Bug 959768

+++ This bug was initially created as a clone of Bug #884287 +++

Description of problem:
just run




Version-Release number of selected component:
epiphany-3.6.1-2.fc18

Additional info:
backtrace_rating: 4
cmdline:        epiphany
crash_function: gdk_cairo_set_source_pixbuf
executable:     /usr/bin/epiphany
kernel:         3.6.8-2.fc17.x86_64
remote_result:  NOTFOUND
uid:            1000
xsession_errors: 

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 gdk_cairo_set_source_pixbuf at gdkcairo.c:258
 #1 gtk_theming_engine_render_icon at gtkthemingengine.c:2805
 #2 gtk_render_icon at gtkstylecontext.c:4329
 #3 ephy_removable_pixbuf_renderer_render at ephy-removable-pixbuf-renderer.c:106
 #4 gtk_cell_renderer_render at gtkcellrenderer.c:769
 #5 render_cell at gtkcellarea.c:1174
 #6 gtk_cell_area_box_foreach_alloc at gtkcellareabox.c:1296
 #7 gtk_cell_area_real_render at gtkcellarea.c:1216
 #8 gtk_icon_view_paint_item at gtkiconview.c:3083
 #9 gtk_icon_view_draw at gtkiconview.c:1865

--- Additional comment from benoît barthés on 2012-12-05 15:06:41 EST ---

Created attachment 658350 [details]
File: backtrace

--- Additional comment from benoît barthés on 2012-12-05 15:06:44 EST ---

Created attachment 658351 [details]
File: cgroup

--- Additional comment from benoît barthés on 2012-12-05 15:06:46 EST ---

Created attachment 658352 [details]
File: core_backtrace

--- Additional comment from benoît barthés on 2012-12-05 15:06:48 EST ---

Created attachment 658353 [details]
File: dso_list

--- Additional comment from benoît barthés on 2012-12-05 15:06:50 EST ---

Created attachment 658354 [details]
File: environ

--- Additional comment from benoît barthés on 2012-12-05 15:06:52 EST ---

Created attachment 658355 [details]
File: limits

--- Additional comment from benoît barthés on 2012-12-05 15:06:54 EST ---

Created attachment 658356 [details]
File: maps

--- Additional comment from benoît barthés on 2012-12-05 15:06:56 EST ---

Created attachment 658357 [details]
File: open_fds

--- Additional comment from benoît barthés on 2012-12-05 15:06:58 EST ---

Created attachment 658358 [details]
File: proc_pid_status

--- Additional comment from benoît barthés on 2012-12-05 15:07:00 EST ---

Created attachment 658359 [details]
File: smolt_data

--- Additional comment from benoît barthés on 2012-12-05 15:07:25 EST ---

Created attachment 658360 [details]
File: var_log_messages

--- Additional comment from Martin Stransky on 2013-02-07 08:18:00 EST ---

This is an automated bug processing. If you can reproduce the reported bug, please reopen it and assign directly to me (stransky). Thanks!





The bug happens when moving the mouse onto the "Most visted" page that appears when starting epiphany.


(gdb) bt full
#0  g_logv (log_domain=0x30f2a19e5e "GdkPixbuf", log_level=G_LOG_LEVEL_CRITICAL, format=<optimized out>, args=args@entry=0x7fffffffcf98) at gmessages.c:974
        domain = 0x0
        data = <optimized out>
        depth = 0
        log_func = 0x487930 <trap_handler>
        domain_fatal_mask = <optimized out>
        masquerade_fatal = <optimized out>
        test_level = <optimized out>
        was_fatal = <optimized out>
        was_recursion = <optimized out>
        msg = 0x1027fa0 "gdk_pixbuf_get_width: assertion `GDK_IS_PIXBUF (pixbuf)' failed"
        msg_alloc = 0x1027fa0 "gdk_pixbuf_get_width: assertion `GDK_IS_PIXBUF (pixbuf)' failed"
        i = 3
#1  0x00000030e1a4ee32 in g_log (log_domain=log_domain@entry=0x30f2a19e5e "GdkPixbuf", log_level=log_level@entry=G_LOG_LEVEL_CRITICAL, format=format@entry=0x30e1ab789a "%s: assertion `%s' failed") at gmessages.c:1003
        args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fffffffd070, reg_save_area = 0x7fffffffcfb0}}
#2  0x00000030e1a4ee59 in g_return_if_fail_warning (log_domain=log_domain@entry=0x30f2a19e5e "GdkPixbuf", pretty_function=pretty_function@entry=0x30f2a1a130 <__PRETTY_FUNCTION__.24130> "gdk_pixbuf_get_width", expression=expression@entry=0x30f2a19e96 "GDK_IS_PIXBUF (pixbuf)") at gmessages.c:1012
No locals.
#3  0x00000030f2a074c4 in gdk_pixbuf_get_width (pixbuf=pixbuf@entry=0x0) at gdk-pixbuf.c:581
        __PRETTY_FUNCTION__ = "gdk_pixbuf_get_width"
#4  0x0000000000481e24 in get_icon_rectangle (widget=widget@entry=0x103e300 [GdMainIconView], cell=cell@entry=0x1033360 [EphyRemovablePixbufRenderer], cell_area=cell_area@entry=0x7fffffffd190, icon=0x0, rectangle=rectangle@entry=0x7fffffffd0e0) at ephy-removable-pixbuf-renderer.c:62
        direction = GTK_TEXT_DIR_LTR
        x_offset = <optimized out>
        y_offset = <optimized out>
        xpad = <optimized out>
        ypad = <optimized out>
        icon_size = <optimized out>
        w = 0
        h = 0
        pixbuf = 0x30fa1f6df1
#5  0x0000000000482387 in ephy_removable_pixbuf_renderer_render (cell=0x1033360 [EphyRemovablePixbufRenderer], cr=0x78f010, widget=0x103e300 [GdMainIconView], background_area=<optimized out>, cell_area=0x7fffffffd190, flags=<optimized out>) at ephy-removable-pixbuf-renderer.c:104
        context = <optimized out>
        self = 0x1033360 [EphyRemovablePixbufRenderer]
        icon_area = {x = -98603535, y = 48, width = -99892730, height = 48}
#6  0x00000030f9ed738c in gtk_cell_renderer_render (cell=0x1033360 [EphyRemovablePixbufRenderer], cr=0x78f010, widget=0x103e300 [GdMainIconView], background_area=0x7fffffffd2a0, cell_area=0x7fffffffd190, flags=GTK_CELL_RENDERER_PRELIT) at gtkcellrenderer.c:769
        selected = 0
        priv = <optimized out>
        context = 0x157d520 [GtkStyleContext]
        state = <optimized out>
        __PRETTY_FUNCTION__ = "gtk_cell_renderer_render"
#7  0x00000030f9ecdd0e in render_cell (renderer=0x1033360 [EphyRemovablePixbufRenderer], cell_area=0x7fffffffd290, cell_background=0x7fffffffd2a0, data=0x7fffffffd310) at gtkcellarea.c:1174
        focus_cell = 0x0
        flags = GTK_CELL_RENDERER_PRELIT
        inner_area = {x = 755, y = 272, width = 210, height = 156}
#8  0x00000030f9ed027f in gtk_cell_area_box_foreach_alloc (area=0x156a0d0 [GtkCellAreaBox], context=<optimized out>, widget=0x103e300 [GdMainIconView], cell_area=0x7fffffffd3b0, background_area=0x7fffffffd3b0, callback=0x30f9ecdc10 <render_cell>, callback_data=0x7fffffffd310) at gtkcellareabox.c:1296
        cell = <optimized out>
        box = 0x156a0d0 [GtkCellAreaBox]
        priv = <optimized out>
        box_context = <optimized out>
        allocated_cells = 0xfb5780 = {0x7fff94001460, 0xfb83a0}
        l = 0xfb5780 = {0x7fff94001460, 0xfb83a0}
        cell_alloc = {x = 754, y = 271, width = 212, height = 158}
        cell_background = {x = 754, y = 271, width = 212, height = 158}
        rtl = 0
#9  0x00000030f9ecd144 in gtk_cell_area_real_render (area=0x156a0d0 [GtkCellAreaBox], context=0x15de920 [GtkCellAreaBoxContext], widget=0x103e300 [GdMainIconView], cr=0x78f010, background_area=0x7fffffffd3b0, cell_area=0x7fffffffd3b0, flags=GTK_CELL_RENDERER_PRELIT, paint_focus=1) at gtkcellarea.c:1216
        render_data = {area = 0x156a0d0 [GtkCellAreaBox], widget = 0x103e300 [GdMainIconView], cr = 0x78f010, focus_rect = {x = 0, y = 0, width = 0, height = 0}, render_flags = GTK_CELL_RENDERER_PRELIT, paint_focus = 0, focus_all = 0, first_focus = 1}
#10 0x00000030f9f683ed in gtk_icon_view_paint_item (icon_view=icon_view@entry=0x103e300 [GdMainIconView], cr=cr@entry=0x78f010, item=item@entry=0xfaa180, x=754, y=271, draw_focus=<optimized out>) at gtkiconview.c:3083
        cell_area = {x = 754, y = 271, width = 212, height = 231}
        state = <optimized out>
        flags = <optimized out>
        style_context = 0x157d520 [GtkStyleContext]
        widget = 0x103e300 [GdMainIconView]
        priv = 0x103e3e0
        context = <optimized out>
#11 0x00000030f9f6de21 in gtk_icon_view_draw (cr=0x78f010, widget=0x103e300 [GdMainIconView]) at gtkiconview.c:1865
        item = 0xfaa180
        icons = 0xfaa200 = {0xfaa180, 0xfaa280}
        path = 0x0
        dest_index = -1
        dest_pos = <optimized out>
        dest_item = 0x0
#12 gtk_icon_view_draw (widget=0x103e300 [GdMainIconView], cr=0x78f010) at gtkiconview.c:1817
        icon_view = 0x103e300 [GdMainIconView]
#13 0x00000030f9f8edef in _gtk_marshal_BOOLEAN__BOXEDv (closure=closure@entry=0x6f8270, return_value=return_value@entry=0x7fffffffd660, instance=instance@entry=0x103e300, args=args@entry=0x7fffffffd828, marshal_data=<optimized out>, n_params=<optimized out>, param_types=param_types@entry=0x6f82e0) at gtkmarshalers.c:130
        cc = <optimized out>
        data1 = <optimized out>
        data2 = <optimized out>
        callback = <optimized out>
        arg0 = 0x78f010
        args_copy = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fffffffd900, reg_save_area = 0x7fffffffd840}}
        v_return = <optimized out>
        __PRETTY_FUNCTION__ = "_gtk_marshal_BOOLEAN__BOXEDv"
#14 0x00000030fa0ba3fe in gtk_widget_draw_marshallerv (closure=0x6f8270, return_value=0x7fffffffd660, instance=0x103e300, args=0x7fffffffd828, marshal_data=<optimized out>, n_params=<optimized out>, param_types=0x6f82e0) at gtkwidget.c:851
        cr = 0x78f010
        args_copy = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fffffffd900, reg_save_area = 0x7fffffffd840}}
#15 0x00000030e560fbd7 in _g_closure_invoke_va (closure=closure@entry=0x6f8270, return_value=return_value@entry=0x7fffffffd660, instance=instance@entry=0x103e300, args=args@entry=0x7fffffffd828, n_params=1, param_types=0x6f82e0) at gclosure.c:840
        marshal = 0x30e560df70 <g_type_class_meta_marshalv>
        marshal_data = 0x120
        in_marshal = 0
        real_closure = 0x6f8250
        __PRETTY_FUNCTION__ = "_g_closure_invoke_va"
#16 0x00000030e56283a8 in g_signal_emit_valist (instance=0x103e300, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7fffffffd828) at gsignal.c:3211
        return_accu = 0x7fffffffd660
        accu = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x6f8370
        emission = {next = 0x0, instance = 0x103e300, ihint = {signal_id = 20, detail = 0, run_type = G_SIGNAL_RUN_LAST}, state = EMISSION_RUN, chain_type = 17014624}
        signal_id = 20
        instance_type = 17014624
        emission_return = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        rtype = 20
        static_scope = 0
        closure = 0x6f8270
        run_type = <optimized out>
        hlist = 0x6f8370
        l = <optimized out>
        fastpath = -10656
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        node = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __PRETTY_FUNCTION__ = "g_signal_emit_valist"
#17 0x00000030e5628de2 in g_signal_emit (instance=instance@entry=0x103e300, signal_id=<optimized out>, detail=detail@entry=0) at gsignal.c:3356
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fffffffd900, reg_save_area = 0x7fffffffd840}}
#18 0x00000030fa0bd8dc in _gtk_widget_draw_internal (clip_to_size=<optimized out>, cr=0x78f010, widget=0x103e300 [GdMainIconView]) at gtkwidget.c:5754
        result = 0
#19 _gtk_widget_draw_internal (widget=0x103e300 [GdMainIconView], cr=0x78f010, clip_to_size=<optimized out>) at gtkwidget.c:5732
No locals.
#20 0x00000030fa0c84b5 in gtk_widget_send_expose (widget=widget@entry=0x103e300 [GdMainIconView], event=event@entry=0x7fffffffd9e0) at gtkwidget.c:6134
        cr = 0x78f010
        x = 0
        y = 0
        do_clip = 1
        __PRETTY_FUNCTION__ = "gtk_widget_send_expose"
#21 0x00000030f9f8ebe8 in gtk_main_do_event (event=0x7fffffffd9e0) at gtkmain.c:1623
        event_widget = 0x103e300 [GdMainIconView]
        grab_widget = 0x103e300 [GdMainIconView]
        topmost_widget = <optimized out>
        window_group = 0x883c90 [GtkWindowGroup]
        rewritten_event = <optimized out>
        device = 0x0
        tmp_list = <optimized out>
        __PRETTY_FUNCTION__ = "gtk_main_do_event"



When I move .config/epiphany/ephy-history.db  out of the way, it doesn't crash. Well, the "Most Visited" tab doesn't appear. Moving that file to a new user's profile doesn't make it crash. Copying the whole ~/.config/epiphany over to a new user's ~/.config/epiphany makes it crash though. I have archived that.