Bug 429465

Summary: pidgin segfaulting
Product: [Fedora] Fedora Reporter: Tom London <selinux>
Component: pidginAssignee: Warren Togami <wtogami>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: rawhideCC: stu
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-03-02 17:32:23 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Tom London 2008-01-20 18:26:30 UTC
Description of problem:
pidgin-2.3.1-2.fc9 is segfaulting on me.

I ran with 'gdb' and got this trace:

*** PULSEAUDIO: Unable to connect: Connection refused
[Thread 0xb48fdb90 (LWP 8690) exited]
[Thread 0xb54ffb90 (LWP 8689) exited]

(pidgin:8241): GStreamer-CRITICAL **: 
Trying to dispose element play, but it is not in the NULL state.
You need to explicitly set elements to the NULL state before
dropping the final reference, to allow them to clean up.


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7fbb920 (LWP 8241)]
0x001415f0 in pthread_mutex_lock () from /lib/libpthread.so.0
(gdb) where
#0  0x001415f0 in pthread_mutex_lock () from /lib/libpthread.so.0
#1  0x0115e7e2 in ?? () from /usr/lib/gstreamer-0.10/libgstplaybin.so
#2  0x070d9be3 in IA__g_cclosure_marshal_VOID__OBJECT (
    closure=<value optimized out>, return_value=Could not find the frame base
for "IA__g_cclosure_marshal_VOID__OBJECT".
) at gmarshal.c:636
#3  0x070cc003 in IA__g_closure_invoke (closure=<value optimized out>, 
    return_value=<value optimized out>, n_param_values=<value optimized out>, 
    param_values=<value optimized out>, invocation_hint=<value optimized out>)
    at gclosure.c:490
#4  0x070dd90b in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at gsignal.c:2440
#5  0x070deda3 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, 
    var_args=<value optimized out>) at gsignal.c:2199
#6  0x070df049 in IA__g_signal_emit (instance=Could not find the frame base for
"IA__g_signal_emit".
) at gsignal.c:2243
#7  0x078b8554 in gst_bin_remove_func (bin=<value optimized out>, 
    element=<value optimized out>) at gstbin.c:1233
#8  0x078b5d25 in gst_bin_remove (bin=<value optimized out>, 
    element=<value optimized out>) at gstbin.c:1293
#9  0x078bc551 in gst_bin_dispose (object=<value optimized out>)
    at gstbin.c:504
#10 0x058ddcc8 in ?? () from /usr/lib/gstreamer-0.10/libgstdecodebin.so
---Type <return> to continue, or q <return> to quit---
#11 0x070ce2cb in IA__g_object_unref (_object=<value optimized out>)
    at gobject.c:1765
#12 0x078b234e in gst_object_unref (object=<value optimized out>)
    at gstobject.c:354
#13 0x078db8c2 in gst_message_finalize (message=<value optimized out>)
    at gstmessage.c:211
#14 0x078dbeed in gst_mini_object_unref (mini_object=<value optimized out>)
    at gstminiobject.c:281
#15 0x078bece7 in gst_bus_source_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gstbus.c:780
#16 0x0701cbbc in IA__g_main_context_dispatch (context=<value optimized out>)
    at gmain.c:2064
#17 0x07020036 in g_main_context_iterate (context=<value optimized out>, 
    block=<value optimized out>, dispatch=<value optimized out>, self=Could not
find the frame base for "g_main_context_iterate".
)
    at gmain.c:2697
#18 0x070203e9 in IA__g_main_loop_run (loop=<value optimized out>)
    at gmain.c:2905
#19 0x07377307 in IA__gtk_main () at gtkmain.c:1163
#20 0x080c117f in main (argc=1, argv=0xbf8690a4) at gtkmain.c:873
(gdb) 


Version-Release number of selected component (if applicable):
pidgin-2.3.1-2.fc9

How reproducible:
Don't know.....

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Tom London 2008-01-20 18:49:30 UTC
Added a bunch of debuginfo packages (funny how some of them drag in real
packages as dependencies....).

Anyway, here is another gdb trace.  Seems easy to reproduce.... happens when
pidgin tries to generate a sound (at least sometimes).


(pidgin:9563): GStreamer-CRITICAL **: 
Trying to dispose element play, but it is not in the NULL state.
You need to explicitly set elements to the NULL state before
dropping the final reference, to allow them to clean up.


Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7fb5920 (LWP 9563)]
0x001415f0 in pthread_mutex_lock () from /lib/libpthread.so.0
(gdb) where
#0  0x001415f0 in pthread_mutex_lock () from /lib/libpthread.so.0
#1  0x012947e2 in decodebin_element_removed_cb (decodebin=0xabf9118, 
    element=0xa9c3a30, data=0xabf81c8) at gstplaybasebin.c:1466
#2  0x070d9be3 in IA__g_cclosure_marshal_VOID__OBJECT (
    closure=<value optimized out>, return_value=Could not find the frame base
for "IA__g_cclosure_marshal_VOID__OBJECT".
) at gmarshal.c:636
#3  0x070cc003 in IA__g_closure_invoke (closure=<value optimized out>, 
    return_value=<value optimized out>, n_param_values=<value optimized out>, 
    param_values=<value optimized out>, invocation_hint=<value optimized out>)
    at gclosure.c:490
#4  0x070dd90b in signal_emit_unlocked_R (node=<value optimized out>, 
    detail=<value optimized out>, instance=<value optimized out>, 
    emission_return=<value optimized out>, 
    instance_and_params=<value optimized out>) at gsignal.c:2440
#5  0x070deda3 in IA__g_signal_emit_valist (instance=<value optimized out>, 
    signal_id=<value optimized out>, detail=<value optimized out>, 
    var_args=<value optimized out>) at gsignal.c:2199
#6  0x070df049 in IA__g_signal_emit (instance=Could not find the frame base for
"IA__g_signal_emit".
) at gsignal.c:2243
#7  0x078b8554 in gst_bin_remove_func (bin=<value optimized out>, 
    element=<value optimized out>) at gstbin.c:1233
#8  0x078b5d25 in gst_bin_remove (bin=<value optimized out>, 
    element=<value optimized out>) at gstbin.c:1293
#9  0x078bc551 in gst_bin_dispose (object=<value optimized out>)
    at gstbin.c:504
---Type <return> to continue, or q <return> to quit---
#10 0x011aacc8 in gst_decode_bin_dispose (object=0xabf9118)
    at gstdecodebin.c:373
#11 0x070ce2cb in IA__g_object_unref (_object=<value optimized out>)
    at gobject.c:1765
#12 0x078b234e in gst_object_unref (object=<value optimized out>)
    at gstobject.c:354
#13 0x078db8c2 in gst_message_finalize (message=<value optimized out>)
    at gstmessage.c:211
#14 0x078dbeed in gst_mini_object_unref (mini_object=<value optimized out>)
    at gstminiobject.c:281
#15 0x078bece7 in gst_bus_source_dispatch (source=<value optimized out>, 
    callback=<value optimized out>, user_data=<value optimized out>)
    at gstbus.c:780
#16 0x0701cbbc in IA__g_main_context_dispatch (context=<value optimized out>)
    at gmain.c:2064
#17 0x07020036 in g_main_context_iterate (context=<value optimized out>, 
    block=<value optimized out>, dispatch=<value optimized out>, self=Could not
find the frame base for "g_main_context_iterate".
)
    at gmain.c:2697
#18 0x070203e9 in IA__g_main_loop_run (loop=<value optimized out>)
    at gmain.c:2905
#19 0x07377307 in IA__gtk_main () at gtkmain.c:1163
#20 0x080c117f in main (argc=1, argv=0xbf8c20f4) at gtkmain.c:873
(gdb) 


Comment 2 Tom London 2008-03-02 17:32:23 UTC
Been stable for a while....

Closing.