I searched a bit and found several duplicates of this bug (now merged).
The ways of reproducing are many, but are always related to working with
tabs. Detaching a tab, dragging and dropping a tab between two windows,
etc. In my case, one time it happened when closing a window with no
tabs while keeping two other windows with tabs.
The GNOME upstream bug says it's related to accessibility, which I guess
it's due to the "accessible-value" property that we see in the
backtrace.
The line that is segfaulting is 1154 from this function:
1148: void
1149: g_object_notify (GObject *object,
1150: const gchar *property_name)
1151: {
1152: GParamSpec *pspec;
1153:
1154: g_return_if_fail (G_IS_OBJECT (object));
1155: g_return_if_fail (property_name != NULL);
The macros expand to:
#define G_IS_OBJECT(object) (G_TYPE_CHECK_INSTANCE_TYPE ((object),
G_TYPE_OBJECT))
#define G_TYPE_CHECK_INSTANCE_TYPE(instance, g_type) (_G_TYPE_CIT
((instance), (g_type)))
# define _G_TYPE_CIT(ip, gt) (G_GNUC_EXTENSION ({ \
GTypeInstance *__inst = (GTypeInstance*) ip; GType __t = gt; gboolean __r; \
if (!__inst) \
__r = FALSE; \
else if (__inst->g_class && __inst->g_class->g_type == __t) \
__r = TRUE; \
else \
__r = g_type_check_instance_is_a (__inst, __t); \
__r; \
}))
In this last macro, the first thing that's checked is that the object
passed is not NULL. Thus, this is pointing to some piece of memory,
different than NULL, but on which it's not valid to access it's
->g_class member.
In my stack trace, the object is "optimized out", but in the one
provided in the Debian bug report, it says: object@entry=0x8469a38.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-terminal in Ubuntu.
https://bugs.launchpad.net/bugs/867565
Title:
gnome-terminal crashed with SIGSEGV in g_object_notify()
Status in GNOME Terminal:
New
Status in “gnome-terminal” package in Ubuntu:
Confirmed
Status in “gnome-terminal” package in Debian:
Confirmed
Bug description:
I had four tabs open in Terminal. Go to the Tabs menu and choose
Detach Tab. Start working in the newly detached tab and Terminal will
crash.
ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: gnome-terminal 3.0.1-0ubuntu3
ProcVersionSignature: Ubuntu 3.0.0-12.19-generic 3.0.4
Uname: Linux 3.0.0-12-generic i686
NonfreeKernelModules: nvidia
ApportVersion: 1.23-0ubuntu2
Architecture: i386
Date: Tue Oct 4 10:10:16 2011
ExecutablePath: /usr/bin/gnome-terminal
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Beta i386 (20110920.5)
ProcCmdline: gnome-terminal
ProcEnviron:
LANG=en_US.UTF-8
SHELL=/bin/bash
SegvAnalysis:
Segfault happened at: 0x2e0aca <g_object_notify+42>: cmpl $0x50,(%eax)
PC (0x002e0aca) ok
source "$0x50" ok
destination "(%eax)" (0x00000020) not located in a known VMA region (needed
writable region)!
SegvReason: writing NULL VMA
Signal: 11
SourcePackage: gnome-terminal
StacktraceTop:
g_object_notify () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
?? () from /usr/lib/libgtk-3.so.0
g_object_ref () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
g_closure_invoke () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
?? () from /usr/lib/i386-linux-gnu/libgobject-2.0.so.0
Title: gnome-terminal crashed with SIGSEGV in g_object_notify()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare
To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-terminal/+bug/867565/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
