Opened 14 years ago

Closed 14 years ago

#808 closed Bug (invalid)

[Crash] transmission crashed with SIGSEGV

Reported by: caravena Owned by:
Priority: Normal Milestone: None Set
Component: Transmission Version: 1.06
Severity: Critical Keywords:
Cc:

Description

Of: https://bugs.edge.launchpad.net/ubuntu/+source/transmission/+bug/204677

"Close transmission and crash"

.
Thread 2 (process 30680):
#0  0xb745fe4d in _int_malloc () from /lib/tls/i686/cmov/libc.so.6
#1  0xb7461b9d in malloc () from /lib/tls/i686/cmov/libc.so.6
#2  0xb7463726 in realloc () from /lib/tls/i686/cmov/libc.so.6
#3  0xb7744be5 in g_mem_chunk_new (name=0x0, atom_size=0, area_size=0, type=-1216662968)
    at /build/buildd/glib2.0-2.16.1/glib/gmem.c:622
	mem_chunk = <value optimized out>
	__PRETTY_FUNCTION__ = "g_mem_chunk_new"
#4  0xb775e6bc in g_string_down (string=0xc) at /build/buildd/glib2.0-2.16.1/glib/gstring.c:1303
	__PRETTY_FUNCTION__ = "g_string_down"
#5  0xb775f73d in IA__g_string_chunk_insert_const (chunk=0x9b2, string=0x0)
    at /build/buildd/glib2.0-2.16.1/glib/gstring.c:271
	lookup = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__g_string_chunk_insert_const"
#6  0xb7735d22 in IA__g_key_file_to_data (key_file=0x80c66c8, length=0xb53ff2a8, error=0xb53ff2a4)
    at /build/buildd/glib2.0-2.16.1/glib/gkeyfile.c:1042
	data_string = <value optimized out>
	group_node = <value optimized out>
	key_file_node = <value optimized out>
	has_blank_line = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__g_key_file_to_data"
#7  0x0805d427 in pref_save (errstr=0x0) at conf.c:238
	datalen = <value optimized out>
	err = (GError *) 0x0
	data = <value optimized out>
	filename = 0x897d440 "/home/caravena/.transmission/gtk/prefs.ini"
	path = 0x87376b8 "/home/caravena/.transmission/gtk"
#8  0x080728aa in tr_core_dispose (obj=0x818dea0) at tr_core.c:130
No locals.
#9  0xb77d783c in IA__g_object_unref (_object=0x818dea0)
    at /build/buildd/glib2.0-2.16.1/gobject/gobject.c:1765
	object = (GObject *) 0x818dea0
	__PRETTY_FUNCTION__ = "IA__g_object_unref"
#10 0x08062729 in quitThreadFunc (gdata=0x80c5450) at main.c:532
No locals.
#11 0xb7764d0f in IA__g_static_rec_mutex_unlock_full (mutex=0x21)
    at /build/buildd/glib2.0-2.16.1/glib/gthread.c:393
	depth = 136087400
	__PRETTY_FUNCTION__ = "IA__g_static_rec_mutex_unlock_full"
#12 0xb75484fb in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
#13 0xb74cad4e in clone () from /lib/tls/i686/cmov/libc.so.6
.
Thread 1 (process 31153):
#0  g_type_class_meta_marshal (closure=0x80f92b0, return_value=0x0, n_param_values=1, 
    param_values=0xbf826234, invocation_hint=0xbf82613c, marshal_data=0x1b4)
    at /build/buildd/glib2.0-2.16.1/gobject/gclosure.c:565
	callback = <value optimized out>
#1  0xb77d5759 in IA__g_closure_invoke (closure=0x80f92b0, return_value=0x0, n_param_values=1, 
    param_values=0xbf826234, invocation_hint=0xbf82613c)
    at /build/buildd/glib2.0-2.16.1/gobject/gclosure.c:490
	marshal = (GClosureMarshal) 0xb77d4030 <g_type_class_meta_marshal>
	marshal_data = (gpointer) 0x1b4
	__PRETTY_FUNCTION__ = "IA__g_closure_invoke"
#2  0xb77e9bcb in signal_emit_unlocked_R (node=0x816ea70, detail=0, instance=0x8735070, 
    emission_return=0x0, instance_and_params=0xbf826234)
    at /build/buildd/glib2.0-2.16.1/gobject/gsignal.c:522
	handler = (Handler *) 0xb753eff4
	accumulator = (SignalAccumulator *) 0x0
	emission = {next = 0x0, instance = 0x8735070, ihint = {signal_id = 109, detail = 0, 
    run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 141495232}
	class_closure = (GClosure *) 0x80f92b0
	handler_list = (Handler *) 0x0
	return_accu = (GValue *) 0x0
	accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, 
      v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, 
      v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, 
      v_pointer = 0x0}}}
	signal_id = 109
	max_sequential_handler_number = 975
	return_value_altered = 0
#3  0xb77ebc1f in IA__g_signal_emit_by_name (instance=0x8735070, 
    detailed_signal=0x6d <Address 0x6d out of bounds>)
    at /build/buildd/glib2.0-2.16.1/gobject/gsignal.c:2256
	detail = 3078533947
	signal_id = <value optimized out>
	__PRETTY_FUNCTION__ = "IA__g_signal_emit_by_name"
#4  0xb77ebf69 in IA__g_signal_emitv (instance_and_params=0x8735070, signal_id=109, detail=0, 
    return_value=0xb773c68b) at /build/buildd/glib2.0-2.16.1/glib/gbsearcharray.h:164
	instance = (gpointer) 0x86e7d38
	node = (SignalNode *) 0x8735070
	__PRETTY_FUNCTION__ = "IA__g_signal_emitv"
#5  0xb7dcf520 in handle_keys_changed (data=0xb7ec7d9c)
    at /build/buildd/gtk+2.0-2.12.9/gtk/gtkwindow.c:1546
No locals.
#6  0xb7ae481b in gdk_threads_dispatch (data=0x8af95b0)
    at /build/buildd/gtk+2.0-2.12.9/gdk/gdk.c:470
	ret = 0
#7  0xb773b171 in check_for_child_exited (source=0xbf8264fc)
    at /build/buildd/glib2.0-2.16.1/glib/gmain.c:3754
	child_status = <value optimized out>
	count = -1081973652
#8  0xb773cd16 in IA__g_main_context_dispatch (context=0x80eb718)
    at /build/buildd/glib2.0-2.16.1/glib/gmain.c:1918
No locals.
#9  0xb77400d3 in IA__g_main_loop_run (loop=0x1) at /build/buildd/glib2.0-2.16.1/glib/gmain.c:2814
	got_ownership = 3900
	self = (GThread *) 0x7fffffff
	__PRETTY_FUNCTION__ = "IA__g_main_loop_run"
#10 0xb77404b7 in IA__g_main_context_pending (context=0xb754a520)
    at /build/buildd/glib2.0-2.16.1/glib/gmain.c:2665
	retval = 141195232
#11 0xb7c9b244 in IA__gtk_main () at /build/buildd/gtk+2.0-2.12.9/gtk/gtkmain.c:1163
	tmp_list = (GList *) 0x80edd80
	functions = (GList *) 0x0
	init = (GtkInitFunction *) 0x8170660
	loop = (GMainLoop *) 0x86a77e0
#12 0x080644da in main (argc=0, argv=0x60203007) at main.c:308
	err = 0x80edd80 ""
	argfiles = (GList *) 0x0
	gerr = (GError *) 0x0
	didinit = 1
	didlock = <value optimized out>
	sendquit = 0
	startpaused = 0
	startminimized = 0
	entries = {{long_name = 0x80b6286 "paused", short_name = 112 'p', flags = 0, 
    arg = G_OPTION_ARG_NONE, arg_data = 0xbf826778, 
    description = 0x80b648c "Start with all torrents paused", arg_description = 0x0}, {
    long_name = 0x80b5bf2 "quit", short_name = 113 'q', flags = 0, arg = G_OPTION_ARG_NONE, 
    arg_data = 0xbf82677c, description = 0x80b64ac "Request that the running instance quit", 
    arg_description = 0x0}, {long_name = 0x80b628d "minimized", short_name = 109 'm', flags = 0, 
    arg = G_OPTION_ARG_NONE, arg_data = 0xbf826774, 
    description = 0x80b64d4 "Start minimized in system tray", arg_description = 0x0}, {
    long_name = 0x0, short_name = 0 '\0', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x0, 
    description = 0x0, arg_description = 0x0}}

Change History (2)

comment:1 Changed 14 years ago by livings124

What version is this? Have you tried latest source?

comment:2 Changed 14 years ago by charles

  • Resolution set to invalid
  • Status changed from new to closed

As I discussed on Launchpad, I think this backtrace is suspect because it says that we're crashing inside GMemChunk, called by GKeyFile, in glib 2.16.1. However I've just been looking at glib 2.16.1's source and GMemChunk isn't used by GKeyFile (in fact, since it's deprecated it's not called by any other glib or Transmission code).

So my first thought is that this is some kind of ABI library shear problem, and I suggest you upgrade Transmission and/or build from source to test that way. If a copy of Transmission built from source crashes, I'm very much interested in that.

Also, it would be good if you could provide a valgrind log generated by the bash script from transmission/gtk/my-valgrind.sh in svn.

Marking as invalid because there's nothing usable in the report to date... but obviously if the problem persists in a fresh build I'm very interested in hearing about it.

Note: See TracTickets for help on using tickets.