Package: libgtk-3-0
Version: 3.0.11-1
Severity: normal

Start cheese 3.0.1-2.  It is in photo mode by default.  Click on
the empty pane where photos would appear if you took any.  Press
the Right arrow key.  The process dies with SIGSEGV.

This crash does not occur if you do have any photos in the pane.

I then built unoptimized, unstripped versions of cheese, gtk+3.0,
and glib2.0.  Here's the backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff654dffa in gtk_icon_view_set_cell_data (icon_view=0x6b0870, 
    item=0x0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkiconview.c:4177
4177        iter = item->iter;
(gdb) backtrace
#0  0x00007ffff654dffa in gtk_icon_view_set_cell_data (icon_view=0x6b0870, 
    item=0x0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkiconview.c:4177
#1  0x00007ffff654d23b in gtk_icon_view_move_cursor_left_right (
    icon_view=0x6b0870, count=1)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkiconview.c:3856
#2  0x00007ffff654c83a in gtk_icon_view_real_move_cursor (icon_view=0x6b0870, 
    step=GTK_MOVEMENT_VISUAL_POSITIONS, count=1)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkiconview.c:3535
#3  0x00007ffff6582365 in _gtk_marshal_BOOLEAN__ENUM_INT (closure=0x6ed210, 
    return_value=0x7fffffffcee0, n_param_values=3, param_values=0x11f3d50, 
    invocation_hint=0x7fffffffcd10, marshal_data=0x7ffff654c6b3)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkmarshalers.c:287
#4  0x00007ffff5961744 in g_type_class_meta_marshal (closure=0x6ed210, 
    return_value=0x7fffffffcee0, n_param_values=3, param_values=0x11f3d50, 
    invocation_hint=0x7fffffffcd10, marshal_data=0x400)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gclosure.c:878
#5  0x00007ffff5961432 in g_closure_invoke (closure=0x6ed210, 
    return_value=0x7fffffffcee0, n_param_values=3, param_values=0x11f3d50, 
    invocation_hint=0x7fffffffcd10)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gclosure.c:767
#6  0x00007ffff597bb9b in signal_emit_unlocked_R (node=0x6ed330, detail=0, 
    instance=0x6b0870, emission_return=0x7fffffffcee0, 
    instance_and_params=0x11f3d50)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:3290
#7  0x00007ffff597a01c in g_signal_emitv (instance_and_params=0x11f3d50, 
    signal_id=141, detail=0, return_value=0x7fffffffcee0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:2888
#8  0x00007ffff64684c5 in gtk_binding_entry_activate (entry=0x6f8b80, 
    object=0x6b0870)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkbindings.c:653
#9  0x00007ffff6469de4 in binding_activate (binding_set=0x6ee020, 
    entries=0x11f3970, object=0x6b0870, is_release=0, unbound=0x7fffffffcfb4)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkbindings.c:1525
#10 0x00007ffff6469f7e in gtk_bindings_activate_list (object=0x6b0870, 
    entries=0x11f3970, is_release=0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkbindings.c:1586
#11 0x00007ffff646a1fe in gtk_bindings_activate_event (object=0x6b0870, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkbindings.c:1671
#12 0x00007ffff6723fb1 in gtk_widget_real_key_press_event (widget=0x6b0870, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwidget.c:5767
#13 0x00007ffff65495db in gtk_icon_view_key_press (widget=0x6b0870, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkiconview.c:2154
#14 0x00007ffff6581df4 in _gtk_marshal_BOOLEAN__BOXED (closure=0x6be9c0, 
    return_value=0x7fffffffd290, n_param_values=2, param_values=0x10c8730, 
    invocation_hint=0x7fffffffd2c0, marshal_data=0x7ffff6549548)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkmarshalers.c:85
#15 0x00007ffff5961744 in g_type_class_meta_marshal (closure=0x6be9c0, 
    return_value=0x7fffffffd290, n_param_values=2, param_values=0x10c8730, 
    invocation_hint=0x7fffffffd2c0, marshal_data=0x1b0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gclosure.c:878
#16 0x00007ffff5961432 in g_closure_invoke (closure=0x6be9c0, 
    return_value=0x7fffffffd290, n_param_values=2, param_values=0x10c8730, 
    invocation_hint=0x7fffffffd2c0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gclosure.c:767
#17 0x00007ffff597bb9b in signal_emit_unlocked_R (node=0x66e540, detail=0, 
    instance=0x6b0870, emission_return=0x7fffffffd440, 
    instance_and_params=0x10c8730)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:3290
#18 0x00007ffff597a964 in g_signal_emit_valist (instance=0x6b0870, 
    signal_id=49, detail=0, var_args=0x7fffffffd558)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:2993
#19 0x00007ffff597ae37 in g_signal_emit (instance=0x6b0870, signal_id=49, 
    detail=0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:3040
#20 0x00007ffff67248ae in gtk_widget_event_internal (widget=0x6b0870, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwidget.c:6114
#21 0x00007ffff672413d in gtk_widget_event (widget=0x6b0870, event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwidget.c:5830
#22 0x00007ffff6741b92 in gtk_window_propagate_key_event (window=0xdc41c0, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwindow.c:5712
#23 0x00007ffff6741c78 in gtk_window_key_press_event (widget=0xdc41c0, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwindow.c:5742
#24 0x00007ffff6581df4 in _gtk_marshal_BOOLEAN__BOXED (closure=0x6be9c0, 
    return_value=0x7fffffffd910, n_param_values=2, param_values=0x10d8350, 
    invocation_hint=0x7fffffffd940, marshal_data=0x7ffff6741c11)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkmarshalers.c:85
#25 0x00007ffff5961744 in g_type_class_meta_marshal (closure=0x6be9c0, 
    return_value=0x7fffffffd910, n_param_values=2, param_values=0x10d8350, 
    invocation_hint=0x7fffffffd940, marshal_data=0x1b0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gclosure.c:878
#26 0x00007ffff5961432 in g_closure_invoke (closure=0x6be9c0, 
    return_value=0x7fffffffd910, n_param_values=2, param_values=0x10d8350, 
    invocation_hint=0x7fffffffd940)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gclosure.c:767
#27 0x00007ffff597bb9b in signal_emit_unlocked_R (node=0x66e540, detail=0, 
    instance=0xdc41c0, emission_return=0x7fffffffdac0, 
    instance_and_params=0x10d8350)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:3290
#28 0x00007ffff597a964 in g_signal_emit_valist (instance=0xdc41c0, 
    signal_id=49, detail=0, var_args=0x7fffffffdbd8)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:2993
#29 0x00007ffff597ae37 in g_signal_emit (instance=0xdc41c0, signal_id=49, 
    detail=0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gobject/gsignal.c:3040
#30 0x00007ffff67248ae in gtk_widget_event_internal (widget=0xdc41c0, 
    event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwidget.c:6114
#31 0x00007ffff672413d in gtk_widget_event (widget=0xdc41c0, event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkwidget.c:5830
#32 0x00007ffff6581c30 in gtk_propagate_event (widget=0xdc41c0, event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkmain.c:2571
#33 0x00007ffff6580a22 in gtk_main_do_event (event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkmain.c:1872
#34 0x00007ffff6155478 in _gdk_event_emit (event=0xfb11a0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gdk/gdkevents.c:71
#35 0x00007ffff618c9be in gdk_event_source_dispatch (source=0x658290, 
    callback=0, user_data=0x0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gdk/x11/gdkeventsource.c:318
#36 0x00007ffff548fa9e in g_main_dispatch (context=0x636c70)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./glib/gmain.c:2440
#37 0x00007ffff549102e in g_main_context_dispatch (context=0x636c70)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./glib/gmain.c:3013
#38 0x00007ffff54914eb in g_main_context_iterate (context=0x636c70, block=1, 
    dispatch=1, self=0x628100)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./glib/gmain.c:3091
#39 0x00007ffff5491c7d in g_main_loop_run (loop=0xa68330)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./glib/gmain.c:3299
#40 0x00007ffff65800cf in gtk_main ()
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkmain.c:1358
#41 0x00007ffff645cbaf in gtk_application_run_mainloop (application=0xa548c0)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/gtk+3.0-3.0.11/./gtk/gtkapplication.c:85
#42 0x00007ffff5e739dd in g_application_run (application=0xa548c0, argc=1, 
    argv=0x7fffffffe208)
    at 
/home/Kalle/build/x86_64-unknown-linux-gnu/Debian/glib2.0-2.28.6/./gio/gapplication.c:1322
#43 0x000000000040d29c in _vala_main (args=0x7fffffffe208, args_length1=1)
    at cheese-main.c:346
#44 0x000000000040d2fa in main (argc=1, argv=0x7fffffffe208)
    at cheese-main.c:357

gtk_icon_view_set_cell_data crashes if called with item == NULL
when the GTK_TREE_MODEL_ITERS_PERSIST flag is set.  It is called
by gtk_icon_view_move_cursor_left_right, which explicitly sets
item = NULL:

      item = list ? list->data : NULL;

      /* Give focus to the first cell initially */
      gtk_icon_view_set_cell_data (icon_view, item);
      gtk_cell_area_focus (icon_view->priv->cell_area, direction);

So, the bug is in gtk+3.0, not in cheese.  A similar crash can be
triggered via gtk_icon_view_move_cursor_up_down.

https://bugzilla.gnome.org/page.cgi?id=trace.html&trace_id=205506
shows another crash with gtk_icon_view_set_cell_data in the stack,
but it looks like item != NULL there; it is not the same bug.

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fi_FI.utf8, LC_CTYPE=fi_FI.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages cheese depends on:
ii  cheese-common                 3.0.1-2    Common files for the Cheese tool t
ii  gnome-video-effects           0.3.0-3    GNOME Video Effects
ii  libc6                         2.13-16    Embedded GNU C Library: Shared lib
ii  libcanberra-gtk3-0            0.28-1     Gtk+ 3.0 helper for playing widget
ii  libcheese-gtk20               3.0.1-2    tool to take pictures and videos f
ii  libcheese1                    3.0.1-2    tool to take pictures and videos f
ii  libclutter-1.0-0              1.6.16-1   Open GL based interactive canvas l
ii  libclutter-gtk-1.0-0          1.0.0-1    Open GL based interactive canvas l
ii  libgdk-pixbuf2.0-0            2.23.5-3   GDK Pixbuf library
ii  libgee2                       0.6.1-2    GObject based collection library
ii  libglib2.0-0                  2.28.6-1   The GLib library of C routines
ii  libgnome-desktop-3-0          3.0.2-2    Utility library for loading .deskt
ii  libgstreamer0.10-0            0.10.35-1  Core GStreamer libraries and eleme
ii  libgtk-3-0                    3.0.11-1   GTK+ graphical user interface libr

Versions of packages cheese recommends:
ii  gnome-icon-theme              3.0.0-4    GNOME Desktop icon theme
ii  gvfs                          1.6.4-3    userspace virtual filesystem - ser
ii  hicolor-icon-theme            0.12-1     default fallback theme for FreeDes

cheese suggests no packages.

Versions of packages libgtk-3-0 depends on:
ii  libatk1.0-0        2.0.1-2               ATK accessibility toolkit
ii  libc6              2.13-16               Embedded GNU C Library: Shared lib
ii  libcairo-gobject2  1.10.2-6.1            The Cairo 2D vector graphics libra
ii  libcairo2          1.10.2-6.1            The Cairo 2D vector graphics libra
ii  libcomerr2         1.42~WIP-2011-07-02-1 common error description library
ii  libcups2           1.4.8-2               Common UNIX Printing System(tm) - 
ii  libfontconfig1     2.8.0-3               generic font configuration library
ii  libfreetype6       2.4.6-1               FreeType 2 font engine, shared lib
ii  libgcrypt11        1.4.6-9               LGPL Crypto library - runtime libr
ii  libgdk-pixbuf2.0-0 2.23.5-3              GDK Pixbuf library
ii  libglib2.0-0       2.28.6-1              The GLib library of C routines
ii  libgnutls26        2.12.7-6              GNU TLS library - runtime library
ii  libgssapi-krb5-2   1.9.1+dfsg-1+b1       MIT Kerberos runtime libraries - k
ii  libgtk-3-common    3.0.11-1              common files for the GTK+ graphica
ii  libk5crypto3       1.9.1+dfsg-1+b1       MIT Kerberos runtime libraries - C
ii  libkrb5-3          1.9.1+dfsg-1+b1       MIT Kerberos runtime libraries
ii  libpango1.0-0      1.28.4-1              Layout and rendering of internatio
ii  libx11-6           2:1.4.4-1             X11 client-side library
ii  libxcomposite1     1:0.4.3-2             X11 Composite extension library
ii  libxcursor1        1:1.1.12-1            X cursor management library
ii  libxdamage1        1:1.1.3-2             X11 damaged region extension libra
ii  libxext6           2:1.3.0-3             X11 miscellaneous extension librar
ii  libxfixes3         1:5.0-4               X11 miscellaneous 'fixes' extensio
ii  libxi6             2:1.4.3-3             X11 Input extension library
ii  libxinerama1       2:1.1.1-3             X11 Xinerama extension library
ii  libxrandr2         2:1.3.2-2             X11 RandR extension library
ii  shared-mime-info   0.90-1                FreeDesktop.org shared MIME databa
ii  zlib1g             1:1.2.3.4.dfsg-3      compression library - runtime

Versions of packages libgtk-3-0 recommends:
ii  hicolor-icon-theme            0.12-1     default fallback theme for FreeDes
ii  libgtk-3-bin                  3.0.11-1   programs for the GTK+ graphical us

Versions of packages libgtk-3-0 suggests:
ii  gvfs                          1.6.4-3    userspace virtual filesystem - ser
ii  librsvg2-common               2.34.0-1   SAX-based renderer library for SVG

-- no debconf information

Attachment: pgpDO0IuAUCcC.pgp
Description: PGP signature

Reply via email to