dx-packages team mailing list archive

[James Henstridge <james.henstridge@xxxxxxxxxxxxx>]

I was able to trigger the segfault just by running the scope from a
terminal using the command line found in the dbus service activation
file.  For example:

    /usr/bin/python3 /usr/share/unity-scopes/scope-runner-dbus.py -s
info/calculator.scope

When run, I get the following error message:

    *** Error in `/usr/bin/python3': free(): invalid next size (fast):
0x0000000000cb77e0 ***

Attached is a stack trace with symbols for the relevant libraries
available.  The inner call here is a to the overriden get_scopes()
implementation of the Python UnityScopeLoader subclass.

Frames #8 and #9 are the libffi stubs to marshal this function call.
Frame #7 is the function that takes the libffi function call data and
calls a Python function, converting the arguments as needed.

While frame #6 says it is the same function, it looks to actually be an
inlined version of _invoke_state_clear, which is called right at the end
of _pygi_closure_handle.  So at this point, the Python implementation of
get_scopes() has finished running, and it is trying to clean up
afterwards.

** Attachment added: "stacktrace.txt"
   https://bugs.launchpad.net/ubuntu/+source/libunity/+bug/1538471/+attachment/4608318/+files/stacktrace.txt

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to libunity in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1538471

Title:
  scope-runner-dbus.py assert failure: *** Error in `/usr/bin/python3':
  free(): invalid next size (fast): 0x0000000001ca17b0 ***

Status in Ubuntu Kylin:
  New
Status in libunity package in Ubuntu:
  Confirmed

Bug description:
  No idea what happened.

  ProblemType: Crash
  DistroRelease: Ubuntu 16.04
  Package: unity-scopes-runner 7.1.4+15.10.20151002-0ubuntu2
  ProcVersionSignature: Ubuntu 4.3.0-7.18-generic 4.3.3
  Uname: Linux 4.3.0-7-generic x86_64
  ApportVersion: 2.19.4-0ubuntu1
  Architecture: amd64
  AssertionMessage: *** Error in `/usr/bin/python3': free(): invalid next size (fast): 0x0000000001ca17b0 ***
  CrashCounter: 1
  CurrentDesktop: Unity
  Date: Wed Jan 27 10:41:54 2016
  Dependencies:
   
  ExecutablePath: /usr/share/unity-scopes/scope-runner-dbus.py
  InstallationDate: Installed on 2015-04-30 (271 days ago)
  InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Release amd64 (20150422)
  InterpreterPath: /usr/bin/python3.5
  PackageArchitecture: all
  ProcCmdline: /usr/bin/python3 /usr/share/unity-scopes/scope-runner-dbus.py -s info/calculator.scope
  Signal: 6
  SourcePackage: libunity
  StacktraceTop:
   __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7fd789926128 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
   malloc_printerr (ptr=<optimised out>, str=0x7fd7899261a0 "free(): invalid next size (fast)", action=1) at malloc.c:4965
   _int_free (av=<optimised out>, p=<optimised out>, have_lock=0) at malloc.c:3834
   __GI___libc_free (mem=<optimised out>) at malloc.c:2950
   ?? () from /usr/lib/python3/dist-packages/gi/_gi.cpython-35m-x86_64-linux-gnu.so
  SystemImageInfo: Error: command ['system-image-cli', '-i'] failed with exit code 2:
  Title: scope-runner-dbus.py assert failure: *** Error in `/usr/bin/python3': free(): invalid next size (fast): 0x0000000001ca17b0 ***
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: adm audio cdrom dip libvirtd lpadmin plugdev sambashare sudo

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntukylin/+bug/1538471/+subscriptions