Bug 4324

Summary:	Tearing off a Tab crashes Epiphany
Product:	Mageia	Reporter:	Herbert Poetzl <herbert>
Component:	RPM Packages	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED WORKSFORME	QA Contact:
Severity:	major
Priority:	Normal	CC:	cjw, dmorganec, fundawang, herbert, jani.valimaa, lists.jjorge, olav
Version:	Cauldron
Target Milestone:	---
Hardware:	x86_64
OS:	Linux
See Also:	https://bugzilla.gnome.org/show_bug.cgi?id=655036
Whiteboard:
Source RPM:	gtk+3.0-3.3.14-1.mga2.src.rpm	CVE:
Status comment:

Description Herbert Poetzl 2012-01-28 21:25:22 CET

Description of problem:
tearing off a (new/empty) tab crashes epiphany with a segfault.

Version-Release number of selected component (if applicable):
epiphany-3.3.4.1-1.mga2.x86_64

How reproducible:
always

Steps to Reproduce:
1. start clean/fresh epiphany
2. create new/empty tab
3. tear it off (i.e. move it onto the desktop)


Gtk-CRITICAL **: gtk_widget_unmap: assertion `GTK_IS_WIDGET (widget)' failed

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4ab2839 in ?? () from /usr/lib64/libgtk-3.so.0
(gdb) where
#0  0x00007ffff4ab2839 in ?? () from /usr/lib64/libgtk-3.so.0
#1  0x00007ffff4abec26 in gtk_widget_hide () from /usr/lib64/libgtk-3.so.0
#2  0x00007ffff4ad7862 in ?? () from /usr/lib64/libgtk-3.so.0
#3  0x00007ffff4ad7d70 in ?? () from /usr/lib64/libgtk-3.so.0
#4  0x00007ffff4ada740 in ?? () from /usr/lib64/libgtk-3.so.0
#5  0x00007ffff4adae60 in ?? () from /usr/lib64/libgtk-3.so.0
#6  0x00007ffff497b463 in ?? () from /usr/lib64/libgtk-3.so.0
#7  0x00007ffff2be3384 in g_closure_invoke (closure=0x109a430, return_value=
    0x7fffffffd940, n_param_values=2, param_values=0x10bc0d0, 
    invocation_hint=<optimized out>) at gclosure.c:774
#8  0x00007ffff2bf3635 in signal_emit_unlocked_R (node=<optimized out>, detail=
    0, instance=<optimized out>, emission_return=0x7fffffffda80, 
    instance_and_params=0x10bc0d0) at gsignal.c:3302
#9  0x00007ffff2bfaeed in g_signal_emit_valist (instance=<optimized out>, 
    signal_id=<optimized out>, detail=<optimized out>, var_args=0x7fffffffdae8)
    at gsignal.c:3043
#10 0x00007ffff2bfb1d2 in g_signal_emit (instance=<optimized out>, 
    signal_id=<optimized out>, detail=<optimized out>) at gsignal.c:3090
#11 0x00007ffff4ab5069 in ?? () from /usr/lib64/libgtk-3.so.0
#12 0x00007ffff497ac3a in gtk_propagate_event () from /usr/lib64/libgtk-3.so.0
#13 0x00007ffff497b063 in gtk_main_do_event () from /usr/lib64/libgtk-3.so.0
#14 0x00007ffff45b9982 in ?? () from /usr/lib64/libgdk-3.so.0
#15 0x00007ffff27255ba in g_main_dispatch (context=0x70e900) at gmain.c:2513
---Type <return> to continue, or q <return> to quit---
#16 g_main_context_dispatch (context=0x70e900) at gmain.c:3050
#17 0x00007ffff2725980 in g_main_context_iterate (dispatch=1, 
    block=<optimized out>, context=0x70e900, self=<optimized out>)
    at gmain.c:3121
#18 g_main_context_iterate (context=0x70e900, block=<optimized out>, dispatch=
    1, self=<optimized out>) at gmain.c:3058
#19 0x00007ffff2725a44 in g_main_context_iteration (context=0x70e900, 
    may_block=1) at gmain.c:3182
#20 0x00007ffff30f1594 in g_application_run (application=0x897000 [EphyShell], 
    argc=<optimized out>, argv=0x7fffffffdf08) at gapplication.c:1496
#21 0x000000000042d567 in main (argc=1, argv=0x7fffffffdf08) at ephy-main.c:472

Comment 1 Herbert Poetzl 2012-02-28 19:59:16 CET

just verified, issue is still present in Mageia2 Beta1 (and in latest Cauldron)

CC: (none) => herbert

Comment 2 Manuel Hiebel 2012-03-01 13:39:08 CET

Any ideas guys ?

CC: (none) => cjw, dmorganec, fundawang, jani.valimaa, olav

Comment 3 Olav Vitters 2012-03-01 21:26:16 CET

gdb should suggest you to install some debug packages. At least for gtk+3.0. Could you please do so?

Comment 4 Herbert Poetzl 2012-03-01 22:39:31 CET

(In reply to comment #3)
> gdb should suggest you to install some debug packages. At least for gtk+3.0.

should, but doesn't ... here the complete log:

$ gdb epiphany
GNU gdb (GDB) 7.3.50.20110722-4.mga2 (Mageia release 2)
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-mageia-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/epiphany...(no debugging symbols found)...done.
(gdb) r
Starting program: /usr/bin/epiphany 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
[New Thread 0x7fffe68bd700 (LWP 23942)]
[New Thread 0x7fffe60bc700 (LWP 23943)]
[New Thread 0x7fffe54b3700 (LWP 23944)]
[New Thread 0x7fffe4b9e700 (LWP 23945)]
[New Thread 0x7fff9148d700 (LWP 23947)]

Gtk-CRITICAL **: gtk_widget_unmap: assertion `GTK_IS_WIDGET (widget)' failed

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4ad9a19 in ?? () from /usr/lib64/libgtk-3.so.0
(gdb) where
#0  0x00007ffff4ad9a19 in ?? () from /usr/lib64/libgtk-3.so.0
#1  0x00007ffff4ae5e06 in gtk_widget_hide () from /usr/lib64/libgtk-3.so.0
#2  0x00007ffff4afea62 in ?? () from /usr/lib64/libgtk-3.so.0
#3  0x00007ffff4afef70 in ?? () from /usr/lib64/libgtk-3.so.0
#4  0x00007ffff4b01940 in ?? () from /usr/lib64/libgtk-3.so.0
#5  0x00007ffff4b02060 in ?? () from /usr/lib64/libgtk-3.so.0
#6  0x00007ffff49a1e63 in ?? () from /usr/lib64/libgtk-3.so.0
#7  0x00007ffff2c02384 in g_closure_invoke () from /lib64/libgobject-2.0.so.0
#8  0x00007ffff2c12635 in ?? () from /lib64/libgobject-2.0.so.0
#9  0x00007ffff2c19eed in g_signal_emit_valist () from /lib64/libgobject-2.0.so.0
#10 0x00007ffff2c1a1d2 in g_signal_emit () from /lib64/libgobject-2.0.so.0
#11 0x00007ffff4adc249 in ?? () from /usr/lib64/libgtk-3.so.0
#12 0x00007ffff49a163a in gtk_propagate_event () from /usr/lib64/libgtk-3.so.0
#13 0x00007ffff49a1a5b in gtk_main_do_event () from /usr/lib64/libgtk-3.so.0
#14 0x00007ffff45dc772 in ?? () from /usr/lib64/libgdk-3.so.0
#15 0x00007ffff27438ea in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#16 0x00007ffff2743cb0 in ?? () from /lib64/libglib-2.0.so.0
#17 0x00007ffff2743d74 in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#18 0x00007ffff31104e4 in g_application_run () from /lib64/libgio-2.0.so.0
#19 0x000000000042ce20 in main ()

> Could you please do so?

after installing various debug packages:

$ gdb epiphany
GNU gdb (GDB) 7.3.50.20110722-4.mga2 (Mageia release 2)
Copyright (C) 2011 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-mageia-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/bin/epiphany...Reading symbols from /usr/lib/debug/usr/bin/epiphany.debug...done.
done.
(gdb) r
Starting program: /usr/bin/epiphany 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
[New Thread 0x7fffe68bd700 (LWP 24126)]
[New Thread 0x7fffe60bc700 (LWP 24127)]
[New Thread 0x7fffe54b3700 (LWP 24128)]
[New Thread 0x7fffe4b9e700 (LWP 24129)]
[New Thread 0x7fff9148d700 (LWP 24132)]

Gtk-CRITICAL **: gtk_widget_unmap: assertion `GTK_IS_WIDGET (widget)' failed

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4ad9a19 in gtk_widget_verify_invariants (widget=0xafc610) at gtkwidget.c:8340
8340	  if (widget->priv->verifying_invariants_count > 0)
(gdb) where
#0  0x00007ffff4ad9a19 in gtk_widget_verify_invariants (widget=0xafc610) at gtkwidget.c:8340
#1  0x00007ffff4ae5e06 in gtk_widget_hide (widget=0xba8a90) at gtkwidget.c:4017
#2  gtk_widget_hide (widget=0xba8a90) at gtkwidget.c:3990
#3  0x00007ffff4afea62 in gtk_drag_remove_icon (info=0xd88620) at gtkdnd.c:4002
#4  0x00007ffff4afef70 in gtk_drag_source_info_destroy (info=0xd88620) at gtkdnd.c:4031
#5  0x00007ffff4b01940 in gtk_drag_drop_finished (info=0xd88620, result=GTK_DRAG_RESULT_NO_TARGET, time=125830543)
    at gtkdnd.c:3710
#6  0x00007ffff4b02060 in gtk_drag_button_release_cb (widget=<optimized out>, event=0xd4d0c0, data=0xd88620)
    at gtkdnd.c:4472
#7  0x00007ffff49a1e63 in _gtk_marshal_BOOLEAN__BOXED (closure=0xe83880, return_value=0x7fffffffd960, 
    n_param_values=<optimized out>, param_values=0xe0ad30, invocation_hint=<optimized out>, 
    marshal_data=<optimized out>) at gtkmarshalers.c:85
#8  0x00007ffff2c02384 in g_closure_invoke () from /lib64/libgobject-2.0.so.0
#9  0x00007ffff2c12635 in ?? () from /lib64/libgobject-2.0.so.0
#10 0x00007ffff2c19eed in g_signal_emit_valist () from /lib64/libgobject-2.0.so.0
#11 0x00007ffff2c1a1d2 in g_signal_emit () from /lib64/libgobject-2.0.so.0
#12 0x00007ffff4adc249 in gtk_widget_event_internal (widget=0xba8910, event=0xd4d0c0) at gtkwidget.c:6154
#13 0x00007ffff49a163a in gtk_propagate_event (widget=0xba8910, event=0xd4d0c0) at gtkmain.c:2420
#14 0x00007ffff49a1a5b in gtk_main_do_event (event=0xd4d0c0) at gtkmain.c:1687
#15 0x00007ffff45dc772 in gdk_event_source_dispatch (source=<optimized out>, callback=<optimized out>, 
    user_data=<optimized out>) at gdkeventsource.c:360
#16 0x00007ffff27438ea in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#17 0x00007ffff2743cb0 in ?? () from /lib64/libglib-2.0.so.0
#18 0x00007ffff2743d74 in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#19 0x00007ffff31104e4 in g_application_run () from /lib64/libgio-2.0.so.0
#20 0x000000000042ce20 in main (argc=1, argv=0x7fffffffdf28) at ephy-main.c:478

Comment 5 Olav Vitters 2012-03-01 23:45:45 CET

Oh.. I didn't realize you weren't running Cauldron. In the latest Epiphany, the interface has been completely designed. No tabs anymore, so no crasher. I just tried myself with Epiphany 3.3.90 and I cannot reproduce (UI changed so much :P). Please reopen if you see the same with 3.3.90.

Status: NEW => RESOLVED
Resolution: (none) => OLD

Comment 6 Herbert Poetzl 2012-03-01 23:55:05 CET

you're a funny guy!

first, I _am_ running Cauldron
second, I _am_ using Epiphany 3.3.90
finally, 'No tabs anymore?' did you try to open one?
(if you are not familiar with epiphany, click on the gear symbol right beside the location bar to pull down the menu and select new tab, or just press CTRL-T)

Status: RESOLVED => REOPENED
Resolution: OLD => (none)

Comment 7 Olav Vitters 2012-03-02 00:00:47 CET

Yeah, just noticed.

Status: REOPENED => NEW
See Also: (none) => https://bugzilla.gnome.org/show_bug.cgi?id=655036

Olav Vitters 2012-03-02 00:02:11 CET

Source RPM: epiphany-3.3.4.1-1.mga2.src.rpm => gtk+3.0-3.3.14-1.mga2.src.rpm

Comment 8 José Jorge 2012-03-12 23:42:45 CET

I could reproduce this crash "tearing of" the tab to the desktop with a just installed DVD64-Gnome install.

CC: (none) => lists.jjorge

Comment 9 Herbert Poetzl 2012-03-27 02:24:19 CEST

this seems to be resolved with:
- gtk+3.0-3.4.0-1.mga2
- epiphany-3.3.92-1.mga2

at least I couldn't reproduce the crash anymore.
(will reopen when the issue returns :)

Status: NEW => RESOLVED
Resolution: (none) => WORKSFORME