Package: geeqie
Version: 1:1.2-3+b1
Severity: important
Dear Maintainer,
while using geeqie, I can more or less reliably reproduce a crash by
browsing rapidly (using the mouse wheel) through 16MP photos.
It seems using fullscreen at least once helps triggering the bug.
See attached backtrace.
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.14-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to fr_FR.UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages geeqie depends on:
ii geeqie-common 1:1.2-3
ii libatk1.0-0 2.14.0-1
ii libc6 2.19-13
ii libcairo2 1.14.0-2.1
ii libexiv2-13 0.24-4
ii libfontconfig1 2.11.0-6.3
ii libfreetype6 2.5.2-2
ii libgcc1 1:4.9.2-3
ii libgdk-pixbuf2.0-0 2.31.1-2+b1
ii libglib2.0-0 2.42.1-1
ii libgtk2.0-0 2.24.25-1
ii libjpeg62-turbo 1:1.3.1-8
ii liblcms2-2 2.6-3+b3
ii liblircclient0 0.9.0~pre1-1.1
ii liblua5.1-0 5.1.5-7.1
ii libpango-1.0-0 1.36.8-3
ii libpangocairo-1.0-0 1.36.8-3
ii libpangoft2-1.0-0 1.36.8-3
ii libstdc++6 4.9.2-3
ii libtiff5 4.0.3-10+b3
Versions of packages geeqie recommends:
ii cups-bsd [lpr] 1.7.5-8
ii exiftran 2.09-1+b1
ii exiv2 0.24-4
ii graphicsmagick-imagemagick-compat [imagemagick] 1.3.20-3
ii librsvg2-common 2.40.5-1
ii ufraw-batch 0.20-1
ii zenity 3.14.0-1
Versions of packages geeqie suggests:
ii geeqie-dbg 1:1.2-3+b1
ii gimp 2.8.14-1+b1
ii libjpeg-progs 1:1.3.1-3
ii libjpeg-turbo-progs [libjpeg-progs] 1:1.3.1-3
ii ufraw 0.20-1
pn xpaint <none>
-- no debconf information
Thread 2 (Thread 0x7fffee07b700 (LWP 10987)):
#0 syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1 0x00007ffff5ebe657 in g_cond_wait_until (cond=cond@entry=0xcc1e88,
mutex=mutex@entry=0xcc1e80, end_time=end_time@entry=10982960704486) at
/tmp/buildd/glib2.0-2.42.1/./glib/gthread-posix.c:1443
#2 0x00007ffff5e4ea69 in g_async_queue_pop_intern_unlocked (queue=0xcc1e80,
wait=wait@entry=1, end_time=10982960704486) at
/tmp/buildd/glib2.0-2.42.1/./glib/gasyncqueue.c:422
#3 0x00007ffff5e4f0c8 in g_async_queue_timeout_pop_unlocked (queue=<optimized
out>, timeout=timeout@entry=500000) at
/tmp/buildd/glib2.0-2.42.1/./glib/gasyncqueue.c:570
#4 0x00007ffff5ea12a0 in g_thread_pool_wait_for_new_task (pool=0xcc4c50) at
/tmp/buildd/glib2.0-2.42.1/./glib/gthreadpool.c:262
#5 g_thread_pool_thread_proxy (data=<optimized out>) at
/tmp/buildd/glib2.0-2.42.1/./glib/gthreadpool.c:296
#6 0x00007ffff5ea0935 in g_thread_proxy (data=0xb54d40) at
/tmp/buildd/glib2.0-2.42.1/./glib/gthread.c:764
#7 0x00007ffff3cfe0a4 in start_thread (arg=0x7fffee07b700) at
pthread_create.c:309
#8 0x00007ffff3a32ccd in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:111
Thread 1 (Thread 0x7ffff7fb4980 (LWP 10983)):
#0 0x000000000045cb41 in image_read_ahead_done_cb (il=<optimized out>,
data=0x9e8640) at image.c:480
#1 0x00007ffff614f474 in _g_closure_invoke_va (closure=0xb64a20,
closure@entry=0x1028680, return_value=0x9e8640, return_value@entry=0x0,
instance=0x9e8640, instance@entry=0xb64a20, args=0x40000002,
args@entry=0x7fffffffdd60,
n_params=4573904, param_types=0x0) at
/tmp/buildd/glib2.0-2.42.1/./gobject/gclosure.c:831
#2 0x00007ffff6169087 in g_signal_emit_valist (instance=0xb64a20,
signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7fffffffdd60) at
/tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3218
#3 0x00007ffff61699df in g_signal_emit (instance=<optimized out>,
signal_id=<optimized out>, detail=detail@entry=0) at
/tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:3365
#4 0x0000000000460023 in image_loader_emit_done_cb (data=<optimized out>) at
image-load.c:273
#5 0x00007ffff5e79b6d in g_main_dispatch (context=0x7904e0) at
/tmp/buildd/glib2.0-2.42.1/./glib/gmain.c:3111
#6 g_main_context_dispatch (context=context@entry=0x7904e0) at
/tmp/buildd/glib2.0-2.42.1/./glib/gmain.c:3710
#7 0x00007ffff5e79f48 in g_main_context_iterate (context=0x7904e0,
block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at
/tmp/buildd/glib2.0-2.42.1/./glib/gmain.c:3781
#8 0x00007ffff5e7a272 in g_main_loop_run (loop=0xb31000) at
/tmp/buildd/glib2.0-2.42.1/./glib/gmain.c:3975
#9 0x00007ffff78be4b7 in gtk_main () from
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0
#10 0x000000000041a60a in main (argc=1, argv=0x7fffffffe1e8) at main.c:921
quit
A debugging session is active.
Inferior 1 [process 10983] will be killed.
Quit anyway? (y or n) rax 0x0 0
rbx 0x9e8560 10388832
rcx 0x40000002 1073741826
rdx 0x9e8560 10388832
rsi 0x9e8560 10388832
rdi 0xb61c60 11934816
rbp 0x0 0x0
rsp 0x7fffffffdb60 0x7fffffffdb60
r8 0x45cad0 4573904
r9 0x0 0
r10 0x0 0
r11 0x1021ec0 16916160
r12 0x0 0
r13 0xb61c60 11934816
r14 0x7fffffffdd60 140737488346464
r15 0x0 0
rip 0x45cb41 0x45cb41 <image_read_ahead_done_cb+113>
eflags 0x10246 [ PF ZF IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0 0
es 0x0 0
fs 0x0 0
gs 0x0 0
=> 0x45cb41 <image_read_ahead_done_cb+113>: cmpq $0x0,0x78(%rbp)
0x45cb46 <image_read_ahead_done_cb+118>: je 0x45cb78
<image_read_ahead_done_cb+168>
0x45cb48 <image_read_ahead_done_cb+120>: mov 0x130(%rbx),%rdi
0x45cb4f <image_read_ahead_done_cb+127>: callq 0x460b70
<image_loader_free>
0x45cb54 <image_read_ahead_done_cb+132>: movq $0x0,0x130(%rbx)
0x45cb5f <image_read_ahead_done_cb+143>: add $0x8,%rsp
0x45cb63 <image_read_ahead_done_cb+147>: mov %rbx,%rdi
0x45cb66 <image_read_ahead_done_cb+150>: pop %rbx
0x45cb67 <image_read_ahead_done_cb+151>: pop %rbp
0x45cb68 <image_read_ahead_done_cb+152>: mov $0x1,%esi
quit
A debugging session is active.
Inferior 1 [process 12772] will be killed.
Quit anyway? (y or n)
