Opened 8 years ago

Closed 8 years ago

#4079 closed Bug (fixed)

GTK+ Transmisson crashes when opening magnet link

Reported by: User294 Owned by: jordan
Priority: Highest Milestone:
Component: GTK+ Client Version: 2.21+
Severity: Blocker Keywords:
Cc:

Description

Configuration:

Latest SVN - rev 12078 on 64-bit machine.

To reproduce:

  1. Try to add some magnet link in GTK+ client. For example, magnet:?xt=urn:btih:QHQXPYWMACKDWKP47RRVIV7VOURXFE5Q (just some Wikipedia dump taken from Wikipedia page on magnet URI scheme example).
  2. Take a look what happens.

Result:

T crashes with SIGSEGV on incorrect memory free.

Upon restart, magnet will be added but some settings are lost, for example, custom path is not remembered for sure.

As for me this is fairly easy to reproduce - just add magnet link and it will crash.

Change History (4)

comment:1 follow-up: Changed 8 years ago by rg

The same thing here but crashes too when opening/adding a torrent file:

after update from rev. 12072 to rev. 12080 on startup with ..

"watch-dir-enabled": true

.. and a new torrent in the watch-dir:

first crash (sory, in German):

transmission-gtk: torrent.c:980: tr_torrentNew: Zusicherung »tr_isSession( tr_ctorGetSession( ctor ) )« nicht erfüllt.

second Crash:

*** glibc detected *** /usr/local/bin/transmission-gtk: double free or corruption (out): 0x0000000003324bf0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x78c8f)[0x7ff33801ac8f]
/lib/libc.so.6(cfree+0x73)[0x7ff33801eae3]
/usr/local/bin/transmission-gtk(tr_free+0x1f)[0x476f47]
/usr/local/bin/transmission-gtk(tr_ctorSetDownloadDir+0x3a)[0x472ab7]
/usr/local/bin/transmission-gtk[0x43961d]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x15c)[0x7ff3394d77fc]
/usr/lib/libgobject-2.0.so.0(+0x20019)[0x7ff3394e9019]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x858)[0x7ff3394f2258]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_by_name+0x1dd)[0x7ff3394f260d]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x15c)[0x7ff3394d77fc]
/usr/lib/libgobject-2.0.so.0(+0x20019)[0x7ff3394e9019]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x858)[0x7ff3394f2258]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_by_name+0x1dd)[0x7ff3394f260d]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x15c)[0x7ff3394d77fc]
/usr/lib/libgobject-2.0.so.0(+0x20019)[0x7ff3394e9019]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x858)[0x7ff3394f2258]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_by_name+0x1dd)[0x7ff3394f260d]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x15c)[0x7ff3394d77fc]
/usr/lib/libgobject-2.0.so.0(+0x20019)[0x7ff3394e9019]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x858)[0x7ff3394f2258]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_by_name+0x1dd)[0x7ff3394f260d]
/usr/lib/libgtk-x11-2.0.so.0(+0xe7812)[0x7ff33a8d2812]
/usr/lib/libgtk-x11-2.0.so.0(+0xeea0e)[0x7ff33a8d9a0e]
/usr/lib/libgio-2.0.so.0(+0x64c68)[0x7ff33a271c68]
/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1dd)[0x7ff338e0fc2d]
/lib/libglib-2.0.so.0(+0x43418)[0x7ff338e10418]
/lib/libglib-2.0.so.0(g_main_loop_run+0x16a)[0x7ff338e10a5a]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xa7)[0x7ff33a920827]
/usr/local/bin/transmission-gtk(main+0x836)[0x43325f]
/lib/libc.so.6(__libc_start_main+0xfe)[0x7ff337fc0efe]
/usr/local/bin/transmission-gtk[0x420db9]
======= Memory map: ========
00400000-004f2000 r-xp 00000000 08:11 133761                             /usr/local/bin/transmission-gtk
006f1000-006f2000 r--p 000f1000 08:11 133761                             /usr/local/bin/transmission-gtk
006f2000-006f5000 rw-p 000f2000 08:11 133761                             /usr/local/bin/transmission-gtk
006f5000-006f6000 rw-p 00000000 00:00 0 
025ee000-033e6000 rw-p 00000000 00:00 0                                  [heap]
7ff322d10000-7ff322d25000 r-xp 00000000 08:11 3932258                    /lib/libgcc_s.so.1
7ff322d25000-7ff322f24000 ---p 00015000 08:11 3932258                    /lib/libgcc_s.so.1
7ff322f24000-7ff322f25000 r--p 00014000 08:11 3932258                    /lib/libgcc_s.so.1
7ff322f25000-7ff322f26000 rw-p 00015000 08:11 3932258                    /lib/libgcc_s.so.1
7ff322f26000-7ff322f86000 rw-s 00000000 00:04 69042205                   /SYSV00000000 (deleted)
7ff322f86000-7ff322f9a000 r-xp 00000000 08:11 144157                     /usr/lib/gio/modules/libgioremote-volume-monitor.so
7ff322f9a000-7ff323199000 ---p 00014000 08:11 144157                     /usr/lib/gio/modules/libgioremote-volume-monitor.so
7ff323199000-7ff32319a000 r--p 00013000 08:11 144157                     /usr/lib/gio/modules/libgioremote-volume-monitor.so
7ff32319a000-7ff32319b000 rw-p 00014000 08:11 144157                     /usr/lib/gio/modules/libgioremote-volume-monitor.so
7ff32319b000-7ff32319f000 r-xp 00000000 08:11 282575                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so
7ff32319f000-7ff32339f000 ---p 00004000 08:11 282575                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so
7ff32339f000-7ff3233a0000 r--p 00004000 08:11 282575                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so
7ff3233a0000-7ff3233a1000 rw-p 00005000 08:11 282575                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-png.so
7ff3233a1000-7ff3233a8000 r-xp 00000000 08:11 3935607                    /lib/libnss_dns-2.13.so
7ff3233a8000-7ff3235a7000 ---p 00007000 08:11 3935607                    /lib/libnss_dns-2.13.so
7ff3235a7000-7ff3235a8000 r--p 00006000 08:11 3935607                    /lib/libnss_dns-2.13.so
7ff3235a8000-7ff3235a9000 rw-p 00007000 08:11 3935607                    /lib/libnss_dns-2.13.so
7ff3235a9000-7ff3235ab000 r-xp 00000000 08:11 3935892                    /lib/libnss_mdns4_minimal.so.2
7ff3235ab000-7ff3237aa000 ---p 00002000 08:11 3935892                    /lib/libnss_mdns4_minimal.so.2
7ff3237aa000-7ff3237ab000 r--p 00001000 08:11 3935892                    /lib/libnss_mdns4_minimal.so.2
7ff3237ab000-7ff3237ac000 rw-p 00002000 08:11 3935892                    /lib/libnss_mdns4_minimal.so.2
7ff3237ac000-7ff3237af000 r-xp 00000000 08:11 282578                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.so
7ff3237af000-7ff3239af000 ---p 00003000 08:11 282578                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.so
7ff3239af000-7ff3239b0000 r--p 00003000 08:11 282578                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.so
7ff3239b0000-7ff3239b1000 rw-p 00004000 08:11 282578                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-bmp.so
7ff3239b1000-7ff3239b4000 r-xp 00000000 08:11 274083                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.so
7ff3239b4000-7ff323bb3000 ---p 00003000 08:11 274083                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.so
7ff323bb3000-7ff323bb4000 r--p 00002000 08:11 274083                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.so
7ff323bb4000-7ff323bb5000 rw-p 00003000 08:11 274083                     /usr/lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-ico.so
7ff323bb5000-7ff323bf7000 r-xp 00000000 08:11 156904                     /usr/lib/libibus.so.2.0.0
7ff323bf7000-7ff323df7000 ---p 00042000 08:11 156904                     /usr/lib/libibus.so.2.0.0
7ff323df7000-7ff323df8000 r--p 00042000 08:11 156904                     /usr/lib/libibus.so.2.0.0
7ff323df8000-7ff323df9000 rw-p 00043000 08:11 156904                     /usr/lib/libibus.so.2.0.0
7ff323df9000-7ff323dfa000 rw-p 00000000 00:00 0 
7ff323dfa000-7ff323dff000 r-xp 00000000 08:11 132091                     /usr/lib/gtk-2.0/2.10.0/immodules/im-ibus.so

And finaly with ..

"watch-dir-enabled": false

.. transmission starts normal but crashes on opening torrent file

comment:2 in reply to: ↑ 1 Changed 8 years ago by rg

Replying to myself:

after update from rev. 12072 to rev. 12080

Now I did a step by step downgrade and noticed this error appeared first with revision 12068

hth, Regards

rg

comment:3 Changed 8 years ago by jordan

  • Milestone None Set deleted
  • Status changed from new to assigned

fixed in r12085

comment:4 Changed 8 years ago by jordan

  • Resolution set to fixed
  • Status changed from assigned to closed
Note: See TracTickets for help on using tickets.