Hmmm, it's a shame that the trace doesn't show the value of group_number in frame #1. If group_number > g, then there would be a condition where free() is called on an uninitialized pointer, which I guess is what is happening here (layout_name looks fairly uninitialized to me)
-- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gnome-settings-daemon in ubuntu. https://bugs.launchpad.net/bugs/685785 Title: gnome-settings-daemon crashed with SIGSEGV in __libc_free() -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs