Bug#877233: libstdc++6: gnuplot crashed in libstdc++.so.6 (SIGSEGV)

[Vincent Lefevre]

Note: Under about the same conditions, I did not get any crash in
the past months. So this issue might be new.

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#877233: libstdc++6: gnuplot crashed in libstdc++.so.6 (SIGSEGV)

[Vincent Lefevre]

Package: libstdc++6
Version: 7.2.0-7
Severity: important

gnuplot crashed in libstdc++.so.6:

Core was generated by `/usr/bin/gnuplot -persist'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x7f82004884f8 in vtable for __cxxabiv1::__si_class_type_info ()
   from /usr/lib/x86_64-linux-gnu/libstdc++.so.6
[Current thread is 1 (Thread 0x7f81ed4c3700 (LWP 6832))]

I've attached the full backtrace.

I couldn't reproduce the crash.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=POSIX 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libstdc++6 depends on:
ii  gcc-7-base  7.2.0-7
ii  libc6   2.24-17
ii  libgcc1 1:7.2.0-7

libstdc++6 recommends no packages.

libstdc++6 suggests no packages.

-- no debconf information

Thread 2 (Thread 0x7f820408da00 (LWP 6831)):
#0  0x7f81fd4a3c11 in _gdk_x11_gc_new (drawable=0x7f81e80ab970 
[GdkWindowImplX11], values=0x0, values_mask=(unknown: 0)) at 
./gdk/x11/gdkgc-x11.c:134
gc = 0x55b80c81c9a0 [GdkGCX11]
private = 0x55b80c81c9a0 [GdkGCX11]
xvalues = {function = 3, plane_mask = 140195920362240, foreground = 
140195920419104, background = 140720493280416, line_width = 47693680, 
line_style = 32642, cap_style = 209295136, join_style = 21944, fill_style = 
-401796096, fill_rule = 32641, arc_mode = 2, tile = 5, stipple = 
140196374776731, ts_x_origin = 187293072, ts_y_origin = 21944, font = 
3218813263216655616, subwindow_mode = 47659072, graphics_exposures = 32642, 
clip_x_origin = -531088128, clip_y_origin = 749438363, clip_mask = 
140195920525680, dash_offset = -45409469, dashes = -127 '\201'}
xvalues_mask = 3218813263216655616
__func__ = "_gdk_x11_gc_new"
#1  0x7f82030263f8 in wxGetPoolGC(GdkWindow*, wxPoolGCType) 
(window=0x7f81e807e900 [GdkWindow], type=type@entry=wxPEN_COLOUR) at 
../src/gtk/dcclient.cpp:197
i = 
pptr = 
__FUNCTION__ = "wxGetPoolGC"
#2  0x7f820302b741 in wxWindowDCImpl::SetUpDC(bool) 
(this=this@entry=0x55b80d48c200, isMemDC=isMemDC@entry=false) at 
../src/gtk/dcclient.cpp:394
__FUNCTION__ = "SetUpDC"
done = false
bg_col = 
#3  0x7f820302be32 in wxWindowDCImpl::wxWindowDCImpl(wxDC*, wxWindow*) 
(this=this@entry=0x55b80d48c200, owner=, 
window=window@entry=0x7f81e80d1400) at ../src/gtk/dcclient.cpp:319
widget = 0x7f81e8091920 [wxPizza]
#4  0x7f820302bff1 in wxClientDCImpl::wxClientDCImpl(wxDC*, wxWindow*) 
(this=0x55b80d48c200, owner=, win=0x7f81e80d1400) at 
../src/gtk/dcclient.cpp:2028
#5  0x7f82030daa75 in wxNativeDCFactory::CreateClientDC(wxClientDC*, 
wxWindow*) (this=, owner=0x7ffc0b03bd60, window=0x7f81e80d1400) 
at ../src/common/dcbase.cpp:142
impl = 
#6  0x7f82030dc6d0 in wxClientDC::wxClientDC(wxWindow*) 
(this=0x7ffc0b03bd60, win=0x7f81e80d1400) at ../src/common/dcbase.cpp:210
#7  0x55b80b022666 in  ()
#8  0x55b80b024170 in  ()
#9  0x55b80b004d52 in  ()
#10 0x55b80af5768d in  ()
#11 0x55b80af7e603 in  ()
#12 0x55b80af28899 in  ()
#13 0x55b80af2aa69 in  ()
#14 0x55b80af2abdd in  ()
#15 0x55b80af19a54 in  ()
#16 0x7f81ff6612e1 in __libc_start_main (main=0x55b80af19490, argc=2, 
argv=0x7ffc0b03c4c8, init=, fini=, 
rtld_fini=, stack_end=0x7ffc0b03c4b8) at ../csu/libc-start.c:291
result = 
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 8555933072301032110, 
94248945953888, 140720493282496, 0, 0, 2464814579908412078, 
2508275222473802414}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 
0x7ffc0b03c4e0, 0x7f82040db170}, data = {prev = 0x0, cleanup = 0x0, canceltype 
= 184796384}}}
not_first_call = 
#17 0x55b80af1ac8a in  ()

Thread 1 (Thread 0x7f81ed4c3700 (LWP 6832)):
#0  0x7f82004884f8 in vtable for __cxxabiv1::__si_class_type_info () at 
/usr/lib/x86_64-linux-gnu/libstdc++.so.6
#1  0x7f8202fe47b2 in wxBitmap::HasPixmap() const 
(this=this@entry=0x7f81e8053270) at ../src/gtk/bitmap.cpp:1182
#2  0x7f8203029023 in wxWindowDCImpl::DoDrawBitmap(wxBitmap const&, int, 
int, bool) (this=0x7f81e80bae00, bitmap=..., x=, y=, useMask=) at ../src/gtk/dcclient.cpp:1159
__FUNCTION__ = "DoDrawBitmap"
w = 640
h = 384
xx = 0
yy = 0
ww = 640
hh = 384
clipRegion = 0x7f81e80b2b60
overlap = 
isScaled = false
hasAlpha = false
use_gc = 0x55b80c81cf40 [GdkGCX11]
mask = 0x0
mask_new = 0x0
pixmap = 0x0
pixmap_new = 0x0
pixbuf = 0x0
pixbuf_new = 0x0
#3  0x55b80b021a58 in  ()
#4  0x55b80b0225b9 in  ()
#5