60369 – gtk-gnutella random crash because of pango problem

Bug 60369 - gtk-gnutella random crash because of pango problem

Summary: gtk-gnutella random crash because of pango problem

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	x86 Linux

Importance:	High normal (vote)
Assignee:	Gentoo Linux Gnome Desktop Team

URL:	http://bugs.gentoo.org/show_bug.cgi?i...
Whiteboard:
Keywords:

Duplicates (1):	60257 (view as bug list)
Depends on:
Blocks:

Reported:	2004-08-14 15:32 UTC by Timmy Douglas
Modified:	2004-10-18 13:09 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Timmy Douglas 2004-08-14 15:32:14 UTC

see also (with gaim): http://bugs.gentoo.org/show_bug.cgi?id=60257

04/08/14 15:57:03 (WARNING): Invalid UTF8 string passed to pango_layout_set_text()
BAD <Gnucleus 1.8.4.0> ping (0 bytes) [hops=0, TTL=0]: message received with TTL=0
BAD <Gnucleus 1.8.4.0> ping (0 bytes) [hops=0, TTL=0]: message received with TTL=0
04/08/14 15:57:03 (WARNING): QRP query (64 bytes) [hops=6, TTL=1] had empty hash vector
04/08/14 15:57:03 (WARNING): Invalid UTF8 string passed to pango_layout_set_text()
04/08/14 15:57:03 (WARNING): Invalid UTF8 string passed to pango_layout_set_text()
04/08/14 15:57:03 (WARNING): Invalid UTF8 string passed to pango_layout_set_text()
04/08/14 15:57:03 (WARNING): Invalid UTF8 string passed to pango_layout_set_text()

[1]+  Segmentation fault      (core dumped) gtk-gnutella

#0  0x40dfcafe in script_engine_create ()
   from /usr/lib/pango/1.4.0/modules/pango-hangul-fc.so
(gdb) bt
#0  0x40dfcafe in script_engine_create ()
   from /usr/lib/pango/1.4.0/modules/pango-hangul-fc.so
#1  0x000007ba in ?? ()
#2  0x00000000 in ?? ()
#3  0xbfffec20 in ?? ()
#4  0x00000000 in ?? ()
#5  0x00000000 in ?? ()
#6  0x4066dad1 in mallopt () from /lib/libc.so.6
Previous frame inner to this frame (corrupt stack?)



Reproducible: Didn't try
Steps to Reproduce:
1. i'm not sure how to reproduce this one. i might have gotten a related crash with gaim.. see the link





timmy@main:gnutella$ export|grep LC_
declare -x LC_ALL="zh_TW.UTF-8"
declare -x LC_CTYPE="ja_JP"

Comment 1 Timmy Douglas 2004-08-14 18:11:41 UTC

here is another core dump backtrace:


04/08/14 20:45:57 (MESSAGE): recorded changed: flags: 0 info: 0
04/08/14 20:45:58 (MESSAGE): recorded changed: flags: 0 info: 0
04/08/14 20:45:58 (WARNING): /usr/lib/pango/1.4.0/modules/pango-arabic-fc.so: un
defined symbol: pango_ot_buffer_set_zero_width_marks
Failed to load Pango module for id: 'ArabicScriptEngineFc'04/08/14 20:45:58 (WAR
NING): /usr/lib/pango/1.4.0/modules/pango-arabic-fc.so: undefined symbol: pango_
ot_buffer_set_zero_width_marks
Failed to load Pango module for id: 'ArabicScriptEngineFc'04/08/14 20:45:58 (WAR
NING): /usr/lib/pango/1.4.0/modules/pango-arabic-fc.so: undefined symbol: pango_
ot_buffer_set_zero_width_marks
Failed to load Pango module for id: 'ArabicScriptEngineFc'04/08/14 20:45:58 (WAR
NING): /usr/lib/pango/1.4.0/modules/pango-arabic-fc.so: undefined symbol: pango_
ot_buffer_set_zero_width_marks
Failed to load Pango module for id: 'ArabicScriptEngineFc'
(gtk-gnutella:15425): GLib-GObject-CRITICAL **: file gobject.c: line 1561 (g_obj
ect_ref): assertion `G_IS_OBJECT (object)' failed
04/08/14 20:45:58 (CRITICAL): file pango-engine.c: line 68 (_pango_engine_shape_
shape): assertion `PANGO_IS_FONT (font)' failed

** ERROR **: file shape.c: line 75 (pango_shape): assertion failed: (glyphs->num
_glyphs > 0)
aborting...

[1]+  Aborted                 (core dumped) gtk-gnutella




(gdb) bt
#0  0x40634f11 in kill () from /lib/libc.so.6
#1  0x408e4b3d in pthread_kill () from /lib/libpthread.so.0
#2  0x408e4e9b in raise () from /lib/libpthread.so.0
#3  0x40634b12 in raise () from /lib/libc.so.6
#4  0x40636380 in abort () from /lib/libc.so.6
#5  0x404565b9 in g_node_new () from /usr/lib/libglib-2.0.so.0
#6  0x404565f4 in g_node_new () from /usr/lib/libglib-2.0.so.0
#7  0x403d7048 in fribidi_analyse_string (str=0x8b97e48, len=5, 
    pbase_dir=0x8a58b74, ptype_rl_list=0x0, pmax_level=0x0) at fribidi.c:591
#8  0x403d2099 in markup_data_open_tag (md=0x86716a0) at pango-markup.c:248
#9  0x403d0fab in pango_layout_get_item_properties (item=0x0, 
    uline=0xbfffc0a0, rise=0x8a58b68, ink_rect=0x0, logical_rect=0x8, 
    shape_set=0x8b94580) at pango-layout.c:4074
#10 0x403ce40f in imposed_shape (text=0x86716a0 "&#65533;W\b\001", 
    n_chars=145800640, shape_ink=0xbfffc108, shape_logical=0x406cbe8d, 
    glyphs=0x404a5d54) at pango-layout.c:2264
#11 0x403d0abb in pango_layout_line_get_extents (line=0x86716a0, ink_rect=0x0, 
    logical_rect=0xbfffc240) at pango-layout.c:3870
#12 0x403cdd49 in pango_layout_get_extents_internal (layout=0x86716a0, 
    ink_rect=0x0, logical_rect=0xbfffc240, line_extents=0x4023fddb)
    at pango-layout.c:2030
#13 0x403cddf4 in pango_layout_get_extents_internal (layout=0x86716a0, 
    ink_rect=0x0, logical_rect=0xbfffc240, line_extents=0x0)
    at pango-layout.c:2059
#14 0x4009916d in gtk_cell_renderer_text_new ()

   from /usr/lib/libgtk-x11-2.0.so.0
#15 0x400951c3 in gtk_cell_renderer_get_size ()
   from /usr/lib/libgtk-x11-2.0.so.0
#16 0x40228546 in gtk_tree_view_column_cell_get_size ()
   from /usr/lib/libgtk-x11-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#17 0x4021558d in gtk_tree_view_get_type () from /usr/lib/libgtk-x11-2.0.so.0
#18 0x402163f2 in gtk_tree_view_get_type () from /usr/lib/libgtk-x11-2.0.so.0
#19 0x402167b5 in gtk_tree_view_get_type () from /usr/lib/libgtk-x11-2.0.so.0
#20 0x40210705 in gtk_tree_view_get_type () from /usr/lib/libgtk-x11-2.0.so.0
#21 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#22 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#23 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#24 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#25 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#26 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#27 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#28 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#29 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#30 0x402321f4 in gtk_viewport_get_shadow_type ()
   from /usr/lib/libgtk-x11-2.0.so.0
#31 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#32 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#33 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#34 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#35 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#36 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#37 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#38 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#39 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#40 0x40180d0b in gtk_scrolled_window_get_shadow_type ()
   from /usr/lib/libgtk-x11-2.0.so.0
#41 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#42 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#43 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#44 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#45 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#46 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#47 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#48 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#49 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#50 0x40230817 in gtk_vbox_new () from /usr/lib/libgtk-x11-2.0.so.0
#51 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#52 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#53 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#54 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#55 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#56 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#57 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#58 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#59 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#60 0x40155d62 in gtk_notebook_new () from /usr/lib/libgtk-x11-2.0.so.0
#61 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#62 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#63 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#64 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#65 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#66 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#67 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#68 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#69 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#70 0x40230817 in gtk_vbox_new () from /usr/lib/libgtk-x11-2.0.so.0
#71 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#72 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#73 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#74 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#75 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#76 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#77 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#78 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#79 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#80 0x401109b8 in gtk_hpaned_new () from /usr/lib/libgtk-x11-2.0.so.0
#81 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#82 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#83 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#84 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#85 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#86 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#87 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#88 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#89 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#90 0x40230817 in gtk_vbox_new () from /usr/lib/libgtk-x11-2.0.so.0
#91 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#92 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#93 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#94 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#95 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#96 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#97 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
#98 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#99 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#100 0x40247342 in gtk_window_reshow_with_initial_size ()
   from /usr/lib/libgtk-x11-2.0.so.0
#101 0x40407635 in g_cclosure_marshal_STRING__OBJECT_POINTER ()
   from /usr/lib/libgobject-2.0.so.0
#102 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#103 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#104 0x40405f46 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#105 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#106 0x40405af3 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#107 0x40189d29 in gtk_size_group_remove_widget ()
   from /usr/lib/libgtk-x11-2.0.so.0
---Type <return> to continue, or q <return> to quit---
#108 0x4018a09d in _gtk_size_group_compute_requisition ()
   from /usr/lib/libgtk-x11-2.0.so.0
#109 0x4023866c in gtk_widget_size_request () from /usr/lib/libgtk-x11-2.0.so.0
#110 0x402482b1 in _gtk_window_unset_focus_and_default ()
   from /usr/lib/libgtk-x11-2.0.so.0
#111 0x402487bd in _gtk_window_unset_focus_and_default ()
   from /usr/lib/libgtk-x11-2.0.so.0
#112 0x40406bb8 in g_cclosure_marshal_VOID__FLAGS ()
   from /usr/lib/libgobject-2.0.so.0
#113 0x403f3777 in g_enum_types_init () from /usr/lib/libgobject-2.0.so.0
#114 0x403f3159 in g_closure_set_marshal () from /usr/lib/libgobject-2.0.so.0
#115 0x40406134 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#116 0x40405700 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#117 0x40405a04 in g_signal_emit_by_name () from /usr/lib/libgobject-2.0.so.0
#118 0x400c30b7 in gtk_container_check_resize ()
   from /usr/lib/libgtk-x11-2.0.so.0
#119 0x400c2e79 in gtk_container_set_reallocate_redraws ()
   from /usr/lib/libgtk-x11-2.0.so.0
#120 0x40450183 in g_markup_parse_context_free ()
   from /usr/lib/libglib-2.0.so.0
#121 0x40450385 in g_markup_parse_context_free ()
   from /usr/lib/libglib-2.0.so.0
#122 0x4044e3e2 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#123 0x404508d0 in g_markup_parse_context_free ()
   from /usr/lib/libglib-2.0.so.0
#124 0x4044e903 in g_main_context_add_poll () from /usr/lib/libglib-2.0.so.0
#125 0x4013f0d3 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#126 0x08092dc6 in main_gui_run ()
#127 0x00000491 in ?? ()
#128 0x0000033b in ?? ()
---Type <return> to continue, or q <return> to quit---
#129 0x00000004 in ?? ()
#130 0x4063763d in __cxa_atexit () from /lib/libc.so.6
Previous frame inner to this frame (corrupt stack?)

Comment 2 Don Seiler (RETIRED) gentoo-dev

2004-08-16 13:57:41 UTC

*** Bug 60257 has been marked as a duplicate of this bug. ***

Comment 3 Jon Hood (RETIRED) gentoo-dev

2004-08-16 14:10:06 UTC

I think the gnome herd is in charge of pango- I'm not seeing anything gtk-gnutella caused here.

Comment 4 foser (RETIRED) gentoo-dev

2004-08-16 14:25:28 UTC

and what pango are you using (why do i need to ask this) ?

Comment 5 Timmy Douglas 2004-08-16 20:24:44 UTC

> and what pango are you using (why do i need to ask this) ?

it was 1.4.0 at the time of the bug report. the random segfaults were making it unusable. i'm going to try 1.4.1 now.

Comment 6 Alastair Tse (RETIRED) gentoo-dev

2004-10-17 14:21:32 UTC

can't say i've seen that before, except maybe something weird is happening with your native charset (eg. big5 or shiftjis) being treated as utf-8 and then triggering pango hangul module to barf at it. seems like something odd happening with your LC_*, try using something more consistent across the board?

Comment 7 foser (RETIRED) gentoo-dev

2004-10-18 11:28:35 UTC

i'm pretty sure these types of crashes have been fixed in pango 1.4.1 and up and since the reporter hasn't replied...

Comment 8 Timmy Douglas 2004-10-18 13:09:31 UTC

well yeah i guess, they are just random crashes that happend and i'd like to report them if it helps the developer.