Package: abiword
Version: 2.6.4-4
Severity: important

Steps to reproduce:
      * open abiword
      * type a few words
      * select one of them
      * press control-D

Ka-boom, double free :

*** glibc detected *** /usr/bin/abiword: double free or corruption (fasttop): 
0x0000000002a76370 ***
[snip]
(gdb) bt full
#0  0x00007faa10bc4ef5 in raise () from /lib/libc.so.6
No symbol table info available.
#1  0x00007faa10bc6413 in abort () from /lib/libc.so.6
No symbol table info available.
#2  0x00007faa10c013e8 in ?? () from /lib/libc.so.6
No symbol table info available.
#3  0x00007faa10c06968 in ?? () from /lib/libc.so.6
No symbol table info available.
#4  0x00007faa10c08a76 in free () from /lib/libc.so.6
No symbol table info available.
#5  0x000000000059799d in s_doFontDlg ()
No locals.
#6  0x0000000000598000 in ap_EditMethods::dlgFont ()
No locals.
#7  0x0000000000730e2f in EV_EditMethod::Fn ()
No locals.
#8  0x0000000000732e9c in EV_Keyboard::invokeKeyboardMethod ()
No locals.
#9  0x0000000000737cbe in ev_UnixKeyboard::charDataEvent ()
No locals.
#10 0x0000000000737ece in ev_UnixKeyboard::keyPressEvent ()
No locals.
#11 0x00000000006eeac1 in XAP_UnixFrameImpl::_fe::key_press_event ()
No locals.
#12 0x00007faa15c78688 in _gtk_marshal_BOOLEAN__BOXED (closure=0x25db380, 
    return_value=0x7fff1f23edf0, n_param_values=<value optimized out>, 
    param_values=0x7fff1f23eeb0, invocation_hint=<value optimized out>, 
    marshal_data=0x6ee9a6)
    at /scratch/build-area/gtk+2.0-2.12.11/gtk/gtkmarshalers.c:84
        data1 = (gpointer) 0x2517030
        data2 = (gpointer) 0x6
        v_return = <value optimized out>
        __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXED"
#13 0x00007faa14810ebd in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#14 0x00007faa14823c2d in ?? () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#15 0x00007faa14824f99 in g_signal_emit_valist ()
   from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#16 0x00007faa14825623 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
No symbol table info available.
#17 0x00007faa15d8d19e in gtk_widget_event_internal (widget=0x2517030, 
    event=0x280fa70)
    at /scratch/build-area/gtk+2.0-2.12.11/gtk/gtkwidget.c:4678
        signal_num = <value optimized out>
        return_val = 0
#18 0x00007faa15c712dd in IA__gtk_propagate_event (widget=0x2517030, 
    event=0x280fa70) at /scratch/build-area/gtk+2.0-2.12.11/gtk/gtkmain.c:2310
        window = (GtkWidget *) 0x2517030
        handled_event = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__gtk_propagate_event"
#19 0x00007faa15c7224b in IA__gtk_main_do_event (event=0x280fa70)
    at /scratch/build-area/gtk+2.0-2.12.11/gtk/gtkmain.c:1556
        event_widget = (GtkWidget *) 0x2517030
        grab_widget = (GtkWidget *) 0x2517030
        window_group = (GtkWindowGroup *) 0x0
        rewritten_event = (GdkEvent *) 0x0
        tmp_list = <value optimized out>
        __PRETTY_FUNCTION__ = "IA__gtk_main_do_event"
#20 0x00007faa15591f8c in gdk_event_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at /scratch/build-area/gtk+2.0-2.12.11/gdk/x11/gdkevents-x11.c:2351
        display = <value optimized out>
        event = <value optimized out>
#21 0x00007faa14174892 in g_main_context_dispatch ()
   from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#22 0x00007faa1417801d in ?? () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#23 0x00007faa1417854d in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
No symbol table info available.
#24 0x00007faa15c72667 in IA__gtk_main ()
    at /scratch/build-area/gtk+2.0-2.12.11/gtk/gtkmain.c:1163
        tmp_list = (GList *) 0x7fff1f23f5d0
        functions = (GList *) 0x0
        init = (GtkInitFunction *) 0x90cd90
        loop = (GMainLoop *) 0x6f76
#25 0x0000000000574b83 in AP_UnixApp::main ()
No locals.
#26 0x0000000000570b4c in main ()
No locals.

I rebuilt abiword with "noopt nostrip" as options, but it doesn’t seem
to help much wrt. the backtrace.

Cheers,
-- 
 .''`.
: :' :      We are debian.org. Lower your prices, surrender your code.
`. `'       We will add your hardware and software distinctiveness to
  `-        our own. Resistance is futile.

Attachment: signature.asc
Description: Ceci est une partie de message numériquement signée

Reply via email to