touch-packages team mailing list archive

[Rolf Leggewie <1180790@xxxxxxxxxxxxxxxxxx>]

raring has seen the end of its life and is no longer receiving any
updates. Marking the raring task for this ticket as "Won't Fix".

** Changed in: unity (Ubuntu Raring)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unity in Ubuntu.
https://bugs.launchpad.net/bugs/1180790

Title:
  Segfault in LauncherIcon::TextureFromSpecificGtkTheme

Status in Unity:
  Fix Released
Status in unity package in Ubuntu:
  Fix Released
Status in unity source package in Raring:
  Won't Fix

Bug description:
  ==29781== Invalid read of size 1
  ==29781==    at 0x8056C47: g_type_check_instance_cast (gtype.c:4033)
  ==29781==    by 0x16DFC154: unity::launcher::LauncherIcon::TextureFromSpecificGtkTheme(_GtkIconTheme*, std::string const&, int, bool, bool) (LauncherIcon.cpp:432)
  ==29781==    by 0x16DFC450: unity::launcher::LauncherIcon::TextureFromGtkTheme(std::string, int, bool) (LauncherIcon.cpp:379)
  ==29781==    by 0x16E12998: unity::launcher::SimpleLauncherIcon::GetTextureForSize(int) (SimpleLauncherIcon.cpp:108)
  ==29781==    by 0x16F0568F: unity::ui::IconRenderer::RenderIcon(nux::GraphicsEngine&, unity::ui::RenderArg const&, nux::Rect const&, nux::Rect const&) (IconRenderer.cpp:446)
  ==29781==    by 0x16DD9D89: unity::launcher::Launcher::DrawContent(nux::GraphicsEngine&, bool) (Launcher.cpp:1871)
  ==29781==    by 0x18754831: nux::View::ProcessDraw(nux::GraphicsEngine&, bool) (View.cpp:253)
  ==29781==    by 0x1873820C: nux::Layout::ProcessDraw(nux::GraphicsEngine&, bool) (Layout.cpp:581)
  ==29781==    by 0x18713BB7: nux::BaseWindow::DrawContent(nux::GraphicsEngine&, bool) (BaseWindow.cpp:142)
  ==29781==    by 0x18754831: nux::View::ProcessDraw(nux::GraphicsEngine&, bool) (View.cpp:253)
  ==29781==    by 0x18758386: nux::WindowCompositor::RenderTopViewContent(nux::BaseWindow*, bool) (WindowCompositor.cpp:1553)
  ==29781==    by 0x1875F8EE: nux::WindowCompositor::RenderTopViews(bool, std::list<nux::ObjectWeakPtr<nux::BaseWindow>, std::allocator<nux::ObjectWeakPtr<nux::BaseWindow> > >&, bool) (WindowCompositor.cpp:1654)
  ==29781==  Address 0x6168732f72737542 is not stack'd, malloc'd or (recently) free'd
  ==29781==
  ==29781==
  ==29781== Process terminating with default action of signal 11 (SIGSEGV)
  ==29781==  General Protection Fault
  ==29781==    at 0x8056C47: g_type_check_instance_cast (gtype.c:4033)
  ==29781==    by 0x16DFC154: unity::launcher::LauncherIcon::TextureFromSpecificGtkTheme(_GtkIconTheme*, std::string const&, int, bool, bool) (LauncherIcon.cpp:432)
  ==29781==    by 0x16DFC450: unity::launcher::LauncherIcon::TextureFromGtkTheme(std::string, int, bool) (LauncherIcon.cpp:379)
  ==29781==    by 0x16E12998: unity::launcher::SimpleLauncherIcon::GetTextureForSize(int) (SimpleLauncherIcon.cpp:108)
  ==29781==    by 0x16F0568F: unity::ui::IconRenderer::RenderIcon(nux::GraphicsEngine&, unity::ui::RenderArg const&, nux::Rect const&, nux::Rect const&) (IconRenderer.cpp:446)
  ==29781==    by 0x16DD9D89: unity::launcher::Launcher::DrawContent(nux::GraphicsEngine&, bool) (Launcher.cpp:1871)
  ==29781==    by 0x18754831: nux::View::ProcessDraw(nux::GraphicsEngine&, bool) (View.cpp:253)
  ==29781==    by 0x1873820C: nux::Layout::ProcessDraw(nux::GraphicsEngine&, bool) (Layout.cpp:581)
  ==29781==    by 0x18713BB7: nux::BaseWindow::DrawContent(nux::GraphicsEngine&, bool) (BaseWindow.cpp:142)
  ==29781==    by 0x18754831: nux::View::ProcessDraw(nux::GraphicsEngine&, bool) (View.cpp:253)
  ==29781==    by 0x18758386: nux::WindowCompositor::RenderTopViewContent(nux::BaseWindow*, bool) (WindowCompositor.cpp:1553)
  ==29781==    by 0x1875F8EE: nux::WindowCompositor::RenderTopViews(bool, std::list<nux::ObjectWeakPtr<nux::BaseWindow>, std::allocator<nux::ObjectWeakPtr<nux::BaseWindow> > >&, bool) (WindowCompositor.cpp:1654)

  GtkIconInfo * is released with g_object_unref, but its not actually a
  GObject. It should be released with gtk_icon_info_free

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1180790/+subscriptions