Package: pcmanfm
Version: 0.9.10-3
Severity: normal

Dear Maintainer,
here is another method to crash PCManFM:

1) open pcmanfm;
2) type some invalid path into the address bar (e .g.: /aaa/bbb/ccc);
3) try to open a new tab ("File -> New Tab" or <Ctrl> + <T>);
4) CRASH!

GDB log is attached.



-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pcmanfm depends on:
ii  libatk1.0-0         2.4.0-2
ii  libc6               2.13-35
ii  libcairo2           1.12.2-2
ii  libfm-gtk-bin       0.1.17-2
ii  libfm-gtk1          0.1.17-2
ii  libfm1              0.1.17-2
ii  libfontconfig1      2.9.0-7
ii  libfreetype6        2.4.9-1
ii  libgdk-pixbuf2.0-0  2.26.1-1
ii  libglib2.0-0        2.33.12+really2.32.4-3
ii  libgtk2.0-0         2.24.10-2
ii  libmenu-cache1      0.3.3-1
ii  libpango1.0-0       1.30.0-1
ii  libx11-6            2:1.5.0-1

Versions of packages pcmanfm recommends:
ii  gnome-icon-theme  3.4.0-2
ii  gvfs-backends     1.12.3-1+b1
ii  gvfs-fuse         1.12.3-1+b1
ii  lxde-icon-theme   0.5.0-1

pcmanfm suggests no packages.

-- no debconf information
Starting program: /usr/bin/pcmanfm 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffe8459700 (LWP 7550)]
[New Thread 0x7fffe7c58700 (LWP 7551)]
[Thread 0x7fffe7c58700 (LWP 7551) exited]
[New Thread 0x7fffe7c58700 (LWP 7562)]
[Thread 0x7fffe8459700 (LWP 7550) exited]

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff4a721a7 in _g_utf8_normalize_wc (str=0x0, max_len=max_len@entry=-1, 
mode=mode@entry=G_NORMALIZE_ALL) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gunidecomp.c:374
374     /build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gunidecomp.c: 
No such file or directory.

(gdb) backtrace full
#0  0x00007ffff4a721a7 in _g_utf8_normalize_wc (str=0x0, 
max_len=max_len@entry=-1, mode=mode@entry=G_NORMALIZE_ALL) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gunidecomp.c:374
        n_wc = 0
        wc_buffer = <optimized out>
        p = 0x0
        last_start = <optimized out>
        do_compat = 1
        do_compose = 0
#1  0x00007ffff4a72663 in g_utf8_normalize (str=<optimized out>, 
len=len@entry=-1, mode=mode@entry=G_NORMALIZE_ALL) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gunidecomp.c:535
        result_wc = <optimized out>
        result = <optimized out>
#2  0x00007ffff70efae4 in IA__gtk_entry_completion_complete 
(completion=completion@entry=0x76bab0) at 
/tmp/buildd/gtk+2.0-2.24.10/gtk/gtkentrycompletion.c:1181
        tmp = <optimized out>
        __PRETTY_FUNCTION__ = "IA__gtk_entry_completion_complete"
#3  0x00007ffff70de1e8 in check_completion_callback (completion=0x76bab0) at 
/tmp/buildd/gtk+2.0-2.24.10/gtk/gtkentry.c:9657
No locals.
#4  0x00007ffff4f25109 in source_closure_marshal_BOOLEAN__VOID 
(closure=<optimized out>, return_value=0x7fffffffe1c0, 
n_param_values=<optimized out>, param_values=<optimized out>, 
invocation_hint=<optimized out>, marshal_data=<optimized out>) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./gobject/gsourceclosure.c:71
        callback = <optimized out>
        cc = <optimized out>
        v_return = <optimized out>
#5  0x00007ffff4f0b6e0 in g_closure_invoke (closure=0x884080, 
return_value=0x7fffffffe1c0, n_param_values=0, param_values=0x0, 
invocation_hint=0x0) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./gobject/gclosure.c:777
        marshal = 0x7ffff4f250f0 <source_closure_marshal_BOOLEAN__VOID>
        marshal_data = 0x0
        in_marshal = 0
        real_closure = 0x884060
        __PRETTY_FUNCTION__ = "g_closure_invoke"
#6  0x00007ffff4f250d1 in source_closure_callback (data=0x884080) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./gobject/gsourceclosure.c:113
        closure = 0x884080
        result_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 
0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer 
= 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 
= 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        result = <optimized out>
#7  0x00007ffff4a47355 in g_main_dispatch (context=0x65e540) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:2539
        dispatch = 0x7ffff4a45070 <g_idle_dispatch>
        was_in_call = 0
        user_data = 0x884080
        callback = 0x7ffff4f25090 <source_closure_callback>
        cb_funcs = 0x7ffff514a430
        cb_data = 0x884080
        current_source_link = {data = 0x872550, next = 0x0}
        need_destroy = <optimized out>
        source = 0x872550
        current = 0x6eca70
        i = <optimized out>
#8  g_main_context_dispatch (context=context@entry=0x65e540) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3075
No locals.
#9  0x00007ffff4a47688 in g_main_context_iterate (context=0x65e540, 
block=block@entry=1, dispatch=dispatch@entry=1, self=<error reading variable: 
Unhandled dwarf expression opcode 0xfa>) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3146
        max_priority = -100
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = <optimized out>
        fds = 0x84b730
#10 0x00007ffff4a47a82 in g_main_loop_run (loop=0x6709e0) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3340
        __PRETTY_FUNCTION__ = "g_main_loop_run"
#11 0x00007ffff7154797 in IA__gtk_main () at 
/tmp/buildd/gtk+2.0-2.24.10/gtk/gtkmain.c:1256
        tmp_list = 0x0
        functions = 0x0
        init = <optimized out>
        loop = 0x6709e0
#12 0x000000000040efa9 in main (argc=1, argv=0x7fffffffe448) at pcmanfm.c:199
        config = 0x660020
        err = 0x0

(gdb) info registers
rax            0x0      0
rbx            0x0      0
rcx            0x1      1
rdx            0x0      0
rsi            0xffffffffffffffff       -1
rdi            0x0      0
rbp            0xffffffffffffffff       0xffffffffffffffff
rsp            0x7fffffffe030   0x7fffffffe030
r8             0x6273c0 6452160
r9             0x20     32
r10            0x0      0
r11            0x0      0
r12            0x0      0
r13            0x0      0
r14            0x0      0
r15            0x0      0
rip            0x7ffff4a721a7   0x7ffff4a721a7 <_g_utf8_normalize_wc+119>
eflags         0x10286  [ PF SF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0

(gdb) x/16i $pc
=> 0x7ffff4a721a7 <_g_utf8_normalize_wc+119>:   cmpb   $0x0,0x0(%r13)
   0x7ffff4a721ac <_g_utf8_normalize_wc+124>:   je     0x7ffff4a721f0 
<_g_utf8_normalize_wc+192>
   0x7ffff4a721ae <_g_utf8_normalize_wc+126>:   mov    %r13,%rdi
   0x7ffff4a721b1 <_g_utf8_normalize_wc+129>:   callq  0x7ffff4a6fa40 
<g_utf8_get_char>
   0x7ffff4a721b6 <_g_utf8_normalize_wc+134>:   lea    -0xac00(%rax),%edx
   0x7ffff4a721bc <_g_utf8_normalize_wc+140>:   cmp    $0x2ba3,%edx
   0x7ffff4a721c2 <_g_utf8_normalize_wc+146>:   jbe    0x7ffff4a72170 
<_g_utf8_normalize_wc+64>
   0x7ffff4a721c4 <_g_utf8_normalize_wc+148>:   mov    0x38(%rsp),%esi
   0x7ffff4a721c8 <_g_utf8_normalize_wc+152>:   mov    %eax,%edi
   0x7ffff4a721ca <_g_utf8_normalize_wc+154>:   callq  0x7ffff4a71b30 
<find_decomposition>
   0x7ffff4a721cf <_g_utf8_normalize_wc+159>:   test   %rax,%rax
   0x7ffff4a721d2 <_g_utf8_normalize_wc+162>:   je     0x7ffff4a723f0 
<_g_utf8_normalize_wc+704>
   0x7ffff4a721d8 <_g_utf8_normalize_wc+168>:   mov    $0xffffffffffffffff,%rsi
   0x7ffff4a721df <_g_utf8_normalize_wc+175>:   mov    %rax,%rdi
   0x7ffff4a721e2 <_g_utf8_normalize_wc+178>:   callq  0x7ffff4a6f950 
<g_utf8_strlen>
   0x7ffff4a721e7 <_g_utf8_normalize_wc+183>:   add    %rax,%rbx

(gdb) thread apply all backtrace

Thread 4 (Thread 0x7fffe7c58700 (LWP 7562)):
#0  pthread_cond_timedwait@@GLIBC_2.3.2 () at 
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_timedwait.S:216
#1  0x00007ffff4a83795 in g_cond_wait_until (cond=cond@entry=0x805578, 
mutex=mutex@entry=0x805570, end_time=end_time@entry=32830661562) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gthread-posix.c:855
#2  0x00007ffff4a1df51 in g_async_queue_pop_intern_unlocked (queue=0x805570, 
wait=wait@entry=1, end_time=32830661562) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gasyncqueue.c:424
#3  0x00007ffff4a1e5f8 in g_async_queue_timeout_pop_unlocked (queue=<optimized 
out>, timeout=timeout@entry=500000) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gasyncqueue.c:572
#4  0x00007ffff4a6a64a in g_thread_pool_wait_for_new_task (pool=0x805510) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gthreadpool.c:264
#5  g_thread_pool_thread_proxy (data=<optimized out>) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gthreadpool.c:298
#6  0x00007ffff4a69f45 in g_thread_proxy (data=0x86aad0) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gthread.c:801
#7  0x00007ffff47e7b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#8  0x00007ffff453270d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#9  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7ffff7fcb920 (LWP 7547)):
#0  0x00007ffff4a721a7 in _g_utf8_normalize_wc (str=0x0, 
max_len=max_len@entry=-1, mode=mode@entry=G_NORMALIZE_ALL) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gunidecomp.c:374
#1  0x00007ffff4a72663 in g_utf8_normalize (str=<optimized out>, 
len=len@entry=-1, mode=mode@entry=G_NORMALIZE_ALL) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gunidecomp.c:535
#2  0x00007ffff70efae4 in IA__gtk_entry_completion_complete 
(completion=completion@entry=0x76bab0) at 
/tmp/buildd/gtk+2.0-2.24.10/gtk/gtkentrycompletion.c:1181
#3  0x00007ffff70de1e8 in check_completion_callback (completion=0x76bab0) at 
/tmp/buildd/gtk+2.0-2.24.10/gtk/gtkentry.c:9657
#4  0x00007ffff4f25109 in source_closure_marshal_BOOLEAN__VOID 
(closure=<optimized out>, return_value=0x7fffffffe1c0, 
n_param_values=<optimized out>, param_values=<optimized out>, 
invocation_hint=<optimized out>, marshal_data=<optimized out>) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./gobject/gsourceclosure.c:71
#5  0x00007ffff4f0b6e0 in g_closure_invoke (closure=0x884080, 
return_value=0x7fffffffe1c0, n_param_values=0, param_values=0x0, 
invocation_hint=0x0) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./gobject/gclosure.c:777
#6  0x00007ffff4f250d1 in source_closure_callback (data=0x884080) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./gobject/gsourceclosure.c:113
#7  0x00007ffff4a47355 in g_main_dispatch (context=0x65e540) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:2539
#8  g_main_context_dispatch (context=context@entry=0x65e540) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3075
#9  0x00007ffff4a47688 in g_main_context_iterate (context=0x65e540, 
block=block@entry=1, dispatch=dispatch@entry=1, self=<error reading variable: 
Unhandled dwarf expression opcode 0xfa>) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3146
#10 0x00007ffff4a47a82 in g_main_loop_run (loop=0x6709e0) at 
/build/glib2.0-7fLB_j/glib2.0-2.33.12+really2.32.4/./glib/gmain.c:3340
#11 0x00007ffff7154797 in IA__gtk_main () at 
/tmp/buildd/gtk+2.0-2.24.10/gtk/gtkmain.c:1256
#12 0x000000000040efa9 in main (argc=1, argv=0x7fffffffe448) at pcmanfm.c:199

Reply via email to