View Issue Details

IDProjectCategoryView StatusLast Update
0003240gnunet-gtkgnunet-fs-gtkpublic2014-02-16 15:36
ReporterLRN Assigned ToChristian Grothoff  
PrioritynormalSeveritycrashReproducibilityunable to reproduce
Status closedResolutionunable to reproduce 
Summary0003240: Crash in gnunet-fs-gtk
Descriptionr31719
Steps To ReproduceJust happened (did a few searches, closed a tab)
Additional Information
[New Thread 8852.0x10f4]
Reading symbols from D:\Progs\GNUnet\bin\gnunet-fs-gtk.exe...done.
Continuing.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 8852.0x1bd8]
gtk_tree_row_reference_get_path (reference=0xdf0adba) at ../../gtk+-2.24.20/gtk/gtktreemodel.c:2032
2032    ../../gtk+-2.24.20/gtk/gtktreemodel.c: No such file or directory.
(gdb) bt
#0  gtk_tree_row_reference_get_path (reference=0xdf0adba) at ../../gtk+-2.24.20/gtk/gtktreemodel.c:2032
#1  0x00408a13 in update_search_result (sr=0x95acfa8, meta=0x95a7d08, applicability_rank=0, availability_rank=-2, availability_certainty=2, probe_time=...) at gnunet-fs-gtk_event-handler.c:2188
#2  0x0040d2d2 in GNUNET_GTK_fs_event_handler (cls=0x0, info=0x28fae8) at gnunet-fs-gtk_event-handler.c:3971
#3  0x0232193d in GNUNET_FS_search_make_status_ (pi=0x28fae8, h=0x63619e8, sc=0x0) at fs_search.c:66
#4  0x02321b4b in signal_probe_result (sr=0x94ff5b0) at fs_search.c:207
#5  0x023222ee in probe_ping_task (cls=0x94ff5b0, tc=0x28fbc0) at fs_search.c:385
#6  0x62b7f7d1 in run_ready (rs=0x6364698, ws=0x63656b0) at scheduler.c:595
#7  0x62b8004d in GNUNET_SCHEDULER_run (task=0x62b7a800 <program_main>, task_cls=0x28fd58) at scheduler.c:817
#8  0x62b7b2e1 in GNUNET_PROGRAM_run2 (argc=1, argv=0x63538c8, binaryName=0x41e04c <_Jv_RegisterClasses+4317260> "gnunet-fs-gtk", binaryHelp=0x41e5a4 <_Jv_RegisterClasses+4318628> "GTK GUI for GNUnet",
    options=0x41d040 <options.153450>, task=0x69c438a9 <run_main_loop>, task_cls=0x28fe20, run_without_scheduler=0) at program.c:302
#9  0x62b7b405 in GNUNET_PROGRAM_run (argc=1, argv=0x63538c8, binaryName=0x41e04c <_Jv_RegisterClasses+4317260> "gnunet-fs-gtk", binaryHelp=0x41e5a4 <_Jv_RegisterClasses+4318628> "GTK GUI for GNUnet",
    options=0x41d040 <options.153450>, task=0x69c438a9 <run_main_loop>, task_cls=0x28fe20) at program.c:341
#10 0x69c43ec7 in GNUNET_GTK_main_loop_start (binary_name=0x41e04c <_Jv_RegisterClasses+4317260> "gnunet-fs-gtk", binary_help=0x41e5a4 <_Jv_RegisterClasses+4318628> "GTK GUI for GNUnet", argc=1,
    argv=0x63538c8, options=0x41d040 <options.153450>, main_window_file=0x41e584 <_Jv_RegisterClasses+4318596> "gnunet_fs_gtk_main_window.glade", main_task=0x40249e <run>) at eventloop.c:1000
#11 0x00402cb1 in main (argc=1, argv=0x63538c8) at gnunet-fs-gtk.c:877
(gdb) up
#1  0x00408a13 in update_search_result (sr=0x95acfa8, meta=0x95a7d08, applicability_rank=0, availability_rank=-2, availability_certainty=2, probe_time=...) at gnunet-fs-gtk_event-handler.c:2188
2188      tp = gtk_tree_row_reference_get_path (sr->rr);
(gdb) p sr
$1 = (struct SearchResult *) 0x95acfa8
(gdb) p/x *sr
$2 = {next = 0xdf00034, prev = 0xdf0adba, rr = 0xdf0adba, tab = 0xdf0adba, result = 0xdf0adba, probe = 0xdf0adba, download = 0xdf0adba}
(gdb) bt full
#0  gtk_tree_row_reference_get_path (reference=0xdf0adba) at ../../gtk+-2.24.20/gtk/gtktreemodel.c:2032
        __PRETTY_FUNCTION__ = "gtk_tree_row_reference_get_path"
#1  0x00408a13 in update_search_result (sr=0x95acfa8, meta=0x95a7d08, applicability_rank=0, availability_rank=-2, availability_certainty=2, probe_time=...) at gnunet-fs-gtk_event-handler.c:2188
        iter = {stamp = 1968706717, user_data = 0x28fa08, user_data2 = 0x3c4ec1 <__pthread_self_lite+65>, user_data3 = 0x18}
        ometa = 0x76eaf8d1 <ntdll!ZwWaitForSingleObject+21>
        tv = 0x324
        tp = 0x0
        ts = 0xfeedbab1
        tm = 0x1
        desc = 0x18 <Address 0x18 out of bounds>
        mime = 0x3c4ec1 <__pthread_self_lite+65> "Гь\004Е└Й├t\nНeЇЙ╪[^_]├шw■  Л= P="
        pixbuf = 0x28fa28
        percent_avail = 104072384
        page = -1
        desc_is_a_dup = 0
        mctx = 0x422040 <main_context>
        __FUNCTION__ = "update_search_result"
#2  0x0040d2d2 in GNUNET_GTK_fs_event_handler (cls=0x0, info=0x28fae8) at gnunet-fs-gtk_event-handler.c:3971
        ret = 0x62b92678 <GNUNET_TIME_absolute_get_duration+24>
        __FUNCTION__ = "GNUNET_GTK_fs_event_handler"
#3  0x0232193d in GNUNET_FS_search_make_status_ (pi=0x28fae8, h=0x63619e8, sc=0x0) at fs_search.c:66
        ret = 0x1
#4  0x02321b4b in signal_probe_result (sr=0x94ff5b0) at fs_search.c:207
        pi = {value = {publish = {pc = 0x0, fi = 0x0, cctx = 0x0, pctx = 0x0, filename = 0x0, size = 0, eta = {rel_value_us = 673988567715467176}, duration = {rel_value_us = 18446744065276571656},
              completed = 2, anonymity = 40281615, specifics = {progress = {data = 0x753098da <msvcrt!free+70>, offset = 11535354599870760, data_len = 0, depth = 155260192}, progress_directory = {
                  completed = 7112427941055731930, total = 11535354599870760, eta = {rel_value_us = 0}}, resume = {message = 0x753098da <msvcrt!free+70> "├РРРРР■   ",
                  chk_uri = 0x62b46b87 <GNUNET_xfree_+329>}, completed = {chk_uri = 0x753098da <msvcrt!free+70>}, error = {message = 0x753098da <msvcrt!free+70> "├РРРРР■   "}}}, download = {dc = 0x0,
              cctx = 0x0, pctx = 0x0, sctx = 0x0, uri = 0x0, filename = 0x0, size = 0, eta = {rel_value_us = 673988567715467176}, duration = {rel_value_us = 18446744065276571656}, completed = 2,
              anonymity = 40281615, is_active = 0, specifics = {progress = {data = 0x753098da <msvcrt!free+70>, offset = 11535354599870760, data_len = 0, block_download_duration = {
                    rel_value_us = 7796880631979382048}, depth = 156907608, respect_offered = 0, num_transmissions = 104220312}, start = {meta = 0x753098da <msvcrt!free+70>}, resume = {
                  meta = 0x753098da <msvcrt!free+70>, message = 0x62b46b87 <GNUNET_xfree_+329> "╔├UЙхГь8Г}\b"}, error = {message = 0x753098da <msvcrt!free+70> "├РРРРР■   "}}}, search = {sc = 0x0, cctx = 0x0,
              pctx = 0x0, query = 0x0, duration = {rel_value_us = 0}, anonymity = 0, specifics = {result = {meta = 0x95acfa8, uri = 0x95a7d08, result = 0x95af008, applicability_rank = 4294967294},
                resume_result = {meta = 0x95acfa8, uri = 0x95a7d08, result = 0x95af008, availability_rank = -2, availability_certainty = 2, applicability_rank = 0}, update = {cctx = 0x95acfa8,
                  meta = 0x95a7d08, uri = 0x95af008, availability_rank = -2, availability_certainty = 2, applicability_rank = 0, current_probe_time = {rel_value_us = 40281615}}, result_suspend = {
                  cctx = 0x95acfa8, meta = 0x95a7d08, uri = 0x95af008}, result_stopped = {cctx = 0x95acfa8, meta = 0x95a7d08, uri = 0x95af008}, resume = {message = 0x95acfa8 "4", is_paused = 156925192},
                error = {message = 0x95acfa8 "4"}, ns = {name = 0x95acfa8 "4", root = 0x95a7d08 "°╧Z    °╧Z     ", meta = 0x95af008, pseudonym = {
                    q_y = "■   \002\000\000\000\000\000\000\000\017жf\002\000\000\000\000┌\230\060uЗk┤b(СH      "}}}}, unindex = {uc = 0x0, cctx = 0x0, filename = 0x0, size = 0, eta = {rel_value_us = 0},
              duration = {rel_value_us = 673988567715467176}, completed = 18446744065276571656, specifics = {progress = {data = 0x2, offset = 40281615, data_len = 7112427941055731930, depth = 155750696},
                resume = {message = 0x2 <Address 0x2 out of bounds>}, error = {message = 0x2 <Address 0x2 out of bounds>}}}}, status = GNUNET_FS_STATUS_SEARCH_UPDATE, fsh = 0x63619e8}
#5  0x023222ee in probe_ping_task (cls=0x94ff5b0, tc=0x28fbc0) at fs_search.c:385
        sr = 0x94ff5b0
#6  0x62b7f7d1 in run_ready (rs=0x6364698, ws=0x63656b0) at scheduler.c:595
        p = GNUNET_SCHEDULER_PRIORITY_DEFAULT
        pos = 0x94894d0
        tc = {reason = GNUNET_SCHEDULER_REASON_TIMEOUT, read_ready = 0x6364698, write_ready = 0x63656b0}
        __FUNCTION__ = "run_ready"
#7  0x62b8004d in GNUNET_SCHEDULER_run (task=0x62b7a800 <program_main>, task_cls=0x28fd58) at scheduler.c:817
        rs = 0x6364698
        ws = 0x63656b0
        timeout = {rel_value_us = 0}
        ret = 0
        shc_int = 0x635fae0
        shc_term = 0x635faf8
        last_tr = 190917
        busy_wait_warning = 0
        pr = 0x635fa68
        c = 98 'b'
        __FUNCTION__ = "GNUNET_SCHEDULER_run"
#8  0x62b7b2e1 in GNUNET_PROGRAM_run2 (argc=1, argv=0x63538c8, binaryName=0x41e04c <_Jv_RegisterClasses+4317260> "gnunet-fs-gtk", binaryHelp=0x41e5a4 <_Jv_RegisterClasses+4318628> "GTK GUI for GNUnet",
    options=0x41d040 <options.153450>, task=0x69c438a9 <run_main_loop>, task_cls=0x28fe20, run_without_scheduler=0) at program.c:302
        cc = {args = 0x63538cc, cfgfile = 0x633b1a0 "~/.config/gnunet.conf", task = 0x69c438a9 <run_main_loop>, task_cls = 0x28fe20, cfg = 0x63538e8}
        path = 0x633d708 "эЁ▒║"
        loglev = 0x0
        logfile = 0x0
        cfg_fn = 0x633b100 "~/.config/gnunet.conf"
        xdg = 0x0
        ret = 1
        cnt = 6
        skew_offset = 11537626481819647
        skew_variance = 8455489258498228298
        clock_offset = 18506627534094024
        cfg = 0x63538e8
        defoptions = {{shortName = 99 'c', name = 0x62ba63cc <__FUNCTION__.104141+26> "config", argumentHelp = 0x62ba63d3 <__FUNCTION__.104141+33> "FILENAME",
            description = 0x62ba63dc <__FUNCTION__.104141+42> "use configuration file FILENAME", require_argument = 1, processor = 0x62b6b14e <GNUNET_GETOPT_set_string>, scls = 0x28fd5c}, {
            shortName = 104 'h', name = 0x62ba63fc <__FUNCTION__.104141+74> "help", argumentHelp = 0x0, description = 0x62ba6401 <__FUNCTION__.104141+79> "print this help", require_argument = 0,
            processor = 0x62b6acc7 <GNUNET_GETOPT_format_help_>, scls = 0x41e5a4 <_Jv_RegisterClasses+4318628>}, {shortName = 76 'L', name = 0x62ba6411 <__FUNCTION__.104141+95> "log",
            argumentHelp = 0x62ba6415 <__FUNCTION__.104141+99> "LOGLEVEL", description = 0x62ba6420 <__FUNCTION__.104141+110> "configure logging to use LOGLEVEL", require_argument = 1,
            processor = 0x62b6b14e <GNUNET_GETOPT_set_string>, scls = 0x28fd54}, {shortName = 108 'l', name = 0x62ba6442 <__FUNCTION__.104141+144> "logfile",
            argumentHelp = 0x62ba644a <__FUNCTION__.104141+152> "LOGFILE", description = 0x62ba6454 <__FUNCTION__.104141+162> "configure logging to write logs to LOGFILE", require_argument = 1,
            processor = 0x62b6b14e <GNUNET_GETOPT_set_string>, scls = 0x28fd50}, {shortName = 118 'v', name = 0x62ba647f <__FUNCTION__.104141+205> "version", argumentHelp = 0x0,
            description = 0x62ba6487 <__FUNCTION__.104141+213> "print the version number", require_argument = 0, processor = 0x62b6ac98 <GNUNET_GETOPT_print_version_>,
            scls = 0x62ba64a0 <__FUNCTION__.104141+238>}}
        allopts = 0x63547f0
        gargs = 0x0
        lpfx = 0x6354400 ""
        spc = 0x0
        __FUNCTION__ = "GNUNET_PROGRAM_run2"
#9  0x62b7b405 in GNUNET_PROGRAM_run (argc=1, argv=0x63538c8, binaryName=0x41e04c <_Jv_RegisterClasses+4317260> "gnunet-fs-gtk", binaryHelp=0x41e5a4 <_Jv_RegisterClasses+4318628> "GTK GUI for GNUnet",
    options=0x41d040 <options.153450>, task=0x69c438a9 <run_main_loop>, task_cls=0x28fe20) at program.c:341
No locals.
#10 0x69c43ec7 in GNUNET_GTK_main_loop_start (binary_name=0x41e04c <_Jv_RegisterClasses+4317260> "gnunet-fs-gtk", binary_help=0x41e5a4 <_Jv_RegisterClasses+4318628> "GTK GUI for GNUnet", argc=1,
    argv=0x63538c8, options=0x41d040 <options.153450>, main_window_file=0x41e584 <_Jv_RegisterClasses+4318596> "gnunet_fs_gtk_main_window.glade", main_task=0x40249e <run>) at eventloop.c:1000
        ml = {cfg = 0x63a17a0, main_window_file = 0x41e584 <_Jv_RegisterClasses+4318596> "gnunet_fs_gtk_main_window.glade", main_task = 0x40249e <run>, builder = 0x634f020, gml = 0x63b0df0, gmc = 0x4b9d8d0,
          rs = 0x63b1768, ws = 0x63b2780, cached_poll_array = 0x7a9bd50, cfgfile = 0x63af1e8 "~/.config/gnunet.conf", cached_poll_array_size = 30, dummy_task = 3, argv = 0x63538cc, argc = 0,
          read_array = 0x7a7b7f0, read_array_length = 1, hEventRead = 0x33c, hEventWrite = 0x340, hEventException = 0x344, hEventPipeWrite = 0x348, hEventReadReady = 0x338, handles_read = 0x63b0e08,
          handles_write = 0x63b0e20, handles_except = 0x63b0e38}
        ret = 4307215
#11 0x00402cb1 in main (argc=1, argv=0x63538c8) at gnunet-fs-gtk.c:877
        options = {{shortName = 116 't', name = 0x41e5f3 <__FUNCTION__.153428+25> "tray", argumentHelp = 0x0, description = 0x41e5f8 <__FUNCTION__.153428+30> "start in tray mode", require_argument = 0,
            processor = 0x41ad58 <GNUNET_GETOPT_set_one>, scls = 0x422020 <tray_only>}, {shortName = 0 '\000', name = 0x0, argumentHelp = 0x0, description = 0x0, require_argument = 0, processor = 0x0,
            scls = 0x0}}
TagsNo tags attached.

Activities

Christian Grothoff

2013-12-24 20:51

manager   ~0007943

Looks like a use-after-free, I've been unable to reproduce this one. Would be great if there were step-by-step instructions for reproducing it (but likely difficult, as probes depend on which content is available in the network at the time).

Christian Grothoff

2014-02-16 15:36

manager   ~0008107

Closing for now, as 'unable to reproduce'; reopen if we find out how to reproduce and/or have more data.

Issue History

Date Modified Username Field Change
2013-12-24 02:06 LRN New Issue
2013-12-24 13:26 Christian Grothoff Assigned To => Christian Grothoff
2013-12-24 13:26 Christian Grothoff Status new => assigned
2013-12-24 13:26 Christian Grothoff Product Version => Git master
2013-12-24 13:26 Christian Grothoff Target Version => 0.10.0
2013-12-24 20:51 Christian Grothoff Severity minor => crash
2013-12-24 20:51 Christian Grothoff Note Added: 0007943
2013-12-24 23:29 Christian Grothoff Target Version 0.10.0 => 0.10.1
2014-02-08 13:27 Christian Grothoff Target Version 0.10.1 =>
2014-02-16 15:36 Christian Grothoff Note Added: 0008107
2014-02-16 15:36 Christian Grothoff Reproducibility N/A => unable to reproduce
2014-02-16 15:36 Christian Grothoff Status assigned => closed
2014-02-16 15:36 Christian Grothoff Resolution open => unable to reproduce
2014-02-16 15:36 Christian Grothoff Product Version Git master =>