Package: geeqie
Version: 1:1.2-2
Severity: important

Hi!

When the attached SA01.cdr file is present in the current directory
where geeqie is called, it crashes with a memory corruption error.

gdb "thread apply all bt full" is attached.

Thank you!

Best regards,
Nelson

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (100, 'experimental'), (100, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages geeqie depends on:
ii  geeqie-common        1:1.2-2
ii  libatk1.0-0          2.12.0-1
ii  libc6                2.19-11
ii  libcairo2            1.12.16-5
ii  libexiv2-13          0.24-4
ii  libfontconfig1       2.11.0-6.1
ii  libfreetype6         2.5.2-2
ii  libgcc1              1:4.9.1-15
ii  libgdk-pixbuf2.0-0   2.30.8-1+b1
ii  libglib2.0-0         2.42.0-1
ii  libgtk2.0-0          2.24.24-1
ii  libjpeg62            1:1.3.1-3
ii  liblcms2-2           2.6-3+b1
ii  liblircclient0       0.9.0~pre1-1.1
ii  liblua5.1-0          5.1.5-7
ii  libpango-1.0-0       1.36.7-1
ii  libpangocairo-1.0-0  1.36.7-1
ii  libpangoft2-1.0-0    1.36.7-1
ii  libstdc++6           4.9.1-15
ii  libtiff5             4.0.3-10

Versions of packages geeqie recommends:
ii  cups-bsd [lpr]   1.7.5-1
ii  exiftran         2.07-14
ii  exiv2            0.24-4
ii  imagemagick      8:6.8.9.6-4
ii  librsvg2-common  2.40.4-1
ii  ufraw-batch      0.19.2-3+b1
pn  zenity           <none>

Versions of packages geeqie suggests:
ii  geeqie-dbg                           1:1.2-2
ii  gimp                                 2.8.14-1
ii  libjpeg-progs                        1:1.3.1-3
ii  libjpeg-turbo-progs [libjpeg-progs]  1:1.3.1-3
pn  ufraw                                <none>
pn  xpaint                               <none>

-- no debconf information
Starting program: /usr/bin/geeqie 
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffec8d2700 (LWP 25159)]
[New Thread 0x7fffe7fff700 (LWP 25160)]
[Thread 0x7fffe7fff700 (LWP 25160) exited]
[New Thread 0x7fffe7fff700 (LWP 25161)]

Program received signal SIGABRT, Aborted.
0x00007ffff3992077 in __GI_raise (sig=sig@entry=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:56
56      ../nptl/sysdeps/unix/sysv/linux/raise.c: Arquivo ou diretório não 
encontrado.

Thread 4 (Thread 0x7fffe7fff700 (LWP 25161)):
#0  0x00007ffff3a3a0ed in poll () at ../sysdeps/unix/syscall-template.S:81
No locals.
#1  0x00007ffff5e87ee4 in g_main_context_poll (priority=2147483647, n_fds=2, 
fds=0x7fffe0003370, timeout=-1, context=0x85cf00) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:4076
        poll_func = 0x7ffff5e97310 <g_poll>
#2  g_main_context_iterate (context=0x85cf00, block=block@entry=1, 
dispatch=dispatch@entry=1, self=<optimized out>) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:3776
        max_priority = 2147483647
        timeout = -1
        some_ready = <optimized out>
        nfds = 2
        allocated_nfds = 2
        fds = 0x7fffe0003370
#3  0x00007ffff5e88272 in g_main_loop_run (loop=0x85ce90) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:3975
        __FUNCTION__ = "g_main_loop_run"
#4  0x00007ffff68def06 in gdbus_shared_thread_func (user_data=0x85ced0) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./gio/gdbusprivate.c:273
        data = 0x85ced0
#5  0x00007ffff5eae925 in g_thread_proxy (data=0x9d58a0) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gthread.c:764
        thread = 0x9d58a0
#6  0x00007ffff3d0d0a4 in start_thread (arg=0x7fffe7fff700) at 
pthread_create.c:309
        __res = <optimized out>
        pd = 0x7fffe7fff700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737085699840, 
4881492864225412230, 1, 10532112, 18, 140737085699840, -4881545641424943994, 
-4881501480955640698}, mask_was_saved = 0}}, 
          priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 
0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#7  0x00007ffff3a42c2d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Thread 2 (Thread 0x7fffec8d2700 (LWP 25159)):
#0  syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
No locals.
#1  0x00007ffff5ecc5e7 in g_cond_wait_until (cond=cond@entry=0x9f3508, 
mutex=mutex@entry=0x9f3500, end_time=end_time@entry=1845535792914)
    at /build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gthread-posix.c:1443
        now = {tv_sec = 1845535, tv_nsec = 292914928}
        span = {tv_sec = 0, tv_nsec = 499999072}
        sampled = 6
        res = <optimized out>
#2  0x00007ffff5e5ca69 in g_async_queue_pop_intern_unlocked (queue=0x9f3500, 
wait=wait@entry=1, end_time=1845535792914) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gasyncqueue.c:422
        retval = <optimized out>
        __FUNCTION__ = "g_async_queue_pop_intern_unlocked"
#3  0x00007ffff5e5d0c8 in g_async_queue_timeout_pop_unlocked (queue=<optimized 
out>, timeout=timeout@entry=500000) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gasyncqueue.c:570
        end_time = <optimized out>
#4  0x00007ffff5eaf290 in g_thread_pool_wait_for_new_task (pool=0x9f3460) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gthreadpool.c:262
        task = <optimized out>
#5  g_thread_pool_thread_proxy (data=<optimized out>) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gthreadpool.c:296
        task = 0x9f8c60
        pool = 0x9f3460
#6  0x00007ffff5eae925 in g_thread_proxy (data=0x9d8630) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gthread.c:764
        thread = 0x9d8630
#7  0x00007ffff3d0d0a4 in start_thread (arg=0x7fffec8d2700) at 
pthread_create.c:309
        __res = <optimized out>
        pd = 0x7fffec8d2700
        now = <optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737162061568, 
4881492864225412230, 1, 140737354125408, 140737319200976, 140737162061568, 
-4881529263104031610, -4881501480955640698}, 
              mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = 
{prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        pagesize_m1 = <optimized out>
        sp = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#8  0x00007ffff3a42c2d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:111
No locals.

Thread 1 (Thread 0x7ffff7fb4980 (LWP 25154)):
#0  0x00007ffff3992077 in __GI_raise (sig=sig@entry=6) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:56
        resultvar = 0
        pid = 25154
        selftid = 25154
#1  0x00007ffff3993458 in __GI_abort () at abort.c:89
        save_stage = 2
        act = {__sigaction_handler = {sa_handler = 0x23, sa_sigaction = 0x23}, 
sa_mask = {__val = {592, 8, 56, 1, 140733193388124, 0, 0, 511101108334, 0, 124, 
56, 1, 140737283880480, 537, 
              140737488343680, 7594080}}, sa_flags = -204474848, sa_restorer = 
0x7ffff3d00060 <_IO_2_1_stderr_>}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007ffff39d4ead in __malloc_assert 
(assertion=assertion@entry=0x7ffff3ac3068 "(unsigned long) (size) >= (unsigned 
long) (nb)", file=file@entry=0x7ffff3abebe5 "malloc.c", 
    line=line@entry=3695, function=function@entry=0x7ffff3abef6d 
<__func__.11522> "_int_malloc") at malloc.c:293
No locals.
#3  0x00007ffff39d7d51 in _int_malloc (av=0x7ffff3cff620 <main_arena>, 
bytes=27) at malloc.c:3695
        p = <optimized out>
        iters = <optimized out>
        nb = 48
        idx = <optimized out>
        bin = <optimized out>
        victim = 0xad3660
        size = <optimized out>
        victim_index = <optimized out>
        remainder = <optimized out>
        remainder_size = <optimized out>
        block = <optimized out>
        bit = <optimized out>
        map = <optimized out>
        fwd = <optimized out>
        bck = <optimized out>
        errstr = 0x0
        __func__ = "_int_malloc"
#4  0x00007ffff39d8e20 in __GI___libc_malloc (bytes=27) at malloc.c:2891
        ar_ptr = 0x7ffff3cff620 <main_arena>
        victim = 0x6
        __func__ = "__libc_malloc"
#5  0x00007ffff44982d8 in operator new(unsigned long) () from 
/usr/lib/x86_64-linux-gnu/libstdc++.so.6
No symbol table info available.
#6  0x00007ffff44f7e59 in std::string::_Rep::_S_create(unsigned long, unsigned 
long, std::allocator<char> const&) () from 
/usr/lib/x86_64-linux-gnu/libstdc++.so.6
No symbol table info available.
#7  0x00007ffff44f97d5 in char* std::string::_S_construct<char const*>(char 
const*, char const*, std::allocator<char> const&, std::forward_iterator_tag) ()
   from /usr/lib/x86_64-linux-gnu/libstdc++.so.6
No symbol table info available.
#8  0x00007ffff44f9c06 in std::basic_string<char, std::char_traits<char>, 
std::allocator<char> >::basic_string(char const*, std::allocator<char> const&) 
()
   from /usr/lib/x86_64-linux-gnu/libstdc++.so.6
No symbol table info available.
#9  0x00007ffff4c985e1 in Exiv2::XmpNsInfo::operator==(Exiv2::XmpNsInfo::Prefix 
const&) const () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#10 0x00007ffff4c996cb in Exiv2::XmpProperties::nsInfo(std::string const&) () 
from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#11 0x00007ffff4c99880 in Exiv2::XmpProperties::ns(std::string const&) () from 
/usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#12 0x00007ffff4c9a232 in Exiv2::XmpKey::Impl::decomposeKey(std::string const&) 
() from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#13 0x00007ffff4c9a655 in Exiv2::XmpKey::XmpKey(std::string const&) () from 
/usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#14 0x00007ffff4cfcf56 in Exiv2::XmpData::operator[](std::string const&) () 
from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#15 0x00007ffff4cb24a7 in Exiv2::RiffVideo::infoTagsHandler() () from 
/usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#16 0x00007ffff4cb6355 in Exiv2::RiffVideo::decodeBlock() () from 
/usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#17 0x00007ffff4cb5f88 in Exiv2::RiffVideo::tagDecoder(Exiv2::DataBuf&, 
unsigned long) () from /usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#18 0x00007ffff4cb6355 in Exiv2::RiffVideo::decodeBlock() () from 
/usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#19 0x00007ffff4cb66f8 in Exiv2::RiffVideo::readMetadata() () from 
/usr/lib/x86_64-linux-gnu/libexiv2.so.13
No symbol table info available.
#20 0x000000000044e68c in _ExifDataOriginal (path=<optimized out>, 
this=0xa77260) at exiv2.cc:190
        pathl = 0xa98d40 "/tmp/a/SA01.cdr"
#21 _ExifDataProcessed (modified_xmp=0x0, sidecar_path=0x0, path=<optimized 
out>, this=0xa94190) at exiv2.cc:294
No locals.
#22 exif_read (path=<optimized out>, sidecar_path=sidecar_path@entry=0x0, 
modified_xmp=0x0) at exiv2.cc:433
        __func__ = "exif_read"
#23 0x000000000044c8c9 in exif_read_fd (fd=0xa05540) at exif-common.c:677
        sidecar_path = 0x0
        __FUNCTION__ = "exif_read_fd"
#24 0x000000000046091e in image_loader_setup_source (il=il@entry=0x9f8900) at 
image-load.c:738
        exif = <optimized out>
        st = {st_dev = 10455296, st_ino = 11496768, st_nlink = 0, st_mode = 
4913840, st_uid = 0, st_gid = 0, __pad0 = 0, st_rdev = 10769088, st_size = 0, 
st_blksize = 4313154, st_blocks = 1, 
          st_atim = {tv_sec = 7, tv_nsec = 10477152}, st_mtim = {tv_sec = 1834, 
tv_nsec = 10389424}, st_ctim = {tv_sec = 5099851, tv_nsec = 10533808}, 
__glibc_reserved = {11111744, 0, 
            -4450215724934223360}}
        pathl = <optimized out>
#25 0x0000000000460ca3 in image_loader_setup_source (il=0x9f8900) at 
image-load.c:1025
No locals.
#26 image_loader_start_thread (il=0x9f8900) at image-load.c:1001
No locals.
#27 image_loader_start (il=0x9f8900) at image-load.c:1031
No locals.
#28 0x00000000004af368 in thumb_loader_std_setup (tl=tl@entry=0xa452c0, 
fd=<optimized out>) at thumb_standard.c:627
No locals.
#29 0x00000000004af8ef in thumb_loader_std_next_source (tl=tl@entry=0xa452c0, 
remove_broken=remove_broken@entry=0) at thumb_standard.c:532
No locals.
#30 0x00000000004b02e1 in thumb_loader_std_start (tl=0xa452c0, fd=<optimized 
out>) at thumb_standard.c:701
        found = 0
        thumb_cache = 0x9329e0 "/home/naoliv/.thumbnails"
        st = {st_dev = 2049, st_ino = 2490401, st_nlink = 1, st_mode = 33060, 
st_uid = 1000, st_gid = 1000, __pad0 = 0, st_rdev = 0, st_size = 13610, 
st_blksize = 4096, st_blocks = 32, 
          st_atim = {tv_sec = 1412187589, tv_nsec = 156472815}, st_mtim = 
{tv_sec = 1047324064, tv_nsec = 0}, st_ctim = {tv_sec = 1412186940, tv_nsec = 
484486193}, __glibc_reserved = {0, 0, 
            0}}
#31 0x00000000004aebad in thumb_loader_start (tl=0xa452c0, 
fd=fd@entry=0xa05540) at thumb.c:325
        cache_path = 0x0
#32 0x00000000004bc787 in vf_thumb_next (vf=0x99fe60) at view_file.c:911
        fd = 0xa05540
        vf = 0x99fe60
#33 0x00000000004bc848 in vf_thumb_common_cb (tl=<optimized out>, 
data=0x99fe60) at view_file.c:864
        vf = 0x99fe60
#34 0x00000000004afdca in thumb_loader_std_done_cb (il=<optimized out>, 
data=0xa452c0) at thumb_standard.c:571
        tl = 0xa452c0
        pixbuf = <optimized out>
#35 0x00007ffff615d474 in _g_closure_invoke_va (closure=0x6242, 
closure@entry=0x9f3810, return_value=0x6242, return_value@entry=0x0, 
instance=0x6, instance@entry=0x9f8c60, 
    args=0xffffffffffffffff, args@entry=0x7fffffffde00, n_params=-134526592, 
param_types=0x7ffff3cfdbe0 <_IO_helper_jumps>) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./gobject/gclosure.c:831
        marshal = 0x0
        marshal_data = 0x7ffff7fb4980
        __FUNCTION__ = "_g_closure_invoke_va"
#36 0x00007ffff6177057 in g_signal_emit_valist (instance=0x9f8c60, 
signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7fffffffde00)
    at /build/glib2.0-Dv_k6u/glib2.0-2.42.0/./gobject/gsignal.c:3218
        return_accu = <optimized out>
        accu = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 0, v_ulong 
= 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer = 0x0}, 
{v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
v_double = 0, v_pointer = 0x0}}}
        accumulator = 0x0
        emission = {next = 0x0, instance = 0x9f8c60, ihint = {signal_id = 262, 
detail = 0, run_type = G_SIGNAL_RUN_FIRST}, state = EMISSION_RUN, chain_type = 
10477152}
        signal_id = 262
        instance_type = <optimized out>
        emission_return = {g_type = 0, data = {{v_int = 0, v_uint = 0, v_long = 
0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer 
= 0x0}, {v_int = 0, v_uint = 0, 
              v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, 
v_double = 0, v_pointer = 0x0}}}
        rtype = 4
        static_scope = 0
        fastpath_handler = <optimized out>
        closure = 0x9f3810
        run_type = <optimized out>
        l = <optimized out>
        fastpath = <optimized out>
        instance_and_params = <optimized out>
        signal_return_type = <optimized out>
        param_values = <optimized out>
        i = <optimized out>
        n_params = <optimized out>
        __FUNCTION__ = "g_signal_emit_valist"
#37 0x00007ffff61779af in g_signal_emit (instance=<optimized out>, 
signal_id=<optimized out>, detail=detail@entry=0) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./gobject/gsignal.c:3365
        var_args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 
0x7fffffffdee0, reg_save_area = 0x7fffffffde20}}
#38 0x000000000045ffd3 in image_loader_emit_done_cb (data=<optimized out>) at 
image-load.c:273
        il = <optimized out>
#39 0x00007ffff5e87b6d in g_main_dispatch (context=0x786d60) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:3111
        dispatch = 0x7ffff5e846d0 <g_idle_dispatch>
        prev_source = 0x0
        was_in_call = 0
        user_data = 0x9f8c60
        callback = 0x45ffc0 <image_loader_emit_done_cb>
        cb_funcs = <optimized out>
        cb_data = 0x7fffe8009350
        need_destroy = <optimized out>
        source = 0x7fffe8003e50
        current = 0x794040
        i = 0
#40 g_main_context_dispatch (context=context@entry=0x786d60) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:3710
No locals.
#41 0x00007ffff5e87f48 in g_main_context_iterate (context=0x786d60, 
block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>)
    at /build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:3781
        max_priority = 300
        timeout = 0
        some_ready = 1
        nfds = <optimized out>
        allocated_nfds = 3
        fds = 0x9b7d80
#42 0x00007ffff5e88272 in g_main_loop_run (loop=0x9b8090) at 
/build/glib2.0-Dv_k6u/glib2.0-2.42.0/./glib/gmain.c:3975
        __FUNCTION__ = "g_main_loop_run"
#43 0x00007ffff78c2bc7 in IA__gtk_main () at 
/build/gtk+2.0-zztKf7/gtk+2.0-2.24.24/gtk/gtkmain.c:1257
        tmp_list = 0x0
        functions = 0x0
        init = <optimized out>
        loop = 0x9b8090
#44 0x000000000041a60a in main (argc=1, argv=0x7fffffffe278) at main.c:921
        first_collection = <optimized out>
        buf = 0x792cb0 "0"
        cd = 0x0
A debugging session is active.

        Inferior 1 [process 25154] will be killed.

Quit anyway? (y or n) 

Attachment: SA01.cdr
Description: Binary data

Reply via email to