.c:3299
#23 0x00007ffff6a3221f in tp_run_connection_manager (prog_name=<value optimized
out>, version=<value optimized out>, 
    construct_cm=<value optimized out>, argc=<value optimized out>, argv=<value
optimized out>) at run.c:285
#24 0x0000000000433f2e in gabble_main (argc=1, argv=0x7fffffffe648) at
gabble.c:149
#25 0x00007ffff52f2c4d in __libc_start_main (main=<value optimized out>,
argc=<value optimized out>, 
    ubp_av=<value optimized out>, init=<value optimized out>, fini=<value
optimized out>, 
    rtld_fini=<value optimized out>, stack_end=0x7fffffffe638) at
libc-start.c:228
#26 0x0000000000433d89 in _start ()
(gdb)

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.