Bug 73029

Summary: mission-control-5 crash in magazine_chain_pop_head()
Product: Telepathy Reporter: Milan Bouchet-Valat <nalimilan>
Component: mission-controlAssignee: Telepathy bugs list <telepathy-bugs>
Status: RESOLVED MOVED QA Contact: Telepathy bugs list <telepathy-bugs>
Severity: critical    
Priority: medium    
Version: 5.7   
Hardware: x86-64 (AMD64)   
OS: Linux (All)   
Whiteboard:
i915 platform: i915 features:

Description Milan Bouchet-Valat 2013-12-25 10:10:13 UTC 
This crash has been reported several times in Fedora 20. Looks like a memory corruption problem. There does not seem to be ways of reproducing the bug consistently, so it will be hard to debug.

telepathy-mission-control-5.16.0-2

https://bugzilla.redhat.com/show_bug.cgi?id=1030480

Thread 1 (Thread 0x7fa8e52aa880 (LWP 988)):
#0  magazine_chain_pop_head (magazine_chunks=0xda9680) at gslice.c:545
        chunk = 0x10000
#1  thread_memory_magazine1_alloc (tmem=<optimized out>, ix=0) at gslice.c:848
        mag = 0xda9680
        chunk = <optimized out>
#2  g_slice_alloc (mem_size=mem_size@entry=16) at gslice.c:1007
        ix = 0
        tmem = 0x10000
        chunk_size = 16
        mem = <optimized out>
#3  0x00000032930660e6 in g_slist_prepend (list=0x0, data=data@entry=0xe22420) at gslist.c:267
        new_list = 0xda9670
#4  0x000000329381494b in g_object_notify_queue_add (nqueue=nqueue@entry=0xe1cf20, pspec=0xe22420, object=<optimized out>) at gobject.c:306
No locals.
#5  0x00000032938158f0 in object_set_property (nqueue=0xe1cf20, value=<optimized out>, pspec=0xe22420, object=0xe28560) at gobject.c:1381
        tmp_value = {g_type = 14408896, data = {{v_int = 14412368, v_uint = 14412368, v_long = 14412368, v_ulong = 14412368, v_int64 = 14412368, v_uint64 = 14412368, v_float = 2.01960291e-38, v_double = 7.1206559040217148e-317, v_pointer = 0xdbea50}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        redirect = <optimized out>
        enable_diagnostic = 0x32938426c6 "0"
        class = 0xe2a360
        param_id = 1
#6  g_object_new_internal (class=class@entry=0xe2a360, params=params@entry=0x7fffa6cbbe30, n_params=2) at gobject.c:1755
        value = <optimized out>
        pspec = 0xe22420
        j = <optimized out>
        node = 0xdc0a50
        nqueue = 0xe1cf20
        object = 0xe28560
        __FUNCTION__ = "g_object_new_internal"
#7  0x00000032938176a4 in g_object_new_valist (object_type=object_type@entry=14423360, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon", var_args=var_args@entry=0x7fffa6cbbf80) at gobject.c:1978
        stack_params = {{pspec = 0xe22420, value = 0x7fffa6cbbd80}, {pspec = 0xe22490, value = 0x7fffa6cbbd50}, {pspec = 0xdb9da0, value = 0x7fffa6cbbda0}, {pspec = 0x7fa8e5718000, value = 0x65d680}, {pspec = 0x32b8c18108, value = 0x402e38}, {pspec = 0x500000000, value = 0x100000318}, {pspec = 0x7fffa6cbc1a0, value = 0x7fffa6cbc018}, {pspec = 0x7fffa6cbbff0, value = 0x7fa8e54c6850}, {pspec = 0x1, value = 0x32906234c0}, {pspec = 0x3290623168, value = 0x329040a461 <_dl_lookup_symbol_x+305>}, {pspec = 0x0, value = 0x7fa8e54c6850}, {pspec = 0x5, value = 0x0}, {pspec = 0x1, value = 0x3290623168}, {pspec = 0xdbeab0, value = 0xdb9b50}, {pspec = 0xdc0990, value = 0xdbeb00}, {pspec = 0x0, value = 0x32906234c0}}
        params = 0x7fffa6cbbe30
        name = <optimized out>
        n_params = 2
        class = <optimized out>
        unref_class = <optimized out>
        object = <optimized out>
        __PRETTY_FUNCTION__ = "g_object_new_valist"
        __FUNCTION__ = "g_object_new_valist"
#8  0x0000003293817aa1 in g_object_new (object_type=14423360, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon") at gobject.c:1569
        var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fffa6cbc070, reg_save_area = 0x7fffa6cbbfa0}}
        __PRETTY_FUNCTION__ = "g_object_new"
#9  0x00000000004193c8 in mcd_dispatcher_new (dbus_daemon=0xdbea50, master=master@entry=0xdbeb00) at mcd-dispatcher.c:919
No locals.
#10 0x0000000000410c0d in mcd_master_constructor (type=<optimized out>, n_params=1, params=0xdc2080) at mcd-master.c:209
        object_class = 0xdc11a0
        master = 0xdbeb00
        priv = 0xdbeab0
        __FUNCTION__ = "mcd_master_constructor"
#11 0x0000003293815404 in g_object_new_with_custom_constructor (n_params=1, params=0x7fffa6cbc250, class=0xdc1fa0) at gobject.c:1643
        cparams = 0xdc2080
        cvalues = <optimized out>
        node = 0x0
        i = <optimized out>
        nqueue = 0x0
        newly_constructed = <optimized out>
        object = <optimized out>
        n_cparams = 1
        cvals_used = 0
#12 g_object_new_internal (class=class@entry=0xdc1fa0, params=params@entry=0x7fffa6cbc250, n_params=1) at gobject.c:1720
        nqueue = 0x0
        object = <optimized out>
        __FUNCTION__ = "g_object_new_internal"
#13 0x00000032938176a4 in g_object_new_valist (object_type=object_type@entry=14421456, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon", var_args=var_args@entry=0x7fffa6cbc3a0) at gobject.c:1978
        stack_params = {{pspec = 0xdb9b50, value = 0x7fffa6cbc1a0}, {pspec = 0x7fa8e57164d8, value = 0x65c91c}, {pspec = 0x32938047d0, value = 0x400330}, {pspec = 0x100000000, value = 0x1000001c1}, {pspec = 0x1, value = 0x7fffa6cbc418}, {pspec = 0x7fffa6cbc3f0, value = 0x0}, {pspec = 0x1, value = 0x32906234c0}, {pspec = 0x3290623168, value = 0x329040a461 <_dl_lookup_symbol_x+305>}, {pspec = 0x0, value = 0x0}, {pspec = 0x1, value = 0x0}, {pspec = 0x1, value = 0x3290623168}, {pspec = 0xdaa060, value = 0x2}, {pspec = 0x7c, value = 0xabbe858a}, {pspec = 0x0, value = 0x32906234c0}, {pspec = 0x7fffa6cbc360, value = 0x7fffa6cbc350}, {pspec = 0x180b0cb, value = 0x65c91c}}
        params = 0x7fffa6cbc250
        name = <optimized out>
        n_params = 1
        class = <optimized out>
        unref_class = <optimized out>
        object = <optimized out>
        __PRETTY_FUNCTION__ = "g_object_new_valist"
        __FUNCTION__ = "g_object_new_valist"
#14 0x0000003293817aa1 in g_object_new (object_type=14421456, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon") at gobject.c:1569
        var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fffa6cbc490, reg_save_area = 0x7fffa6cbc3c0}}
        __PRETTY_FUNCTION__ = "g_object_new"
#15 0x0000000000410639 in mcd_service_new () at mcd-service.c:180
        obj = <optimized out>
        dbus_daemon = 0xdbea50
        error = 0x0
#16 0x000000000040e743 in main (argc=<optimized out>, argv=<optimized out>) at mc-server.c:176
        act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {217170719936, 140735991760272, 140735991760256, 4131212846, 6683002, 4294967295, 166027348, 217172738496, 140363378250960, 14346848, 16, 1, 4441533, 20, 0, 4441456}}, sa_flags = 4254231, sa_restorer = 0x7fffa6cbc6d0}
        empty_mask = {__val = {140735991760416, 140363378223400, 1, 217170719936, 217170719080, 217168520289, 0, 140363378223400, 1, 0, 1, 217170719080, 0, 140735991760336, 217617620425, 16}}
Comment 1 GitLab Migration User 2019-12-03 20:13:40 UTC 
-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/telepathy/telepathy-mission-control/issues/77.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.