mission-control-5 crash in magazine_chain_pop_head()
Submitted by Milan Bouchet-Valat @milanbv
Assigned to Telepathy bugs list
Description
This crash has been reported several times in Fedora 20. Looks like a memory corruption problem. There does not seem to be ways of reproducing the bug consistently, so it will be hard to debug.
telepathy-mission-control-5.16.0-2
https://bugzilla.redhat.com/show_bug.cgi?id=1030480
Thread 1 (Thread 0x7fa8e52aa880 (LWP 988)):
#0 magazine_chain_pop_head (magazine_chunks=0xda9680) at gslice.c:545
chunk = 0x10000
#1 thread_memory_magazine1_alloc (tmem=<optimized out>, ix=0) at gslice.c:848
mag = 0xda9680
chunk = <optimized out>
#2 g_slice_alloc (mem_size=mem_size@entry=16) at gslice.c:1007
ix = 0
tmem = 0x10000
chunk_size = 16
mem = <optimized out>
#3 0x00000032930660e6 in g_slist_prepend (list=0x0, data=data@entry=0xe22420) at gslist.c:267
new_list = 0xda9670
#4 0x000000329381494b in g_object_notify_queue_add (nqueue=nqueue@entry=0xe1cf20, pspec=0xe22420, object=<optimized out>) at gobject.c:306
No locals.
#5 0x00000032938158f0 in object_set_property (nqueue=0xe1cf20, value=<optimized out>, pspec=0xe22420, object=0xe28560) at gobject.c:1381
tmp_value = {g_type = 14408896, data = {{v_int = 14412368, v_uint = 14412368, v_long = 14412368, v_ulong = 14412368, v_int64 = 14412368, v_uint64 = 14412368, v_float = 2.01960291e-38, v_double = 7.1206559040217148e-317, v_pointer = 0xdbea50}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
redirect = <optimized out>
enable_diagnostic = 0x32938426c6 "0"
class = 0xe2a360
param_id = 1
#6 g_object_new_internal (class=class@entry=0xe2a360, params=params@entry=0x7fffa6cbbe30, n_params=2) at gobject.c:1755
value = <optimized out>
pspec = 0xe22420
j = <optimized out>
node = 0xdc0a50
nqueue = 0xe1cf20
object = 0xe28560
__FUNCTION__ = "g_object_new_internal"
#7 0x00000032938176a4 in g_object_new_valist (object_type=object_type@entry=14423360, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon", var_args=var_args@entry=0x7fffa6cbbf80) at gobject.c:1978
stack_params = {{pspec = 0xe22420, value = 0x7fffa6cbbd80}, {pspec = 0xe22490, value = 0x7fffa6cbbd50}, {pspec = 0xdb9da0, value = 0x7fffa6cbbda0}, {pspec = 0x7fa8e5718000, value = 0x65d680}, {pspec = 0x32b8c18108, value = 0x402e38}, {pspec = 0x500000000, value = 0x100000318}, {pspec = 0x7fffa6cbc1a0, value = 0x7fffa6cbc018}, {pspec = 0x7fffa6cbbff0, value = 0x7fa8e54c6850}, {pspec = 0x1, value = 0x32906234c0}, {pspec = 0x3290623168, value = 0x329040a461 <_dl_lookup_symbol_x+305>}, {pspec = 0x0, value = 0x7fa8e54c6850}, {pspec = 0x5, value = 0x0}, {pspec = 0x1, value = 0x3290623168}, {pspec = 0xdbeab0, value = 0xdb9b50}, {pspec = 0xdc0990, value = 0xdbeb00}, {pspec = 0x0, value = 0x32906234c0}}
params = 0x7fffa6cbbe30
name = <optimized out>
n_params = 2
class = <optimized out>
unref_class = <optimized out>
object = <optimized out>
__PRETTY_FUNCTION__ = "g_object_new_valist"
__FUNCTION__ = "g_object_new_valist"
#8 0x0000003293817aa1 in g_object_new (object_type=14423360, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon") at gobject.c:1569
var_args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fffa6cbc070, reg_save_area = 0x7fffa6cbbfa0}}
__PRETTY_FUNCTION__ = "g_object_new"
#9 0x00000000004193c8 in mcd_dispatcher_new (dbus_daemon=0xdbea50, master=master@entry=0xdbeb00) at mcd-dispatcher.c:919
No locals.
#10 0x0000000000410c0d in mcd_master_constructor (type=<optimized out>, n_params=1, params=0xdc2080) at mcd-master.c:209
object_class = 0xdc11a0
master = 0xdbeb00
priv = 0xdbeab0
__FUNCTION__ = "mcd_master_constructor"
#11 0x0000003293815404 in g_object_new_with_custom_constructor (n_params=1, params=0x7fffa6cbc250, class=0xdc1fa0) at gobject.c:1643
cparams = 0xdc2080
cvalues = <optimized out>
node = 0x0
i = <optimized out>
nqueue = 0x0
newly_constructed = <optimized out>
object = <optimized out>
n_cparams = 1
cvals_used = 0
#12 g_object_new_internal (class=class@entry=0xdc1fa0, params=params@entry=0x7fffa6cbc250, n_params=1) at gobject.c:1720
nqueue = 0x0
object = <optimized out>
__FUNCTION__ = "g_object_new_internal"
#13 0x00000032938176a4 in g_object_new_valist (object_type=object_type@entry=14421456, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon", var_args=var_args@entry=0x7fffa6cbc3a0) at gobject.c:1978
stack_params = {{pspec = 0xdb9b50, value = 0x7fffa6cbc1a0}, {pspec = 0x7fa8e57164d8, value = 0x65c91c}, {pspec = 0x32938047d0, value = 0x400330}, {pspec = 0x100000000, value = 0x1000001c1}, {pspec = 0x1, value = 0x7fffa6cbc418}, {pspec = 0x7fffa6cbc3f0, value = 0x0}, {pspec = 0x1, value = 0x32906234c0}, {pspec = 0x3290623168, value = 0x329040a461 <_dl_lookup_symbol_x+305>}, {pspec = 0x0, value = 0x0}, {pspec = 0x1, value = 0x0}, {pspec = 0x1, value = 0x3290623168}, {pspec = 0xdaa060, value = 0x2}, {pspec = 0x7c, value = 0xabbe858a}, {pspec = 0x0, value = 0x32906234c0}, {pspec = 0x7fffa6cbc360, value = 0x7fffa6cbc350}, {pspec = 0x180b0cb, value = 0x65c91c}}
params = 0x7fffa6cbc250
name = <optimized out>
n_params = 1
class = <optimized out>
unref_class = <optimized out>
object = <optimized out>
__PRETTY_FUNCTION__ = "g_object_new_valist"
__FUNCTION__ = "g_object_new_valist"
#14 0x0000003293817aa1 in g_object_new (object_type=14421456, first_property_name=first_property_name@entry=0x43cc8d "dbus-daemon") at gobject.c:1569
var_args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fffa6cbc490, reg_save_area = 0x7fffa6cbc3c0}}
__PRETTY_FUNCTION__ = "g_object_new"
#15 0x0000000000410639 in mcd_service_new () at mcd-service.c:180
obj = <optimized out>
dbus_daemon = 0xdbea50
error = 0x0
#16 0x000000000040e743 in main (argc=<optimized out>, argv=<optimized out>) at mc-server.c:176
act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {217170719936, 140735991760272, 140735991760256, 4131212846, 6683002, 4294967295, 166027348, 217172738496, 140363378250960, 14346848, 16, 1, 4441533, 20, 0, 4441456}}, sa_flags = 4254231, sa_restorer = 0x7fffa6cbc6d0}
empty_mask = {__val = {140735991760416, 140363378223400, 1, 217170719936, 217170719080, 217168520289, 0, 140363378223400, 1, 0, 1, 217170719080, 0, 140735991760336, 217617620425, 16}}Version: 5.7