Public bug reported:

When I open new tab using :tabnew command, GVim crashes in
unity_gtk_menu_section_get_item_attributes function of libunity-
gtk3-parser0 package.

Steps to reproduce:
1. Run gvim from vim-gtk3 package
2. Type `:tabnew`
3. GVim exits, the window closes


Stack trace obtained via gdb:

mymedia@comp2:~$ gdb -silent --args gvim -f -u /dev/null -U /dev/null --noplugin
Reading symbols from gvim...(no debugging symbols found)...done.
gdb$ run
Starting program: /usr/bin/gvim -f -u /dev/null -U /dev/null --noplugin
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7fffe986d700 (LWP 11042)]
[New Thread 0x7fffe906c700 (LWP 11043)]
[New Thread 0x7fffe886b700 (LWP 11044)]

(gvim:11038): GLib-CRITICAL **: g_ptr_array_insert: assertion 'index_ <=
(gint)rarray->len' failed

** (gvim:11038): CRITICAL **: unity_gtk_menu_shell_get_item: assertion
'0 <= index && index < items->len' failed

** (gvim:11038): CRITICAL **: unity_gtk_menu_item_get_child_shell:
assertion 'UNITY_GTK_IS_MENU_ITEM (item)' failed

** (gvim:11038): CRITICAL **: unity_gtk_menu_shell_get_item: assertion
'0 <= index && index < items->len' failed

** (gvim:11038): CRITICAL **: unity_gtk_menu_item_get_label: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed

** (gvim:11038): CRITICAL **: unity_gtk_menu_item_get_icon: assertion
'UNITY_GTK_IS_MENU_ITEM (item)' failed

Thread 1 "gvim" received signal SIGSEGV, Segmentation fault.
unity_gtk_menu_section_get_item_attributes (model=<optimized out>, 
item_index=<optimized out>, 
    attributes=0x7fffffff8b90) at ../../../lib/unity-gtk-menu-section.c:130
130     ../../../lib/unity-gtk-menu-section.c: Нет такого файла или каталога.
gdb$ backtrace 
#0  0x00007fffe9a82083 in unity_gtk_menu_section_get_item_attributes 
(model=<optimized out>, item_index=<optimized out>, attributes=0x7fffffff8b90) 
at ../../../lib/unity-gtk-menu-section.c:130
#1  0x00007ffff653f23c in g_menu_model_real_iterate_item_attributes 
(model=0x555556016160 [UnityGtkMenuSection], item_index=<optimized out>) at 
././gio/gmenumodel.c:299
#2  0x00007ffff6541070 in g_menu_exporter_menu_describe_item 
(position=position@entry=1, menu=<optimized out>, menu=<optimized out>) at 
././gio/gmenuexporter.c:212
#3  0x00007ffff65414be in g_menu_exporter_menu_items_changed (model=<optimized 
out>, position=1, removed=0, added=<optimized out>, user_data=0x555555ffd4c0) 
at ././gio/gmenuexporter.c:276
#4  0x00007fffee607e18 in ffi_call_unix64 () at 
/usr/lib/x86_64-linux-gnu/libffi.so.6
#5  0x00007fffee60787a in ffi_call () at /usr/lib/x86_64-linux-gnu/libffi.so.6
#10 0x00007ffff626efaf in <emit signal ??? on instance 0x555556016160 
[UnityGtkMenuSection]> (instance=<optimized out>, signal_id=<optimized out>, 
detail=<optimized out>)
    at ././gobject/gsignal.c:3447
    #6  0x00007ffff62547ae in g_cclosure_marshal_generic 
(closure=0x55555607fd10, return_gvalue=0x0, n_param_values=<optimized out>, 
param_values=<optimized out>, invocation_hint=<optimized out>, 
marshal_data=<optimized out>) at ././gobject/gclosure.c:1490
    #7  0x00007ffff6253f75 in g_closure_invoke (closure=0x55555607fd10, 
return_value=return_value@entry=0x0, n_param_values=4, 
param_values=param_values@entry=0x7fffffff9250, 
invocation_hint=invocation_hint@entry=0x7fffffff91d0) at 
././gobject/gclosure.c:804
    #8  0x00007ffff6265f82 in signal_emit_unlocked_R 
(node=node@entry=0x555555f38af0, detail=detail@entry=0, 
instance=instance@entry=0x555556016160, 
emission_return=emission_return@entry=0x0, 
instance_and_params=instance_and_params@entry=0x7fffffff9250) at 
././gobject/gsignal.c:3635
    #9  0x00007ffff626ebcc in g_signal_emit_valist (instance=<optimized out>, 
signal_id=<optimized out>, detail=<optimized out>, 
var_args=var_args@entry=0x7fffffff9440)
    at ././gobject/gsignal.c:3391
#14 0x00007ffff626efaf in <emit signal ??? on instance 0x555555e7b9c0 
[GtkMenu]> (instance=<optimized out>, signal_id=<optimized out>, 
detail=<optimized out>) at ././gobject/gsignal.c:3447
    #11 0x00007ffff6253f75 in g_closure_invoke (closure=0x555556054e20, 
return_value=return_value@entry=0x0, n_param_values=3, 
param_values=param_values@entry=0x7fffffff96d0, 
invocation_hint=invocation_hint@entry=0x7fffffff9650) at 
././gobject/gclosure.c:804
    #12 0x00007ffff6265f82 in signal_emit_unlocked_R 
(node=node@entry=0x555555aee490, detail=detai---Type <return> to continue, or q 
<return> to quit---
l@entry=0, instance=instance@entry=0x555555e7b9c0, 
emission_return=emission_return@entry=0x0, 
instance_and_params=instance_and_params@entry=0x7fffffff96d0) at 
././gobject/gsignal.c:3635
    #13 0x00007ffff626ebcc in g_signal_emit_valist (instance=<optimized out>, 
signal_id=<optimized out>, detail=<optimized out>, 
var_args=var_args@entry=0x7fffffff98b0)
    at ././gobject/gsignal.c:3391
#15 0x000055555575edef in gui_mch_add_menu_item ()
#16 0x000055555566c0e0 in  ()
#17 0x000055555566c976 in ex_menu ()
#18 0x000055555561e4cf in do_cmdline ()
#19 0x00005555555e7afe in ex_execute ()
#20 0x000055555561e4cf in do_cmdline ()
#21 0x0000555555746879 in call_func ()
#22 0x00005555557472d5 in get_func_tv ()
#23 0x0000555555749d0f in ex_call ()
#24 0x000055555561e4cf in do_cmdline ()
#25 0x0000555555746879 in call_func ()
#26 0x00005555557472d5 in get_func_tv ()
#27 0x0000555555749d0f in ex_call ()
#28 0x000055555561e4cf in do_cmdline ()
#29 0x0000555555639d76 in  ()
#30 0x000055555563a5e4 in apply_autocmds ()
#31 0x00005555555c2965 in buflist_new ()
#32 0x000055555560323b in do_ecmd ()
#33 0x00005555556228c4 in do_exedit ()
#34 0x000055555562300b in ex_splitview ()
#35 0x000055555561e4cf in do_cmdline ()
#36 0x0000555555690135 in  ()
#37 0x0000555555699b85 in normal_cmd ()
#38 0x0000555555793435 in main_loop ()
#39 0x00005555557945b0 in vim_main2 ()
#40 0x00005555555b7421 in main ()
gdb$ continue 
Continuing.
Vim: Caught deadly signal SEGV
Vim: Finished.

Thread 1 "gvim" received signal SIGSEGV, Segmentation fault.
0x00007ffff2d78b17 in kill () at ../sysdeps/unix/syscall-template.S:84
84      ../sysdeps/unix/syscall-template.S: Нет такого файла или каталога.
gdb$ quit
A debugging session is active.

        Inferior 1 [process 11038] will be killed.

Quit anyway? (y or n) y
mymedia@comp2:~$


Versions:

mymedia@comp2:~$ LANG=C gvim --version
VIM - Vi IMproved 8.0 (2016 Sep 12, compiled Dec 06 2016 10:03:48)
Included patches: 1-95
Modified by pkg-vim-maintain...@lists.alioth.debian.org
Compiled by pkg-vim-maintain...@lists.alioth.debian.org
Huge version with GTK3 GUI.  Features included (+) or not (-):
+acl             +file_in_path    +mouse_sgr       +tag_old_static
+arabic          +find_in_path    -mouse_sysmouse  -tag_any_white
+autocmd         +float           +mouse_urxvt     +tcl
+balloon_eval    +folding         +mouse_xterm     +termguicolors
+browse          -footer          +multi_byte      +terminfo
++builtin_terms  +fork()          +multi_lang      +termresponse
+byte_offset     +gettext         -mzscheme        +textobjects
+channel         -hangul_input    +netbeans_intg   +timers
+cindent         +iconv           +num64           +title
+clientserver    +insert_expand   +packages        +toolbar
+clipboard       +job             +path_extra      +user_commands
+cmdline_compl   +jumplist        +perl            +vertsplit
+cmdline_hist    +keymap          +persistent_undo +virtualedit
+cmdline_info    +lambda          +postscript      +visual
+comments        +langmap         +printer         +visualextra
+conceal         +libcall         +profile         +viminfo
+cryptv          +linebreak       -python          +vreplace
+cscope          +lispindent      +python3         +wildignore
+cursorbind      +listcmds        +quickfix        +wildmenu
+cursorshape     +localmap        +reltime         +windows
+dialog_con_gui  +lua             +rightleft       +writebackup
+diff            +menu            +ruby            +X11
+digraphs        +mksession       +scrollbind      -xfontset
+dnd             +modify_fname    +signs           +xim
-ebcdic          +mouse           +smartindent     +xpm
+emacs_tags      +mouseshape      +startuptime     +xsmp_interact
+eval            +mouse_dec       +statusline      +xterm_clipboard
+ex_extra        +mouse_gpm       -sun_workshop    -xterm_save
+extra_search    -mouse_jsbterm   +syntax          
+farsi           +mouse_netterm   +tag_binary      
   system vimrc file: "$VIM/vimrc"
     user vimrc file: "$HOME/.vimrc"
 2nd user vimrc file: "~/.vim/vimrc"
      user exrc file: "$HOME/.exrc"
  system gvimrc file: "$VIM/gvimrc"
    user gvimrc file: "$HOME/.gvimrc"
2nd user gvimrc file: "~/.vim/gvimrc"
       defaults file: "$VIMRUNTIME/defaults.vim"
    system menu file: "$VIMRUNTIME/menu.vim"
  fall-back for $VIM: "/usr/share/vim"
Compilation: gcc -c -I. -Iproto -DHAVE_CONFIG_H -DFEAT_GUI_GTK  -pthread 
-I/usr/include/gtk-3.0 -I/usr/include/at-spi2-atk/2.0 -I/usr/include/at-spi-2.0 
-I/usr/include/dbus-1.0 -I/usr/lib/x86_64-linux-gnu/dbus-1.0/include 
-I/usr/include/gtk-3.0 -I/usr/include/gio-unix-2.0/ -I/usr/include/mirclient 
-I/usr/include/mircommon -I/usr/include/mircookie -I/usr/include/cairo 
-I/usr/include/pango-1.0 -I/usr/include/harfbuzz -I/usr/include/pango-1.0 
-I/usr/include/atk-1.0 -I/usr/include/cairo -I/usr/include/pixman-1 
-I/usr/include/freetype2 -I/usr/include/libpng16 -I/usr/include/gdk-pixbuf-2.0 
-I/usr/include/libpng16 -I/usr/include/glib-2.0 
-I/usr/lib/x86_64-linux-gnu/glib-2.0/include -Wdate-time  -g -O2 
-fdebug-prefix-map=/build/vim-3w9TQv/vim-8.0.0095=. -fPIE 
-fstack-protector-strong -Wformat -Werror=format-security -U_FORTIFY_SOURCE 
-D_FORTIFY_SOURCE=1       
Linking: gcc   -L. -Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now 
-fstack-protector -rdynamic -Wl,-export-dynamic -Wl,-E  
-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now -Wl,--as-needed -o 
vim   -lgtk-3 -lgdk-3 -lpangocairo-1.0 -lpango-1.0 -latk-1.0 -lcairo-gobject 
-lcairo -lgdk_pixbuf-2.0 -lgio-2.0 -lgobject-2.0 -lglib-2.0 -lSM -lICE -lXpm 
-lXt -lX11 -lXdmcp -lSM -lICE  -lm -ltinfo -lnsl  -lselinux  -lacl -lattr -lgpm 
-ldl  -L/usr/lib -llua5.2 -Wl,-E  -fstack-protector-strong -L/usr/local/lib  
-L/usr/lib/x86_64-linux-gnu/perl/5.24/CORE -lperl -ldl -lm -lpthread -lcrypt  
-L/usr/lib/python3.5/config-3.5m-x86_64-linux-gnu -lpython3.5m -lpthread -ldl 
-lutil -lm -L/usr/lib/x86_64-linux-gnu -ltcl8.6 -ldl -lz -lpthread -lieee -lm 
-lruby-2.3 -lpthread -lgmp -ldl -lcrypt -lm     
mymedia@comp2:~$ LANG=C apt policy libunity-gtk3-parser0 vim-gtk3
libunity-gtk3-parser0:
  Installed: 0.0.0+16.10.20160913-0ubuntu1
  Candidate: 0.0.0+16.10.20160913-0ubuntu1
  Version table:
 *** 0.0.0+16.10.20160913-0ubuntu1 500
        500 http://mirror.yandex.ru/ubuntu devel/main amd64 Packages
        100 /var/lib/dpkg/status
vim-gtk3:
  Installed: 2:8.0.0095-1ubuntu2
  Candidate: 2:8.0.0095-1ubuntu2
  Version table:
     2:8.0.0134-1 200
        200 http://mirror.yandex.ru/debian unstable/main amd64 Packages
 *** 2:8.0.0095-1ubuntu2 500
        500 http://mirror.yandex.ru/ubuntu devel/universe amd64 Packages
        100 /var/lib/dpkg/status
N: Ignoring file '50unattended-upgrades.ucf-dist' in directory 
'/etc/apt/apt.conf.d/' as it has an invalid filename extension
mymedia@comp2:~$ lsb_release -rd
Description:    Ubuntu Zesty Zapus (development branch)
Release:        17.04
mymedia@comp2:~$ 


Sorry for my bad English, this is not my native language, but what else should 
I provide?

ProblemType: Bug
DistroRelease: Ubuntu 17.04
Package: vim-gtk3 2:8.0.0095-1ubuntu2
ProcVersionSignature: Ubuntu 4.8.0-30.32-generic 4.8.6
Uname: Linux 4.8.0-30-generic x86_64
ApportVersion: 2.20.4-0ubuntu1
Architecture: amd64
CurrentDesktop: Unity
Date: Fri Dec 16 22:05:07 2016
ExecutablePath: /usr/bin/vim.gtk3
SourcePackage: vim
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: vim (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug zesty

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1650666

Title:
  GVim crashes when opening new tab

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/vim/+bug/1650666/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to