Bug#884648: mate-panel occasionally crashes with segfault - upstream report

[correctmost]

There's an upstream bug report for the gtk_drag_finish crash:
https://github.com/mate-desktop/mate-panel/issues/1356

Bug#884648: mate-panel occasionally crashes with segfault

[william armstrong]

Package: mate-panel
Version: 1.27.0-1
Followup-For: Bug #884648

Dear Maintainer,

Mate-Panel Randomly crashes while changing mate themes and some time it 
crashes
and does not reappear at all until leaving the desktop environment 
unusable and

sometimes alt-F2 key shortcut also does not work after mate-panel crashes


-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (1000, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-5-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE 
not set

Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mate-panel depends on:
ii dconf-gsettings-backend [gsettings-backend] 0.40.0-4
ii libatk1.0-0 2.46.0-5
ii libc6 2.36-8
ii libcairo2 1.16.0-7
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-1+b1
ii libglib2.0-0 2.74.5-1
ii libgtk-3-0 3.24.36-4
ii libgtk-layer-shell0 0.8.0-1
ii libice6 2:1.0.10-1
ii libmate-desktop-2-17 1.26.0-1
ii libmate-menu2 1.26.0-3
ii libmate-panel-applet-4-1 1.27.0-1
ii libmateweather1 1.26.0-1.1
ii libpango-1.0-0 1.50.12+ds-1
ii librda0 0.0.5-1.1
ii libsm6 2:1.2.3-1
ii libwayland-client0 1.21.0-1
ii libwnck-3-0 43.0-3
ii libx11-6 2:1.8.3-3
ii libxrandr2 2:1.5.2-2+b1
ii mate-desktop 1.26.0-1
ii mate-menus 1.26.0-3
ii mate-panel-common 1.27.0-1
ii mate-polkit 1.26.1-1

mate-panel recommends no packages.

mate-panel suggests no packages.

-- no debconf information

Bug#884648: mate-panel occasionally crashes with segfault

[yg2709]

Package: mate-panel
Version: 1.26.1-2
Followup-For: Bug #884648
X-Debbugs-Cc: yg2...@hotmail.com

Dear Maintainer,

>From debian testing, after upgrading from 1.24.1-1+b1 to 1.26.1-2, I randomly 
>get the message in the /var/log/messages file saying that wnck-applet segfault 
>error in libgdk-3.so.0.2404.27:

$  sudo grep -e '^2022-01-12' /var/log/messages | grep -e 'wnck-applet' -e 
'Code:'

2022-01-12T12:35:13.273151+01:00 wnck-applet[1561]: Negative content width -1 
(allocation 1, extents 1x1) while allocating gadget (node button, owner 
WnckButton)
2022-01-12T12:35:13.273796+01:00 wnck-applet[1561]: Negative content width -1 
(allocation 1, extents 1x1) while allocating gadget (node button, owner 
WnckButton)

2022-01-12T12:52:21.081341+01:00 wnck-applet[1561]: XID collision, trouble ahead
2022-01-12T12:52:58.563991+01:00 wnck-applet[1561]: XID collision, trouble ahead
2022-01-12T12:55:38.871346+01:00 wnck-applet[1561]: XID collision, trouble ahead

2022-01-12T12:59:35.492112+01:00 kernel: [ 1599.687299] wnck-applet[1561]: 
segfault at 44 ip 7ff4e0586510 sp 7ffe7f09c2f0 error 4 in 
libgdk-3.so.0.2404.27[7ff4e0552000+7f000]
2022-01-12T12:59:35.492129+01:00 kernel: [ 1599.687313] Code: 8b bc 24 b8 00 00 
00 e8 9e cc fc ff 48 83 7c 24 48 00 74 28 4d 85 e4 0f 84 81 00 00 00 f2 0f 10 
84 24 a0 00 00 00 66 0f ef c9  0f 2a 4b 44 f2 0f 5e c1 48 8b 44 24 48 f2 0f 
11 00 48 83 7c 24

(20220112 125950 window message and "[Reload]" selected, three times)

2022-01-12T12:59:56.627920+01:00 wnck-applet[2695]: gtk_widget_queue_draw_area: 
assertion 'width >= 0' failed
2022-01-12T12:59:56.628034+01:00 wnck-applet[2695]: gtk_widget_queue_draw_area: 
assertion 'width >= 0' failed
2022-01-12T12:59:56.628105+01:00 wnck-applet[2695]: gtk_widget_queue_draw_area: 
assertion 'width >= 0' failed


$ sudo apt-file search wnck-applet
mate-panel: /usr/lib/mate-panel/wnck-applet


Thank you very much.


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.15.0-2-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mate-panel depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.40.0-2
ii  libatk1.0-0  2.36.0-3
ii  libc62.33-1
ii  libcairo21.16.0-5
ii  libgdk-pixbuf-2.0-0  2.42.6+dfsg-2
ii  libglib2.0-0 2.70.2-1
ii  libgtk-3-0   3.24.31-1
ii  libgtk-layer-shell0  0.6.0-1
ii  libice6  2:1.0.10-1
ii  libmate-desktop-2-17 1.26.0-1
ii  libmate-menu21.26.0-1
ii  libmate-panel-applet-4-1 1.26.1-2
ii  libmateweather1  1.26.0-1
ii  libpango-1.0-0   1.48.10+ds1-1
ii  librda0  0.0.5-1.1
ii  libsm6   2:1.2.3-1
ii  libwayland-client0   1.19.0-2+b1
ii  libwnck-3-0  40.0-2
ii  libx11-6 2:1.7.2-2+b1
ii  libxrandr2   2:1.5.2-1
ii  mate-desktop 1.26.0-1
ii  mate-menus   1.26.0-1
ii  mate-panel-common1.26.1-2
ii  mate-polkit  1.26.0-1

mate-panel recommends no packages.

mate-panel suggests no packages.

-- debconf-show failed

Bug#884648: mate-panel occasionally crashes with segfault

[agafnd]

> Hi,
> 
> Can you also install the debug packages [1] and use "bt full" command in gdb?
> The debug packages are needed for libgtk-3, libglib-2.0, mate-panel.
> 
> This will show function names, line numbers, variable values and other useful 
> info
> to determine where and why the crash happens.
> 
> 
> [1] 
> https://wiki.debian.org/HowToGetABacktrace#Installing_the_debugging_symbols

Hi - sorry this took so long. By the time I read your message, the coredump had 
been erased,
and then it took awhile for the crash to happen again.

Anyway, here's the output of gdb with the bt full command and the debugging 
symbols.GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/bin/mate-panel...Reading symbols from /usr/lib/debug/.build-id/10/81cf9bc600bd8fc95af0636551819b35d5f042.debug...done.
done.
[New LWP 1470]
[New LWP 1473]
[New LWP 1474]
[New LWP 1472]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `mate-panel'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x7f7308a6b823 in gtk_drag_finish (context=0x1, success=0, del=0, time=1766293659) at ././gtk/gtkdnd.c:953
953	././gtk/gtkdnd.c: No such file or directory.
[Current thread is 1 (Thread 0x7f730a1d9f00 (LWP 1470))]
(gdb) btfu full
#0  0x7f7308a6b823 in gtk_drag_finish (context=0x1, success=0, del=0, time=1766293659) at ././gtk/gtkdnd.c:953
__inst = 0x1
__t = 94747951847232
__r = 
target = 0x0
__func__ = "gtk_drag_finish"
#1  0x7f7308a6bc5b in gtk_drag_drop_finished (info=0x562c3cffbe90, result=result@entry=GTK_DRAG_RESULT_TIMEOUT_EXPIRED, time=) at ././gtk/gtkdnd.c:2558
success = 0
#2  0x7f7308a6be87 in gtk_drag_abort_timeout (data=) at ././gtk/gtkdnd.c:3229
info = 
time = 
#3  0x7f73083f76e8 in gdk_threads_dispatch (data=0x562c3a7356e0, data@entry=) at ././gdk/gdk.c:743
dispatch = 0x562c3a7356e0
ret = 0
#4  0x7f73066d5123 in g_timeout_dispatch (source=0x562c3a367700, callback=, user_data=) at ././glib/gmain.c:4674
timeout_source = 0x562c3a367700
again = 
#5  0x7f73066d46aa in g_main_dispatch (context=0x562c39f94990) at ././glib/gmain.c:3203
dispatch = 0x7f73066d5110 
prev_source = 0x0
was_in_call = 0
user_data = 0x562c3a7356e0
callback = 0x7f73083f76c0 
cb_funcs = 
cb_data = 0x562c3c960900
need_destroy = 
source = 0x562c3a367700
current = 0x562c39fa3740
i = 0
#6  0x7f73066d46aa in g_main_context_dispatch (context=context@entry=0x562c39f94990) at ././glib/gmain.c:3856
#7  0x7f73066d4a60 in g_main_context_iterate (context=0x562c39f94990, block=block@entry=1, dispatch=dispatch@entry=1, self=) at ././glib/gmain.c:3929
max_priority = 2147483647
timeout = 25
some_ready = 1
nfds = 5
allocated_nfds = 5
fds = 
#8  0x7f73066d4d82 in g_main_loop_run (loop=0x562c3a285090) at ././glib/gmain.c:4125
__func__ = "g_main_loop_run"
#9  0x7f73088f0d55 in gtk_main () at ././gtk/gtkmain.c:1312
loop = 0x562c3a285090
#10 0x562c38bfa8a6 in main (argc=, argv=) at main.c:170
desktopfile = 
context = 
error = 0x0
(gdb) q
   PID: 1470 (mate-panel)
   UID: 1000 (agafnd)
   GID: 1000 (agafnd)
Signal: 11 (SEGV)
 Timestamp: Tue 2018-05-01 21:28:33 EDT (22min ago)
  Command Line: mate-panel
Executable: /usr/bin/mate-panel
 Control Group: /user.slice/user-1000.slice/session-2.scope
  Unit: session-2.scope
 Slice: user-1000.slice
   Session: 2
 Owner UID: 1000 (agafnd)
   Boot ID: 6d5197f955aa49c4ab721f4954f9a3a1
Machine ID: edb4e92bf1344c59b79e8a65e829b34f
  Hostname: agafnddebian
   Storage: /var/lib/systemd/coredump/core.mate-panel.1000.6d5197f955aa49c4ab721f4954f9a3a1.1470.1525224513.lz4
   Message: Process 1470 (mate-panel) of user 1000 dumped core.

Stack trace of thread 1470:
#0  0x7f7308a6b823 gtk_drag_finish (libgtk-3.so.0)
#1  0x7f7308a6bc5b n/a (libgtk-3.so.0)
#2  

Bug#884648: mate-panel occasionally crashes with segfault

[Vlad Orlov]

Hi,

Can you also install the debug packages [1] and use "bt full" command in gdb?
The debug packages are needed for libgtk-3, libglib-2.0, mate-panel.

This will show function names, line numbers, variable values and other useful 
info
to determine where and why the crash happens.


[1] https://wiki.debian.org/HowToGetABacktrace#Installing_the_debugging_symbols

Bug#884648: mate-panel occasionally crashes with segfault

[agafnd]

Something that might be interesting to note: I've had the "compositing
window manager" option turned on, and had the panels at around 28%
transparency. I've since turned both things off (due to my experiments
related to https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884116).

Since I don't know how the crash is triggered, I don't know whether this
helps or not. I haven't had it happen yet, but I've previously gone quite
a while without a crash.

Regards, Agafnd

Bug#884648: mate-panel occasionally crashes with segfault

[agafnd]

Attached is gdb's output.   PID: 1425 (mate-panel)  
   UID: 1000 (agafnd) 
   GID: 1000 (agafnd)
Signal: 11 (SEGV)
 Timestamp: Wed 2018-01-03 20:29:25 EST (37min ago)
  Command Line: mate-panel
Executable: /usr/bin/mate-panel
 Control Group: /user.slice/user-1000.slice/session-2.scope
  Unit: session-2.scope
 Slice: user-1000.slice
   Session: 2
 Owner UID: 1000 (agafnd)
   Boot ID: 7f5d3800c55b45cfabdf5d5e8c428fd8
Machine ID: edb4e92bf1344c59b79e8a65e829b34f
  Hostname: agafndbox
   Storage: 
/var/lib/systemd/coredump/core.mate-panel.1000.7f5d3800c55b45cfabdf5d5e8c428fd8.1425.1515029365.lz4
   Message: Process 1425 (mate-panel) of user 1000 dumped core.

Stack trace of thread 1425:
#0  0x7f0883f37823 gtk_drag_finish (libgtk-3.so.0)
#1  0x7f0883f37c5b n/a (libgtk-3.so.0)
#2  0x7f0883f37e87 n/a (libgtk-3.so.0)
#3  0x7f08838c36e8 n/a (libgdk-3.so.0)
#4  0x7f0881ba1123 n/a (libglib-2.0.so.0)
#5  0x7f0881ba06aa g_main_context_dispatch 
(libglib-2.0.so.0)
#6  0x7f0881ba0a60 n/a (libglib-2.0.so.0)
#7  0x7f0881ba0d82 g_main_loop_run (libglib-2.0.so.0)
#8  0x7f0883dbcd55 gtk_main (libgtk-3.so.0)
#9  0x558069e198a6 main (mate-panel)
#10 0x7f0880b672b1 __libc_start_main (libc.so.6)
#11 0x558069e19a1a _start (mate-panel)

Stack trace of thread 1431:
#0  0x7f0880c266ad poll (libc.so.6)
#1  0x7f0881ba09f6 n/a (libglib-2.0.so.0)
#2  0x7f0881ba0d82 g_main_loop_run (libglib-2.0.so.0)
#3  0x7f0882188656 n/a (libgio-2.0.so.0)
#4  0x7f0881bc83d5 n/a (libglib-2.0.so.0)
#5  0x7f0880eed494 start_thread (libpthread.so.0)
#6  0x7f0880c2faff __clone (libc.so.6)

Stack trace of thread 1430:
#0  0x7f0880c266ad poll (libc.so.6)
#1  0x7f0881ba09f6 n/a (libglib-2.0.so.0)
#2  0x7f0881ba0b0c g_main_context_iteration 
(libglib-2.0.so.0)
#3  0x7f0881ba0b51 n/a (libglib-2.0.so.0)
#4  0x7f0881bc83d5 n/a (libglib-2.0.so.0)
#5  0x7f0880eed494 start_thread (libpthread.so.0)
#6  0x7f0880c2faff __clone (libc.so.6)

Stack trace of thread 1432:
#0  0x7f0880c266ad poll (libc.so.6)
#1  0x7f0881ba09f6 n/a (libglib-2.0.so.0)
#2  0x7f0881ba0b0c g_main_context_iteration 
(libglib-2.0.so.0)
#3  0x7f0873dfa46d n/a (libdconfsettings.so)
#4  0x7f0881bc83d5 n/a (libglib-2.0.so.0)
#5  0x7f0880eed494 start_thread (libpthread.so.0)
#6  0x7f0880c2faff __clone (libc.so.6)

GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
.
Find the GDB manual and other documentation resources online at:
.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/bin/mate-panel...(no debugging symbols found)...done.
[New LWP 1425]
[New LWP 1431]
[New LWP 1430]
[New LWP 1432]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `mate-panel'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x7f0883f37823 in gtk_drag_finish () from 
/usr/lib/x86_64-linux-gnu/libgtk-3.so.0
[Current thread is 1 (Thread 0x7f08856a5f00 (LWP 1425))]

Bug#884648: mate-panel occasionally crashes with segfault

[Vlad Orlov]

Hi,


If I understand correctly, you want me to run `systemd-coredump --backtrace`
(or some similar command) the next time mate-panel crashes?
Apologies if I am quite wrong.


Yes, or use the coredumpctl tool. It can be used to run gdb, and then you can
print the backtrace from gdb's prompt.

Bug#884648: mate-panel occasionally crashes with segfault

[agafnd]

> A backtrace for this crash is needed to find out the cause of the crash.
> It can be obtained, for example, if systemd-coredump is installed.

Hi,

If I understand correctly, you want me to run `systemd-coredump --backtrace`
(or some similar command) the next time mate-panel crashes?
Apologies if I am quite wrong.

Bug#884648: mate-panel occasionally crashes with segfault

[Vlad Orlov]

Hi,

A backtrace for this crash is needed to find out the cause of the crash.
It can be obtained, for example, if systemd-coredump is installed.

https://www.freedesktop.org/software/systemd/man/systemd-coredump.html
https://wiki.archlinux.org/index.php/Core_dump

Bug#884648: mate-panel occasionally crashes with segfault

[Mike Gabriel]

Control: severity -1 important

On  Mo 18 Dez 2017 03:25:01 CET, Agafnd wrote:


Package: mate-panel
Version: 1.16.2-1
Severity: normal

Dear Maintainer,

Occasionally, mate-panel has crashed on my system. It's not a big  
problem -- the panels disappear, then reappear shortly afterward  
(kudos to whoever added the error recovery).


Here are some examples of dmesg logs after this happens:

[37113.279802] mate-panel[1356]: segfault at 1 ip 7f8633c82823  
sp 7fff329a0ce0 error 4 in  
libgtk-3.so.0.2200.11[7f86338da000+70]
[97924.229072] mate-panel[17556]: segfault at 1 ip 7f2bdf6f5823  
sp 7ffd7ee73ba0 error 4in  
libgtk-3.so.0.2200.11[7f2bdf34d000+70]


Thanks for reporting this. Raising severity to important. Will  
investigate with upstream if the issue might already have been fixed  
in MATE 1.18.


Mike
--

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de



pgpPQ86XZR0rJ.pgp
Description: Digitale PGP-Signatur

Bug#884648: mate-panel occasionally crashes with segfault

[Agafnd]

Package: mate-panel
Version: 1.16.2-1
Severity: normal

Dear Maintainer,

Occasionally, mate-panel has crashed on my system. It's not a big problem -- 
the panels disappear, then reappear shortly afterward (kudos to whoever added 
the error recovery).

Here are some examples of dmesg logs after this happens:

[37113.279802] mate-panel[1356]: segfault at 1 ip 7f8633c82823 sp 
7fff329a0ce0 error 4 in libgtk-3.so.0.2200.11[7f86338da000+70]
[97924.229072] mate-panel[17556]: segfault at 1 ip 7f2bdf6f5823 sp 
7ffd7ee73ba0 error 4in libgtk-3.so.0.2200.11[7f2bdf34d000+70]

-- System Information:
Debian Release: 9.3
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mate-panel depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.26.0-2+b1
ii  libatk1.0-0  2.22.0-1
ii  libc62.24-11+deb9u1
ii  libcairo-gobject21.14.8-1
ii  libcairo21.14.8-1
ii  libcanberra-gtk3-0   0.30-3
ii  libcanberra0 0.30-3
ii  libdbus-1-3  1.10.24-0+deb9u1
ii  libdbus-glib-1-2 0.108-2
ii  libdconf10.26.0-2+b1
ii  libgdk-pixbuf2.0-0   2.36.5-2+deb9u1
ii  libglib2.0-0 2.50.3-2
ii  libgtk-3-0   3.22.11-1
ii  libice6  2:1.0.9-2
ii  libmate-desktop-2-17 1.16.2-2
ii  libmate-menu21.16.0-2
ii  libmate-panel-applet-4-1 1.16.2-1
ii  libmateweather1  1.16.1-2
ii  libpango-1.0-0   1.40.5-1
ii  libpangocairo-1.0-0  1.40.5-1
ii  librsvg2-2   2.40.16-1+b1
ii  libsm6   2:1.2.2-1+b3
ii  libstartup-notification0 0.12-4+b2
ii  libwnck-3-0  3.20.1-3
ii  libx11-6 2:1.6.4-3
ii  libxau6  1:1.0.8-1
ii  libxrandr2   2:1.5.1-1
ii  mate-desktop 1.16.2-2
ii  mate-menus   1.16.0-2
ii  mate-panel-common1.16.2-1
ii  mate-polkit  1.16.0-2
ii  menu-xdg 0.5

mate-panel recommends no packages.

mate-panel suggests no packages.

-- no debconf information