nm-applet assert failure: *** glibc detected *** nm-applet: free(): invalid pointer: 0x0000000001eb1370 ***

Bug #936644 reported by Steve Langasek
42
This bug affects 5 people
Affects Status Importance Assigned to Milestone
network-manager-applet (Ubuntu)
Fix Released
High
Mathieu Trudel-Lapierre
Precise
Fix Released
High
Mathieu Trudel-Lapierre

Bug Description

So after hitting bug #930491, I kill -9'ed nm-applet (it wouldn't die with a kill -15) and tried to restart it. Attempts to restart now run into the above-indicated assertion failure.

ProblemType: Crash
DistroRelease: Ubuntu 12.04
Package: network-manager-gnome 0.9.2.0+git.20120126t000800.5151959-0ubuntu2
ProcVersionSignature: Ubuntu 3.2.0-16.25-generic 3.2.6
Uname: Linux 3.2.0-16-generic x86_64
ApportVersion: 1.91-0ubuntu1
Architecture: amd64
AssertionMessage: *** glibc detected *** nm-applet: free(): invalid pointer: 0x0000000001eb1370 ***
CheckboxSubmission: 017452a27eca3c8b498abbfa5ef91db9
CheckboxSystem: ecaaad6fa1e0799a0aa1126bf620f39e
Date: Sun Feb 19 16:59:56 2012
ExecutablePath: /usr/bin/nm-applet
InstallationMedia: Ubuntu 10.04.1 LTS "Lucid Lynx" - Release amd64 (20100816.1)
IpRoute:
 default via 192.168.15.1 dev wlan1 proto static
 169.254.0.0/16 dev wlan1 scope link metric 1000
 192.168.15.0/24 dev wlan1 proto kernel scope link src 192.168.15.42 metric 2
 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1
NetworkManager.state:
 [main]
 NetworkingEnabled=true
 WirelessEnabled=true
 WWANEnabled=true
ProcCmdline: nm-applet
ProcEnviron:
 SHELL=/bin/bash
 PATH=(custom, user)
 LANG=en_US.UTF-8
Signal: 6
SourcePackage: network-manager-applet
StacktraceTop:
 __libc_message (do_abort=2, fmt=0x7f400bed9270 "*** glibc detected *** %s: %s: 0x%s ***\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:201
 malloc_printerr (action=3, str=0x7f400bed6221 "free(): invalid pointer", ptr=<optimized out>) at malloc.c:5007
 g_datalist_clear () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
 ?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
 g_object_unref () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: nm-applet assert failure: *** glibc detected *** nm-applet: free(): invalid pointer: 0x0000000001eb1370 ***
UpgradeStatus: Upgraded to precise on 2011-11-08 (103 days ago)
UserGroups: adm admin cdrom dialout libvirtd lpadmin mythtv plugdev sambashare src
WifiSyslog:

nmcli-dev:
 DEVICE TYPE STATE DBUS-PATH
 wlan1 802-11-wireless connected /org/freedesktop/NetworkManager/Devices/1
 eth0 802-3-ethernet unavailable /org/freedesktop/NetworkManager/Devices/0
nmcli-nm:
 RUNNING VERSION STATE NET-ENABLED WIFI-HARDWARE WIFI WWAN-HARDWARE WWAN
 running 0.9.3.0 connected enabled enabled enabled enabled disabled

Revision history for this message
Steve Langasek (vorlon) wrote :
Steve Langasek (vorlon)
Changed in network-manager-applet (Ubuntu):
importance: Undecided → High
tags: added: rls-mgr-p-tracking
Changed in network-manager-applet (Ubuntu):
milestone: none → ubuntu-12.04-beta-1
Revision history for this message
Apport retracing service (apport) wrote : This bug is a duplicate

Thank you for taking the time to report this crash and helping to make this software better. This particular crash has already been reported and is a duplicate of bug #436324, so is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Please continue to report any other bugs you may find.

visibility: private → public
visibility: private → public
tags: removed: need-amd64-retrace
Revision history for this message
Steve Langasek (vorlon) wrote :

This is not a duplicate of bug #436324. There's a similar signature, but has a new root cause as indicated by the sudden increase in duplicates in precise.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in network-manager-applet (Ubuntu):
status: New → Confirmed
Revision history for this message
Steve Langasek (vorlon) wrote :
Download full text (4.0 KiB)

Since the retracer ate the backtrace, here's a new one.

#0 0x00007ffff51ff475 in __GI_raise (sig=<optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1 0x00007ffff5202bdb in __GI_abort () at abort.c:91
#2 0x00007ffff523b0ee in __libc_message (do_abort=2,
    fmt=0x7ffff5343270 "*** glibc detected *** %s: %s: 0x%s ***\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:201
#3 0x00007ffff52458e6 in malloc_printerr (action=3,
    str=0x7ffff5340221 "free(): invalid pointer", ptr=<optimized out>)
    at malloc.c:5007
#4 0x00007ffff57d7b10 in g_datalist_clear (datalist=0x0)
    at /build/buildd/glib2.0-2.31.16/./glib/gdataset.c:283
#5 0x00007ffff5cd2f3d in g_object_finalize (object=0xb20170)
    at /build/buildd/glib2.0-2.31.16/./gobject/gobject.c:1008
#6 0x00007ffff5cd2b93 in g_object_unref (_object=0xb20170)
    at /build/buildd/glib2.0-2.31.16/./gobject/gobject.c:3008
#7 0x00007ffff728929d in gtk_menu_shell_forall (container=<optimized out>,
    include_internals=<optimized out>,
    callback=0x7ffff73ab310 <gtk_widget_destroy>, callback_data=0x0)
    at /build/buildd/gtk+3.0-3.3.14/./gtk/gtkmenushell.c:1223
#8 0x00007ffff71dc9b7 in gtk_container_destroy (widget=0x6a76b0)
    at /build/buildd/gtk+3.0-3.3.14/./gtk/gtkcontainer.c:1390
#9 0x00007ffff5ccf2da in g_closure_invoke (closure=0x669440,
    return_value=0x0, n_param_values=1, param_values=0x8bfa80,
    invocation_hint=<optimized out>)
    at /build/buildd/glib2.0-2.31.16/./gobject/gclosure.c:774
#10 0x00007ffff5cdf4f7 in signal_emit_unlocked_R (node=<optimized out>,
    detail=0, instance=<optimized out>, emission_return=0x0,
    instance_and_params=0x8bfa80)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3418
#11 0x00007ffff5ce700b in g_signal_emit_valist (instance=<optimized out>,
    signal_id=<optimized out>, detail=<optimized out>, var_args=0x7fffffffd868)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3033
#12 0x00007ffff5ce71d2 in g_signal_emit (instance=<optimized out>,
    signal_id=<optimized out>, detail=<optimized out>)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3090
#13 0x00007ffff73b66ea in gtk_widget_dispose (object=0x6a76b0)
    at /build/buildd/gtk+3.0-3.3.14/./gtk/gtkwidget.c:10112
#14 0x00007ffff5cd3f60 in g_object_run_dispose (object=0x6a76b0)
    at /build/buildd/glib2.0-2.31.16/./gobject/gobject.c:1051
#15 0x00007ffff7285da5 in gtk_menu_item_destroy (widget=0xa76980)
    at /build/buildd/gtk+3.0-3.3.14/./gtk/gtkmenuitem.c:679
#16 0x00007ffff5ccf384 in g_closure_invoke (closure=0x669440,
    return_value=0x0, n_param_values=1, param_values=0x8bea60,
    invocation_hint=<optimized out>)
    at /build/buildd/glib2.0-2.31.16/./gobject/gclosure.c:774
#17 0x00007ffff5cdf4f7 in signal_emit_unlocked_R (node=<optimized out>,
    detail=0, instance=<optimized out>, emission_return=0x0,
    instance_and_params=0x8bea60)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3418
#18 0x00007ffff5ce700b in g_signal_emit_valist (instance=<optimized out>,
    signal_id=<optimized out>, detail=<optimized out>, var_args=0x7fffffffdca8)
    at /build/buildd/glib2.0-2.31.16/./gobject/gsignal.c:3033
#19 0x00007f...

Read more...

Changed in network-manager-applet (Ubuntu Precise):
assignee: nobody → Mathieu Trudel-Lapierre (mathieu-tl)
Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

This was fixed with a rewrite of the wireless bits for menuitems in the indicator:

network-manager-applet (0.9.2.0+git.20120126t000800.5151959-0ubuntu3) precise; urgency=low

  * debian/patches/lp829673_gconf_hide_applet.patch: allow toggling the applet
    visibility. (LP: #829673)
  * debian/patches/nm-applet-use-indicator.patch: completely replace the old
    wireless menu item creation code overriding NMNetworkMenuItem objects to
    rewrite it more simply with GtkImageMenuItems. This should really take care
    of the memory leaks. (LP: #930491)

Changed in network-manager-applet (Ubuntu Precise):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.