[Bug 73029] New: mission-control-5 crash in magazine_chain_pop_head()

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Wed Dec 25 02:10:13 PST 2013


https://bugs.freedesktop.org/show_bug.cgi?id=73029

          Priority: medium
            Bug ID: 73029
          Assignee: telepathy-bugs at lists.freedesktop.org
           Summary: mission-control-5 crash in magazine_chain_pop_head()
        QA Contact: telepathy-bugs at lists.freedesktop.org
          Severity: critical
    Classification: Unclassified
                OS: Linux (All)
          Reporter: nalimilan at club.fr
          Hardware: x86-64 (AMD64)
            Status: NEW
           Version: 5.7
         Component: mission-control
           Product: Telepathy

This crash has been reported several times in Fedora 20. Looks like a memory
corruption problem. There does not seem to be ways of reproducing the bug
consistently, so it will be hard to debug.

telepathy-mission-control-5.16.0-2

https://bugzilla.redhat.com/show_bug.cgi?id=1030480

Thread 1 (Thread 0x7fa8e52aa880 (LWP 988)):
#0  magazine_chain_pop_head (magazine_chunks=0xda9680) at gslice.c:545
        chunk = 0x10000
#1  thread_memory_magazine1_alloc (tmem=<optimized out>, ix=0) at gslice.c:848
        mag = 0xda9680
        chunk = <optimized out>
#2  g_slice_alloc (mem_size=mem_size at entry=16) at gslice.c:1007
        ix = 0
        tmem = 0x10000
        chunk_size = 16
        mem = <optimized out>
#3  0x00000032930660e6 in g_slist_prepend (list=0x0, data=data at entry=0xe22420)
at gslist.c:267
        new_list = 0xda9670
#4  0x000000329381494b in g_object_notify_queue_add
(nqueue=nqueue at entry=0xe1cf20, pspec=0xe22420, object=<optimized out>) at
gobject.c:306
No locals.
#5  0x00000032938158f0 in object_set_property (nqueue=0xe1cf20,
value=<optimized out>, pspec=0xe22420, object=0xe28560) at gobject.c:1381
        tmp_value = {g_type = 14408896, data = {{v_int = 14412368, v_uint =
14412368, v_long = 14412368, v_ulong = 14412368, v_int64 = 14412368, v_uint64 =
14412368, v_float = 2.01960291e-38, v_double = 7.1206559040217148e-317,
v_pointer = 0xdbea50}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64
= 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        redirect = <optimized out>
        enable_diagnostic = 0x32938426c6 "0"
        class = 0xe2a360
        param_id = 1
#6  g_object_new_internal (class=class at entry=0xe2a360,
params=params at entry=0x7fffa6cbbe30, n_params=2) at gobject.c:1755
        value = <optimized out>
        pspec = 0xe22420
        j = <optimized out>
        node = 0xdc0a50
        nqueue = 0xe1cf20
        object = 0xe28560
        __FUNCTION__ = "g_object_new_internal"
#7  0x00000032938176a4 in g_object_new_valist
(object_type=object_type at entry=14423360,
first_property_name=first_property_name at entry=0x43cc8d "dbus-daemon",
var_args=var_args at entry=0x7fffa6cbbf80) at gobject.c:1978
        stack_params = {{pspec = 0xe22420, value = 0x7fffa6cbbd80}, {pspec =
0xe22490, value = 0x7fffa6cbbd50}, {pspec = 0xdb9da0, value = 0x7fffa6cbbda0},
{pspec = 0x7fa8e5718000, value = 0x65d680}, {pspec = 0x32b8c18108, value =
0x402e38}, {pspec = 0x500000000, value = 0x100000318}, {pspec = 0x7fffa6cbc1a0,
value = 0x7fffa6cbc018}, {pspec = 0x7fffa6cbbff0, value = 0x7fa8e54c6850},
{pspec = 0x1, value = 0x32906234c0}, {pspec = 0x3290623168, value =
0x329040a461 <_dl_lookup_symbol_x+305>}, {pspec = 0x0, value = 0x7fa8e54c6850},
{pspec = 0x5, value = 0x0}, {pspec = 0x1, value = 0x3290623168}, {pspec =
0xdbeab0, value = 0xdb9b50}, {pspec = 0xdc0990, value = 0xdbeb00}, {pspec =
0x0, value = 0x32906234c0}}
        params = 0x7fffa6cbbe30
        name = <optimized out>
        n_params = 2
        class = <optimized out>
        unref_class = <optimized out>
        object = <optimized out>
        __PRETTY_FUNCTION__ = "g_object_new_valist"
        __FUNCTION__ = "g_object_new_valist"
#8  0x0000003293817aa1 in g_object_new (object_type=14423360,
first_property_name=first_property_name at entry=0x43cc8d "dbus-daemon") at
gobject.c:1569
        var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area =
0x7fffa6cbc070, reg_save_area = 0x7fffa6cbbfa0}}
        __PRETTY_FUNCTION__ = "g_object_new"
#9  0x00000000004193c8 in mcd_dispatcher_new (dbus_daemon=0xdbea50,
master=master at entry=0xdbeb00) at mcd-dispatcher.c:919
No locals.
#10 0x0000000000410c0d in mcd_master_constructor (type=<optimized out>,
n_params=1, params=0xdc2080) at mcd-master.c:209
        object_class = 0xdc11a0
        master = 0xdbeb00
        priv = 0xdbeab0
        __FUNCTION__ = "mcd_master_constructor"
#11 0x0000003293815404 in g_object_new_with_custom_constructor (n_params=1,
params=0x7fffa6cbc250, class=0xdc1fa0) at gobject.c:1643
        cparams = 0xdc2080
        cvalues = <optimized out>
        node = 0x0
        i = <optimized out>
        nqueue = 0x0
        newly_constructed = <optimized out>
        object = <optimized out>
        n_cparams = 1
        cvals_used = 0
#12 g_object_new_internal (class=class at entry=0xdc1fa0,
params=params at entry=0x7fffa6cbc250, n_params=1) at gobject.c:1720
        nqueue = 0x0
        object = <optimized out>
        __FUNCTION__ = "g_object_new_internal"
#13 0x00000032938176a4 in g_object_new_valist
(object_type=object_type at entry=14421456,
first_property_name=first_property_name at entry=0x43cc8d "dbus-daemon",
var_args=var_args at entry=0x7fffa6cbc3a0) at gobject.c:1978
        stack_params = {{pspec = 0xdb9b50, value = 0x7fffa6cbc1a0}, {pspec =
0x7fa8e57164d8, value = 0x65c91c}, {pspec = 0x32938047d0, value = 0x400330},
{pspec = 0x100000000, value = 0x1000001c1}, {pspec = 0x1, value =
0x7fffa6cbc418}, {pspec = 0x7fffa6cbc3f0, value = 0x0}, {pspec = 0x1, value =
0x32906234c0}, {pspec = 0x3290623168, value = 0x329040a461
<_dl_lookup_symbol_x+305>}, {pspec = 0x0, value = 0x0}, {pspec = 0x1, value =
0x0}, {pspec = 0x1, value = 0x3290623168}, {pspec = 0xdaa060, value = 0x2},
{pspec = 0x7c, value = 0xabbe858a}, {pspec = 0x0, value = 0x32906234c0}, {pspec
= 0x7fffa6cbc360, value = 0x7fffa6cbc350}, {pspec = 0x180b0cb, value =
0x65c91c}}
        params = 0x7fffa6cbc250
        name = <optimized out>
        n_params = 1
        class = <optimized out>
        unref_class = <optimized out>
        object = <optimized out>
        __PRETTY_FUNCTION__ = "g_object_new_valist"
        __FUNCTION__ = "g_object_new_valist"
#14 0x0000003293817aa1 in g_object_new (object_type=14421456,
first_property_name=first_property_name at entry=0x43cc8d "dbus-daemon") at
gobject.c:1569
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area =
0x7fffa6cbc490, reg_save_area = 0x7fffa6cbc3c0}}
        __PRETTY_FUNCTION__ = "g_object_new"
#15 0x0000000000410639 in mcd_service_new () at mcd-service.c:180
        obj = <optimized out>
        dbus_daemon = 0xdbea50
        error = 0x0
#16 0x000000000040e743 in main (argc=<optimized out>, argv=<optimized out>) at
mc-server.c:176
        act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0},
sa_mask = {__val = {217170719936, 140735991760272, 140735991760256, 4131212846,
6683002, 4294967295, 166027348, 217172738496, 140363378250960, 14346848, 16, 1,
4441533, 20, 0, 4441456}}, sa_flags = 4254231, sa_restorer = 0x7fffa6cbc6d0}
        empty_mask = {__val = {140735991760416, 140363378223400, 1,
217170719936, 217170719080, 217168520289, 0, 140363378223400, 1, 0, 1,
217170719080, 0, 140735991760336, 217617620425, 16}}

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.


More information about the telepathy-bugs mailing list