Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: vim (Ubuntu Xenial)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to vim in Ubuntu.
https://bugs.launchpad.net/bugs/1650666
Title:
GVim crashes when opening new tab
Status in vim package in Ubuntu:
Confirmed
Status in vim source package in Xenial:
Confirmed
Bug description:
[Impact]
A severe regression has been found in the GTK 3 variant of Gvim.
Upon start-up, it crashes immediately with multiple failed
assertions.
A second related, but less severe problem may occur when opening
new tabs within the GTK 3 variant of Gvim.
[Test Case]
Please note that in the following test cases, a given machine may
experience either of the test cases, while being unable to
experience the other test case. Please do /not/ discount
the merits of this SRU on being able to only confirm a single
test case, but not both.
This patch equally corrects both test cases listed below, to
produce a working GTK 3 Gvim variant.
IMPORTANT: Both test cases below require the package "vim-gtk3"
to be installed, prior to testing for either test case's
impact to one's machine.
[[TEST CASE #1]]
1. From a terminal window, launch the GTK 3 variant of Gvim:
$ vim.gtk3
2. Immediately upon launch (whereby the window may or may
not briefly display); the terminal window will show error
messages relating to `unity_gtk_menu_*` critical
assertions.
A full example of the experienced error output shown is:
```
(gvim:13519): GLib-CRITICAL **: g_ptr_array_insert: assertion 'index_ <=
(gint)rarray->len' failed
** (gvim:13519): CRITICAL **: unity_gtk_menu_shell_get_item: assertion '0 <=
index && index < items->len' failed
** (gvim:13519): CRITICAL **: unity_gtk_menu_item_get_child_shell: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed
** (gvim:13519): CRITICAL **: unity_gtk_menu_shell_get_item: assertion '0 <=
index && index < items->len' failed
** (gvim:13519): CRITICAL **: unity_gtk_menu_item_get_label: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed
** (gvim:13519): CRITICAL **: unity_gtk_menu_item_get_icon: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed
```
[[TEST CASE #2]]
1. From a terminal window, launch the GTK 3 variant of Gvim:
$ vim.gtk3
2. Upon the window opening, attempt to open a new tab by entering
the key sequences "<ESC>:tabnew" and pressing <ENTER>. The
program should now SEGV and abort.
[Regression Potential]
* The bug is possibly applicable to all later Ubuntu releases,
which combine Unity and GTK 3.
* The upstream Vim project has not incorporated the fix, and
most likely will not. The specifics behind the fix might
be construed as too specific to the combination of Ubuntu,
Unity, and GTK 3; and not general enough to patch for all
downstream distributions.
[Other Info]
* Further information about this bug is available at the URLs:
https://github.com/vim/vim/issues/851
https://bugs.launchpad.net/ubuntu/+source/vim/+bug/1650666
---
When I open new tab using :tabnew command, GVim crashes in
unity_gtk_menu_section_get_item_attributes function of libunity-
gtk3-parser0 package.
Steps to reproduce:
1. Run gvim from vim-gtk3 package
2. Type `:tabnew`
3. GVim exits, the window closes
Stack trace obtained via gdb:
mymedia@comp2:~$ gdb -silent --args gvim -f -u /dev/null -U /dev/null
--noplugin
Reading symbols from gvim...(no debugging symbols found)...done.
gdb$ run
Starting program: /usr/bin/gvim -f -u /dev/null -U /dev/null --noplugin
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffe986d700 (LWP 11042)]
[New Thread 0x7fffe906c700 (LWP 11043)]
[New Thread 0x7fffe886b700 (LWP 11044)]
(gvim:11038): GLib-CRITICAL **: g_ptr_array_insert: assertion 'index_
<= (gint)rarray->len' failed
** (gvim:11038): CRITICAL **: unity_gtk_menu_shell_get_item: assertion
'0 <= index && index < items->len' failed
** (gvim:11038): CRITICAL **: unity_gtk_menu_item_get_child_shell:
assertion 'UNITY_GTK_IS_MENU_ITEM (item)' failed
** (gvim:11038): CRITICAL **: unity_gtk_menu_shell_get_item: assertion
'0 <= index && index < items->len' failed
** (gvim:11038): CRITICAL **: unity_gtk_menu_item_get_label: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed
** (gvim:11038): CRITICAL **: unity_gtk_menu_item_get_icon: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed
Thread 1 "gvim" received signal SIGSEGV, Segmentation fault.
unity_gtk_menu_section_get_item_attributes (model=<optimized out>,
item_index=<optimized out>,
attributes=0x7fffffff8b90) at ../../../lib/unity-gtk-menu-section.c:130
130 ../../../lib/unity-gtk-menu-section.c: Нет такого файла или каталога.
gdb$ backtrace
#0 0x00007fffe9a82083 in unity_gtk_menu_section_get_item_attributes
(model=<optimized out>, item_index=<optimized out>, attributes=0x7fffffff8b90)
at ../../../lib/unity-gtk-menu-section.c:130
#1 0x00007ffff653f23c in g_menu_model_real_iterate_item_attributes
(model=0x555556016160 [UnityGtkMenuSection], item_index=<optimized out>) at
././gio/gmenumodel.c:299
#2 0x00007ffff6541070 in g_menu_exporter_menu_describe_item
(position=position@entry=1, menu=<optimized out>, menu=<optimized out>) at
././gio/gmenuexporter.c:212
#3 0x00007ffff65414be in g_menu_exporter_menu_items_changed
(model=<optimized out>, position=1, removed=0, added=<optimized out>,
user_data=0x555555ffd4c0) at ././gio/gmenuexporter.c:276
#4 0x00007fffee607e18 in ffi_call_unix64 () at
/usr/lib/x86_64-linux-gnu/libffi.so.6
#5 0x00007fffee60787a in ffi_call () at /usr/lib/x86_64-linux-gnu/libffi.so.6
#10 0x00007ffff626efaf in <emit signal ??? on instance 0x555556016160
[UnityGtkMenuSection]> (instance=<optimized out>, signal_id=<optimized out>,
detail=<optimized out>)
at ././gobject/gsignal.c:3447
#6 0x00007ffff62547ae in g_cclosure_marshal_generic
(closure=0x55555607fd10, return_gvalue=0x0, n_param_values=<optimized out>,
param_values=<optimized out>, invocation_hint=<optimized out>,
marshal_data=<optimized out>) at ././gobject/gclosure.c:1490
#7 0x00007ffff6253f75 in g_closure_invoke (closure=0x55555607fd10,
return_value=return_value@entry=0x0, n_param_values=4,
param_values=param_values@entry=0x7fffffff9250,
invocation_hint=invocation_hint@entry=0x7fffffff91d0) at
././gobject/gclosure.c:804
#8 0x00007ffff6265f82 in signal_emit_unlocked_R
(node=node@entry=0x555555f38af0, detail=detail@entry=0,
instance=instance@entry=0x555556016160,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7fffffff9250) at
././gobject/gsignal.c:3635
#9 0x00007ffff626ebcc in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7fffffff9440)
at ././gobject/gsignal.c:3391
#14 0x00007ffff626efaf in <emit signal ??? on instance 0x555555e7b9c0
[GtkMenu]> (instance=<optimized out>, signal_id=<optimized out>,
detail=<optimized out>) at ././gobject/gsignal.c:3447
#11 0x00007ffff6253f75 in g_closure_invoke (closure=0x555556054e20,
return_value=return_value@entry=0x0, n_param_values=3,
param_values=param_values@entry=0x7fffffff96d0,
invocation_hint=invocation_hint@entry=0x7fffffff9650) at
././gobject/gclosure.c:804
#12 0x00007ffff6265f82 in signal_emit_unlocked_R
(node=node@entry=0x555555aee490, detail=detai---Type <return> to continue, or q
<return> to quit---
l@entry=0, instance=instance@entry=0x555555e7b9c0,
emission_return=emission_return@entry=0x0,
instance_and_params=instance_and_params@entry=0x7fffffff96d0) at
././gobject/gsignal.c:3635
#13 0x00007ffff626ebcc in g_signal_emit_valist (instance=<optimized out>,
signal_id=<optimized out>, detail=<optimized out>,
var_args=var_args@entry=0x7fffffff98b0)
at ././gobject/gsignal.c:3391
#15 0x000055555575edef in gui_mch_add_menu_item ()
#16 0x000055555566c0e0 in ()
#17 0x000055555566c976 in ex_menu ()
#18 0x000055555561e4cf in do_cmdline ()
#19 0x00005555555e7afe in ex_execute ()
#20 0x000055555561e4cf in do_cmdline ()
#21 0x0000555555746879 in call_func ()
#22 0x00005555557472d5 in get_func_tv ()
#23 0x0000555555749d0f in ex_call ()
#24 0x000055555561e4cf in do_cmdline ()
#25 0x0000555555746879 in call_func ()
#26 0x00005555557472d5 in get_func_tv ()
#27 0x0000555555749d0f in ex_call ()
#28 0x000055555561e4cf in do_cmdline ()
#29 0x0000555555639d76 in ()
#30 0x000055555563a5e4 in apply_autocmds ()
#31 0x00005555555c2965 in buflist_new ()
#32 0x000055555560323b in do_ecmd ()
#33 0x00005555556228c4 in do_exedit ()
#34 0x000055555562300b in ex_splitview ()
#35 0x000055555561e4cf in do_cmdline ()
#36 0x0000555555690135 in ()
#37 0x0000555555699b85 in normal_cmd ()
#38 0x0000555555793435 in main_loop ()
#39 0x00005555557945b0 in vim_main2 ()
#40 0x00005555555b7421 in main ()
gdb$ continue
Continuing.
Vim: Caught deadly signal SEGV
Vim: Finished.
Thread 1 "gvim" received signal SIGSEGV, Segmentation fault.
0x00007ffff2d78b17 in kill () at ../sysdeps/unix/syscall-template.S:84
84 ../sysdeps/unix/syscall-template.S: Нет такого файла или каталога.
gdb$ quit
A debugging session is active.
Inferior 1 [process 11038] will be killed.
Quit anyway? (y or n) y
mymedia@comp2:~$
Versions:
mymedia@comp2:~$ LANG=C gvim --version
VIM - Vi IMproved 8.0 (2016 Sep 12, compiled Dec 06 2016 10:03:48)
Included patches: 1-95
Modified by pkg-vim-maintain...@lists.alioth.debian.org
Compiled by pkg-vim-maintain...@lists.alioth.debian.org
Huge version with GTK3 GUI. Features included (+) or not (-):
+acl +file_in_path +mouse_sgr +tag_old_static
+arabic +find_in_path -mouse_sysmouse -tag_any_white
+autocmd +float +mouse_urxvt +tcl
+balloon_eval +folding +mouse_xterm +termguicolors
+browse -footer +multi_byte +terminfo
++builtin_terms +fork() +multi_lang +termresponse
+byte_offset +gettext -mzscheme +textobjects
+channel -hangul_input +netbeans_intg +timers
+cindent +iconv +num64 +title
+clientserver +insert_expand +packages +toolbar
+clipboard +job +path_extra +user_commands
+cmdline_compl +jumplist +perl +vertsplit
+cmdline_hist +keymap +persistent_undo +virtualedit
+cmdline_info +lambda +postscript +visual
+comments +langmap +printer +visualextra
+conceal +libcall +profile +viminfo
+cryptv +linebreak -python +vreplace
+cscope +lispindent +python3 +wildignore
+cursorbind +listcmds +quickfix +wildmenu
+cursorshape +localmap +reltime +windows
+dialog_con_gui +lua +rightleft +writebackup
+diff +menu +ruby +X11
+digraphs +mksession +scrollbind -xfontset
+dnd +modify_fname +signs +xim
-ebcdic +mouse +smartindent +xpm
+emacs_tags +mouseshape +startuptime +xsmp_interact
+eval +mouse_dec +statusline +xterm_clipboard
+ex_extra +mouse_gpm -sun_workshop -xterm_save
+extra_search -mouse_jsbterm +syntax
+farsi +mouse_netterm +tag_binary
system vimrc file: "$VIM/vimrc"
user vimrc file: "$HOME/.vimrc"
2nd user vimrc file: "~/.vim/vimrc"
user exrc file: "$HOME/.exrc"
system gvimrc file: "$VIM/gvimrc"
user gvimrc file: "$HOME/.gvimrc"
2nd user gvimrc file: "~/.vim/gvimrc"
defaults file: "$VIMRUNTIME/defaults.vim"
system menu file: "$VIMRUNTIME/menu.vim"
fall-back for $VIM: "/usr/share/vim"
Compilation: gcc -c -I. -Iproto -DHAVE_CONFIG_H -DFEAT_GUI_GTK -pthread
-I/usr/include/gtk-3.0 -I/usr/include/at-spi2-atk/2.0 -I/usr/include/at-spi-2.0
-I/usr/include/dbus-1.0 -I/usr/lib/x86_64-linux-gnu/dbus-1.0/include
-I/usr/include/gtk-3.0 -I/usr/include/gio-unix-2.0/ -I/usr/include/mirclient
-I/usr/include/mircommon -I/usr/include/mircookie -I/usr/include/cairo
-I/usr/include/pango-1.0 -I/usr/include/harfbuzz -I/usr/include/pango-1.0
-I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/pixman-1
-I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/gdk-pixbuf-2.0
-I/usr/include/libpng16 -I/usr/include/glib-2.0
-I/usr/lib/x86_64-linux-gnu/glib-2.0/include -Wdate-time -g -O2
-fdebug-prefix-map=/build/vim-3w9TQv/vim-8.0.0095=. -fPIE
-fstack-protector-strong -Wformat -Werror=format-security -U_FORTIFY_SOURCE
-D_FORTIFY_SOURCE=1
Linking: gcc -L. -Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now
-fstack-protector -rdynamic -Wl,-export-dynamic -Wl,-E
-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now -Wl,--as-needed -o
vim -lgtk-3 -lgdk-3 -lpangocairo-1.0 -lpango-1.0 -latk-1.0 -lcairo-gobject
-lcairo -lgdk_pixbuf-2.0 -lgio-2.0 -lgobject-2.0 -lglib-2.0 -lSM -lICE -lXpm
-lXt -lX11 -lXdmcp -lSM -lICE -lm -ltinfo -lnsl -lselinux -lacl -lattr -lgpm
-ldl -L/usr/lib -llua5.2 -Wl,-E -fstack-protector-strong -L/usr/local/lib
-L/usr/lib/x86_64-linux-gnu/perl/5.24/CORE -lperl -ldl -lm -lpthread -lcrypt
-L/usr/lib/python3.5/config-3.5m-x86_64-linux-gnu -lpython3.5m -lpthread -ldl
-lutil -lm -L/usr/lib/x86_64-linux-gnu -ltcl8.6 -ldl -lz -lpthread -lieee -lm
-lruby-2.3 -lpthread -lgmp -ldl -lcrypt -lm
mymedia@comp2:~$ LANG=C apt policy libunity-gtk3-parser0 vim-gtk3
libunity-gtk3-parser0:
Installed: 0.0.0+16.10.20160913-0ubuntu1
Candidate: 0.0.0+16.10.20160913-0ubuntu1
Version table:
*** 0.0.0+16.10.20160913-0ubuntu1 500
500 http://mirror.yandex.ru/ubuntu devel/main amd64 Packages
100 /var/lib/dpkg/status
vim-gtk3:
Installed: 2:8.0.0095-1ubuntu2
Candidate: 2:8.0.0095-1ubuntu2
Version table:
2:8.0.0134-1 200
200 http://mirror.yandex.ru/debian unstable/main amd64 Packages
*** 2:8.0.0095-1ubuntu2 500
500 http://mirror.yandex.ru/ubuntu devel/universe amd64 Packages
100 /var/lib/dpkg/status
N: Ignoring file '50unattended-upgrades.ucf-dist' in directory
'/etc/apt/apt.conf.d/' as it has an invalid filename extension
mymedia@comp2:~$ lsb_release -rd
Description: Ubuntu Zesty Zapus (development branch)
Release: 17.04
mymedia@comp2:~$
Sorry for my bad English, this is not my native language, but what
else should I provide?
ProblemType: Bug
DistroRelease: Ubuntu 17.04
Package: vim-gtk3 2:8.0.0095-1ubuntu2
ProcVersionSignature: Ubuntu 4.8.0-30.32-generic 4.8.6
Uname: Linux 4.8.0-30-generic x86_64
ApportVersion: 2.20.4-0ubuntu1
Architecture: amd64
CurrentDesktop: Unity
Date: Fri Dec 16 22:05:07 2016
ExecutablePath: /usr/bin/vim.gtk3
SourcePackage: vim
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vim/+bug/1650666/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
