abrt version: 1.1.14 architecture: x86_64 Attached file: backtrace cmdline: gimp-2.6 component: gimp crash_function: strlen executable: /usr/bin/gimp-2.6 kernel: 2.6.35.6-48.fc14.x86_64 package: gimp-2:2.6.11-1.fc14 rating: 4 reason: Process /usr/bin/gimp-2.6 was killed by signal 11 (SIGSEGV) release: Fedora release 14 (Laughlin) time: 1290384394 uid: 500 How to reproduce ----- 1. Open a PNG image 2. Save as jpeg 3. Crash
Created attachment 461893 [details] File: backtrace
Which version of gtk2 do you have installed?
(In reply to comment #2) > Which version of gtk2 do you have installed? 2.22.0
Oh, I meant the whole package version... I'll simply assume gtk2-2.22.0-1.fc14.1, shout if that is wrong ;-).
This seems like a bug in gtk2, specifically the gtk file chooser completion code to me: --- 8< --- gtkfilechooser.c / completion_match_func() --- norm_file_part = g_utf8_normalize (chooser_entry->file_part, -1, G_NORMALIZE_ALL); norm_name = g_utf8_normalize (name, -1, G_NORMALIZE_ALL); [...] result = (strncmp (norm_file_part, norm_name, strlen (norm_file_part)) == 0); --- >8 -------------------------------------------------- The crash happens in this last line, when calling strlen(norm_file_part). Both norm_file_part and norm_name are NULL at that time, which indicates that the strings fed to g_utf8_normalize() above weren't valid UTF-8. So both norm_file_part and norm_name should be checked to be != NULL before being fed to "normal" glibc string functions that can't cope with NULL args like strlen() and strncmp(). I'll change the component accordingly.
*** Bug 669361 has been marked as a duplicate of this bug. ***
*** Bug 677632 has been marked as a duplicate of this bug. ***
Fedora 14 has reached its end of life. The same issue on Fedora 15 is tracked in bug #716325. *** This bug has been marked as a duplicate of bug 716325 ***