Bug 760562

Summary: Crashing while accessing unmapped region
Product: [Fedora] Fedora Reporter: Zdenek Kabelac <zkabelac>
Component: metacityAssignee: Owen Taylor <otaylor>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: otaylor
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-02-17 14:00:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Zdenek Kabelac 2011-12-06 14:19:37 UTC
Description of problem:

For quite some time my  metacity is crashing on the app.start.

Valgrind shows this:
Process terminating with default action of signal 11 (SIGSEGV): dumping core
 Access not within mapped region at address 0x8057A3D00
   at 0x458BE5: get_button (theme.c:4264)
   by 0x45EB0A: meta_frame_style_draw_with_style (theme.c:4624)
   by 0x45FB4B: meta_theme_draw_frame_with_style (theme.c:5267)
   by 0x44B068: meta_frames_paint_to_drawable (frames.c:2529)
   by 0x44CDAF: meta_frames_expose_event (frames.c:2126)
   by 0x57C7D22: _gtk_marshal_BOOLEAN__BOXED (gtkmarshalers.c:86)
   by 0x754DA33: g_closure_invoke (gclosure.c:774)
   by 0x755DB31: signal_emit_unlocked_R (gsignal.c:3340)
   by 0x75650AC: g_signal_emit_valist (gsignal.c:3043)
   by 0x7565391: g_signal_emit (gsignal.c:3090)
   by 0x58FCF60: gtk_widget_event_internal (gtkwidget.c:4999)
   by 0x57C5E96: gtk_main_do_event (gtkmain.c:1620)
   by 0x5D37B93: _gdk_window_process_updates_recurse (gdkwindow.c:5429)
   by 0x5D32732: gdk_window_process_updates_internal (gdkwindow.c:5588)
   by 0x5D34A70: gdk_window_process_all_updates (gdkwindow.c:5696)
   by 0x5D34AD8: gdk_window_update_idle (gdkwindow.c:5322)
   by 0x5D10A45: gdk_threads_dispatch (gdk.c:512)
   by 0x7BDC989: g_main_context_dispatch (gmain.c:2513)
   by 0x7BDCD4F: g_main_context_iterate (gmain.c:3121)
   by 0x7BDD154: g_main_loop_run (gmain.c:3315)
   by 0x4100C5: main (main.c:584)

(It's worth to note there is a lot of uninitialized jumps and values being read before reported by valgrind)


I've tried to downgrade metacity package a bit, but with success.
(so only openbox-session-gnome  currently works for me)

Program terminated with signal 11, Segmentation fault.
#0  get_button (style=0xfef970, type=<optimized out>, state=<optimized out>) at ui/theme.c:4264
4264	      op_list = parent->buttons[type][state];

#0  get_button (style=0xfef970, type=<optimized out>, state=<optimized out>) at ui/theme.c:4264
#1  0x000000000045eb0b in meta_frame_style_draw_with_style (style=0xfef970, style_gtk=0xff6b70 [ClearlooksStyle], widget=
    0xff5000 [MetaFrames], drawable=0x1033530 [GdkPixmap], x_offset=0, y_offset=0, clip=0x0, fgeom=0x7fffa0aedb40, 
    client_width=640, client_height=162, title_layout=0x100c980 [PangoLayout], text_height=21, button_states=0x7fffa0aee040, 
    mini_icon=0x1005400, icon=0x1005370) at ui/theme.c:4624
#2  0x000000000045fb4c in meta_theme_draw_frame_with_style (theme=<optimized out>, style_gtk=0xff6b70 [ClearlooksStyle], 
    widget=0xff5000 [MetaFrames], drawable=0x1033530 [GdkPixmap], clip=0x0, x_offset=0, y_offset=0, type=
    META_FRAME_TYPE_DIALOG, flags=3139, client_width=640, client_height=162, title_layout=0x100c980 [PangoLayout], 
    text_height=21, button_layout=0x7fffa0aedfa0, button_states=0x7fffa0aee040, mini_icon=0x1005400, icon=0x1005370)
    at ui/theme.c:5267
#3  0x000000000044b069 in meta_frames_paint_to_drawable (frames=<optimized out>, frame=<optimized out>, drawable=
    0x1033530 [GdkPixmap], region=<optimized out>, x_offset=0, y_offset=0) at ui/frames.c:2529
#4  0x000000000044cdb0 in generate_pixmap (rect=<optimized out>, frame=0xf726b0, frames=0xff5000 [MetaFrames])
    at ui/frames.c:2126
#5  populate_cache (frame=0xf726b0, frames=0xff5000 [MetaFrames]) at ui/frames.c:2199
#6  meta_frames_expose_event (widget=<optimized out>, event=0x7fffa0aee760) at ui/frames.c:2307
#7  0x00007f0493999d23 in _gtk_marshal_BOOLEAN__BOXED (closure=0xf9b4d0, return_value=0x7fffa0aee420, 
    n_param_values=<optimized out>, param_values=0x1033560, invocation_hint=<optimized out>, marshal_data=<optimized out>)
    at gtkmarshalers.c:86
#8  0x00007f0491dc1a34 in g_closure_invoke (closure=0xf9b4d0, return_value=0x7fffa0aee420, n_param_values=2, param_values=
    0x1033560, invocation_hint=<optimized out>) at gclosure.c:774
#9  0x00007f0491dd1b32 in signal_emit_unlocked_R (node=<optimized out>, detail=0, instance=<optimized out>, emission_return=
    0x7fffa0aee560, instance_and_params=0x1033560) at gsignal.c:3340
#10 0x00007f0491dd90ad in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, 
    var_args=0x7fffa0aee5c8) at gsignal.c:3043
#11 0x00007f0491dd9392 in g_signal_emit (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>)
    at gsignal.c:3090
#12 0x00007f0493acef61 in gtk_widget_event_internal (widget=0xff5000 [MetaFrames], event=0x7fffa0aee760) at gtkwidget.c:4999
#13 0x00007f0493997e97 in IA__gtk_main_do_event (event=0x7fffa0aee760) at gtkmain.c:1620
#14 0x00007f04935d0b94 in _gdk_window_process_updates_recurse (window=0xf78480 [GdkWindow], expose_region=0x1033630)
    at gdkwindow.c:5429
#15 0x00007f04935cb733 in gdk_window_process_updates_internal (window=0xf78480 [GdkWindow]) at gdkwindow.c:5588
#16 0x00007f04935cda71 in IA__gdk_window_process_all_updates () at gdkwindow.c:5696
#17 0x00007f04935cdad9 in gdk_window_update_idle (data=<optimized out>) at gdkwindow.c:5322
#18 0x00007f04935a9a46 in gdk_threads_dispatch (data=0xfdaa60) at gdk.c:512
#19 0x00007f04916d198a in g_main_dispatch (context=0xf4a900) at gmain.c:2513
#20 g_main_context_dispatch (context=0xf4a900) at gmain.c:3050
#21 0x00007f04916d1d50 in g_main_context_iterate (dispatch=1, block=<optimized out>, context=0xf4a900, self=<optimized out>)
    at gmain.c:3121
#22 g_main_context_iterate (context=0xf4a900, block=<optimized out>, dispatch=1, self=<optimized out>) at gmain.c:3058
#23 0x00007f04916d2155 in g_main_loop_run (loop=0xf4b630) at gmain.c:3315
#24 0x00000000004100c6 in main (argc=1, argv=0x7fffa0aef018) at core/main.c:584




Version-Release number of selected component (if applicable):
 metacity.x86_64 0:2.34.1-2.fc17                              
 gnome-themes-standard.x86_64 0:3.3.2-1.fc17 

How reproducible:


Steps to Reproduce:
1. startx
2.
3.
  
Actual results:
core from metacity

Expected results:


Additional info:

Comment 1 Fedora End Of Life 2013-04-03 16:38:42 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 19 development cycle.
Changing version to '19'.

(As we did not run this process for some time, it could affect also pre-Fedora 19 development
cycle bugs. We are very sorry. It will help us with cleanup during Fedora 19 End Of Life. Thank you.)

More information and reason for this action is here:
https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora19

Comment 2 Fedora End Of Life 2015-01-09 16:54:10 UTC
This message is a notice that Fedora 19 is now at end of life. Fedora 
has stopped maintaining and issuing updates for Fedora 19. It is 
Fedora's policy to close all bug reports from releases that are no 
longer maintained. Approximately 4 (four) weeks from now this bug will
be closed as EOL if it remains open with a Fedora 'version' of '19'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 19 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 3 Fedora End Of Life 2015-02-17 14:00:00 UTC
Fedora 19 changed to end-of-life (EOL) status on 2015-01-06. Fedora 19 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.