Bug 1040661 - segfault in _pygi_marshal_from_py_interface_instance
Summary: segfault in _pygi_marshal_from_py_interface_instance
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: pygobject3
Version: 20
Hardware: x86_64
OS: Linux
unspecified
urgent
Target Milestone: ---
Assignee: Bohuslav "Slavek" Kabrda
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-11 20:43 UTC by Brian J. Murrell
Modified: 2015-06-29 13:28 UTC (History)
11 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-06-29 13:28:52 UTC
Type: Bug


Attachments (Terms of Use)

Description Brian J. Murrell 2013-12-11 20:43:10 UTC
Got the following segfault from python-2.7.5-9.fc20.x86_64:

Program received signal SIGSEGV, Segmentation fault.
_pygi_marshal_from_py_interface_instance (state=<optimized out>, 
    callable_cache=<optimized out>, arg_cache=0xb2af00, py_arg=0x7115a0, 
    arg=0xb86890) at pygi-marshal-from-py.c:1579
1579	pygi-marshal-from-py.c: No such file or directory.
Missing separate debuginfos, use: debuginfo-install python-2.7.5-9.fc20.x86_64
(gdb) where
#0  _pygi_marshal_from_py_interface_instance (state=<optimized out>, 
    callable_cache=<optimized out>, arg_cache=0xb2af00, py_arg=0x7115a0, 
    arg=0xb86890) at pygi-marshal-from-py.c:1579
#1  0x00007ffff0d4068e in _invoke_marshal_in_args (cache=0xb3b760, 
    state=0x7fffffffcfc0) at pygi-invoke.c:505
#2  pygi_callable_info_invoke (info=<optimized out>, py_args=<optimized out>, 
    kwargs=<optimized out>, cache=<optimized out>, 
    function_ptr=<optimized out>, user_data=<optimized out>)
    at pygi-invoke.c:649
#3  0x0000003ecae4a0f3 in PyObject_Call (func=func@entry=0xa66ae8, 
    arg=arg@entry=0x90ad70, kw=kw@entry=0x0)
    at /usr/src/debug/Python-2.7.5/Objects/abstract.c:2529
#4  0x0000003ecaede43c in do_call (nk=<optimized out>, na=5, 
    pp_stack=0x7fffffffd1b0, func=0xa66ae8)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:4316
#5  call_function (oparg=<optimized out>, pp_stack=0x7fffffffd1b0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:4121
#6  PyEval_EvalFrameEx (f=f@entry=0x6ca3a0, throwflag=throwflag@entry=0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:2740
#7  0x0000003ecaee229d in PyEval_EvalCodeEx (co=<optimized out>, 
    globals=<optimized out>, locals=locals@entry=0x0, args=<optimized out>, 
    argcount=argcount@entry=4, kws=0xa4c540, kwcount=0, defs=0x8ac888, 
    defcount=3, closure=closure@entry=0x0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:3330
#8  0x0000003ecaee094f in fast_function (nk=<optimized out>, na=4, n=4, 
    pp_stack=0x7fffffffd3b0, func=0xa63410)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:4194
#9  call_function (oparg=<optimized out>, pp_stack=0x7fffffffd3b0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:4119
#10 PyEval_EvalFrameEx (f=f@entry=0xa4c380, throwflag=throwflag@entry=0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:2740
#11 0x0000003ecaee229d in PyEval_EvalCodeEx (co=<optimized out>, 
    globals=<optimized out>, locals=locals@entry=0x0, 
    args=args@entry=0x70f268, argcount=1, kws=kws@entry=0x0, 
    kwcount=kwcount@entry=0, defs=defs@entry=0x0, defcount=defcount@entry=0, 
    closure=0x0) at /usr/src/debug/Python-2.7.5/Python/ceval.c:3330
#12 0x0000003ecae6f178 in function_call (func=0x8f29b0, arg=0x70f250, kw=0x0)
    at /usr/src/debug/Python-2.7.5/Objects/funcobject.c:526
#13 0x0000003ecae4a0f3 in PyObject_Call (func=func@entry=0x8f29b0, 
    arg=arg@entry=0x70f250, kw=kw@entry=0x0)
    at /usr/src/debug/Python-2.7.5/Objects/abstract.c:2529
#14 0x0000003ecae59105 in instancemethod_call (func=0x8f29b0, arg=0x70f250, 
    kw=0x0) at /usr/src/debug/Python-2.7.5/Objects/classobject.c:2602
#15 0x0000003ecae4a0f3 in PyObject_Call (func=func@entry=0x7ffff7f1a1e0, 
    arg=arg@entry=0x7ffff7f96050, kw=<optimized out>)
    at /usr/src/debug/Python-2.7.5/Objects/abstract.c:2529
#16 0x0000003ecaedc0e7 in PyEval_CallObjectWithKeywords (
    func=func@entry=0x7ffff7f1a1e0, arg=arg@entry=0x7ffff7f96050, 
    kw=kw@entry=0x0) at /usr/src/debug/Python-2.7.5/Python/ceval.c:3967
#17 0x0000003ecae59ddc in PyInstance_New (klass=<optimized out>, 
    arg=0x7ffff7f96050, kw=0x0)
    at /usr/src/debug/Python-2.7.5/Objects/classobject.c:581
#18 0x0000003ecae4a0f3 in PyObject_Call (func=func@entry=0x8adb48, 
    arg=arg@entry=0x7ffff7f96050, kw=kw@entry=0x0)
    at /usr/src/debug/Python-2.7.5/Objects/abstract.c:2529
#19 0x0000003ecaede43c in do_call (nk=<optimized out>, na=0, 
    pp_stack=0x7fffffffd990, func=0x8adb48)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:4316
#20 call_function (oparg=<optimized out>, pp_stack=0x7fffffffd990)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:4121
#21 PyEval_EvalFrameEx (f=f@entry=0x6cfb70, throwflag=throwflag@entry=0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:2740
#22 0x0000003ecaee229d in PyEval_EvalCodeEx (co=co@entry=0x7ffff7ec0bb0, 
    globals=globals@entry=0x63f570, locals=locals@entry=0x63f570, 
    args=args@entry=0x0, argcount=argcount@entry=0, kws=kws@entry=0x0, 
    kwcount=kwcount@entry=0, defs=defs@entry=0x0, defcount=defcount@entry=0, 
    closure=closure@entry=0x0)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:3330
#23 0x0000003ecaee23a2 in PyEval_EvalCode (co=co@entry=0x7ffff7ec0bb0, 
    globals=globals@entry=0x63f570, locals=locals@entry=0x63f570)
    at /usr/src/debug/Python-2.7.5/Python/ceval.c:689
#24 0x0000003ecaefb7ef in run_mod (mod=<optimized out>, 
    filename=filename@entry=0x7fffffffe133 "bin/skype-notify.py", 
    globals=globals@entry=0x63f570, locals=locals@entry=0x63f570, 
    flags=flags@entry=0x7fffffffdbf0, arena=arena@entry=0x627820)
    at /usr/src/debug/Python-2.7.5/Python/pythonrun.c:1373
#25 0x0000003ecaefc9ae in PyRun_FileExFlags (fp=fp@entry=0x643990, 
    filename=filename@entry=0x7fffffffe133 "bin/skype-notify.py", 
    start=start@entry=257, globals=globals@entry=0x63f570, 
    locals=locals@entry=0x63f570, closeit=closeit@entry=1, 
    flags=flags@entry=0x7fffffffdbf0)
    at /usr/src/debug/Python-2.7.5/Python/pythonrun.c:1359
#26 0x0000003ecaefdc39 in PyRun_SimpleFileExFlags (fp=fp@entry=0x643990, 
    filename=filename@entry=0x7fffffffe133 "bin/skype-notify.py", 
    closeit=closeit@entry=1, flags=flags@entry=0x7fffffffdbf0)
    at /usr/src/debug/Python-2.7.5/Python/pythonrun.c:951
#27 0x0000003ecaefe163 in PyRun_AnyFileExFlags (fp=fp@entry=0x643990, 
    filename=filename@entry=0x7fffffffe133 "bin/skype-notify.py", 
    closeit=closeit@entry=1, flags=flags@entry=0x7fffffffdbf0)
    at /usr/src/debug/Python-2.7.5/Python/pythonrun.c:755
#28 0x0000003ecaf0ec4f in Py_Main (argc=<optimized out>, argv=<optimized out>)
    at /usr/src/debug/Python-2.7.5/Modules/main.c:640
#29 0x0000003eb9821d65 in __libc_start_main (main=0x4006f0 <main>, argc=4, 
    argv=0x7fffffffddb8, init=<optimized out>, fini=<optimized out>, 
    rtld_fini=<optimized out>, stack_end=0x7fffffffdda8) at libc-start.c:285
#30 0x0000000000400721 in _start ()

Comment 1 Brian J. Murrell 2013-12-13 11:17:37 UTC
These correlate to this message:

[112420.356714] python[20264]: segfault at 9 ip 00007f7d50b67cd5 sp 00007fff335cca30 error 4 in _gi.so[7f7d50b4f000+23000]

The python program that's triggering these is trying to use Notify from gi.repository.

Comment 2 Brian J. Murrell 2013-12-13 12:15:03 UTC
This is probably happening due to a call to Notify.add_action() with invalid arguments as such:

    a = Notify.Notification.add_action("DoAction2", "do something", do_something, None, None)

I think the first argument is supposed to be a Notify object and the segfault does go away if I make it one.

But is a segfault really the best we can do here when this happens?  I don't know.  I don't know much about how all of this introspection works under the hood.  Maybe it is.

Comment 3 Simon Feltman 2014-04-17 03:09:20 UTC
This has been fixed upstream in pygobject 3.12.1 and master:
https://bugzilla.gnome.org/show_bug.cgi?id=727604

Comment 4 Fedora End Of Life 2015-05-29 09:58:13 UTC
This message is a reminder that Fedora 20 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 20. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as EOL if it remains open with a Fedora  'version'
of '20'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 20 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 5 Fedora End Of Life 2015-06-29 13:28:52 UTC
Fedora 20 changed to end-of-life (EOL) status on 2015-06-23. Fedora 20 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.