Launchpad has imported 3 comments from the remote bug at
https://bugs.freedesktop.org/show_bug.cgi?id=94262.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2016-02-23T07:52:58+00:00 Martin Pitt wrote:

0.99.4 has a major regression, it crashes very often with

#0  0x00007fdb12e38ee0 in g_variant_is_trusted () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#1  0x00007fdb12e358b4 in g_variant_builder_add_value () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#2  0x00007fdb12e375b6 in g_variant_valist_new () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#3  0x00007fdb12e37a42 in g_variant_new_va () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#4  0x00007fdb12e37cbd in g_variant_new () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#5  0x0000556372c30515 in up_exported_daemon_complete_get_display_device 
(object=<optimized out>, invocation=0x5563746435e0, device=<optimized out>) at 
up-daemon-generated.c:1157
No locals.
#6  0x0000556372c28107 in up_daemon_get_critical_action 
(skeleton=0x55637463f100, invocation=0x5563746435e0, daemon=<optimized out>) at 
up-daemon.c:438
No locals.
#7  0x00007fdb11941e40 in ffi_call_unix64 () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libffi.so.6
No symbol table info available.
#8  0x00007fdb119418ab in ffi_call () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libffi.so.6
No symbol table info available.
#9  0x00007fdb130d57c9 in g_cclosure_marshal_generic () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#10 0x00007fdb130d4fa5 in g_closure_invoke () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#11 0x00007fdb130e6ff1 in signal_emit_unlocked_R () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#12 0x00007fdb130eed71 in g_signal_emitv () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
No symbol table info available.
#13 0x0000556372c31569 in _up_exported_daemon_skeleton_handle_method_call 
(connection=<optimized out>, sender=<optimized out>, object_path=<optimized 
out>, interface_name=0x7fdafc0067f0 "org.freedesktop.UPower", 
method_name=0x7fdafc007f60 "GetCriticalAction", parameters=<optimized out>, 
invocation=0x5563746435e0, user_data=0x55637463f100) at 
up-daemon-generated.c:1722
        skeleton = <optimized out>
        info = 0x556372e50da0 
<_up_exported_daemon_method_info_get_critical_action>
        iter = {x = {140578507495472, 0, 0, 0, 140578507489120, 
140578894309087, 0, 3579507750, 93885615510416, 140578910142288, 
93885642809936, 93885642885536, 140578507491840, 140578891213488, 0, 
140578910112173}}
        child = 0x0
        paramv = 0x5563746840b0
        num_params = <optimized out>
        num_extra = <optimized out>
        n = <optimized out>
        signal_id = 13
        return_value = {g_type = 20, data = {{v_int = 0, v_uint = 0, v_long = 
0, v_ulong = 0, v_int64 = 0, v_uint64 = 0, v_float = 0, v_double = 0, v_pointer 
= 0x0}, {v_int = 0, v_uint = 0, v_long = 0, v_ulong = 0, v_int64 = 0, v_uint64 
= 0, v_float = 0, v_double = 0, v_pointer = 0x0}}}
        __func__ = "_up_exported_daemon_skeleton_handle_method_call"
#14 0x00007fdb138270f1 in skeleton_intercept_handle_method_call () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
No symbol table info available.
#15 0x00007fdb1380ef5c in call_in_idle_cb () from 
/tmp/apport_sandbox_GBFpqZ/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
No symbol table info available.
#16 0x00007fdb12dfdffa in g_main_context_dispatch () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#17 0x00007fdb12dfe3a0 in g_main_context_iterate.isra () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#18 0x00007fdb12dfe6c2 in g_main_loop_run () from 
/tmp/apport_sandbox_GBFpqZ/lib/x86_64-linux-gnu/libglib-2.0.so.0
No symbol table info available.
#19 0x0000556372c27e07 in main (argc=1, argv=0x7ffe1c050778) at up-main.c:271
        error = 0x0
        context = <optimized out>
        timed_exit = 0
        immediate_exit = 0
        timer_id = 0
        verbose = 0
        state = 0x5563746362f0
        options = {{long_name = 0x556372c45159 "timed-exit", short_name = 0 
'\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe1c05059c, 
description = 0x556372c45164 "Exit after a small delay", arg_description = 
0x0}, {long_name = 0x556372c4517d "immediate-exit", short_name = 0 '\000', 
flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x7ffe1c0505a0, description = 
0x556372c45208 "Exit after the engine has loaded", arg_description = 0x0}, 
{long_name = 0x556372c4518c "verbose", short_name = 118 'v', flags = 0, arg = 
G_OPTION_ARG_NONE, arg_data = 0x7ffe1c0505a4, description = 0x556372c45230 
"Show extra debugging information", arg_description = 0x0}, {long_name = 0x0, 
short_name = 0 '\000', flags = 0, arg = G_OPTION_ARG_NONE, arg_data = 0x0, 
description = 0x0, arg_description = 0x0}}

This can be reproduced easily with calling `upower -d` once or twice.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/upower/+bug/1547793/comments/8

------------------------------------------------------------------------
On 2016-02-23T07:57:58+00:00 Martin Pitt wrote:

up-daemon-generated.c has this code:

1158        g_variant_new ("(o)",
1159                       device));

(gdb) p device
$1 = (const gchar *) 0x555555588af2 "PowerOff"

which is indeed not a valid object path. This should certainly not crash
with a segfault but trigger an assertion, so there's a glib bug as well.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/upower/+bug/1547793/comments/9

------------------------------------------------------------------------
On 2016-02-23T08:11:35+00:00 Martin Pitt wrote:

Ah, this is a copy&paste error in src/up-daemon.c:

static gboolean
up_daemon_get_critical_action (UpExportedDaemon *skeleton,
                               GDBusMethodInvocation *invocation,
                               UpDaemon *daemon)
{
        up_exported_daemon_complete_get_display_device (skeleton, invocation,
                                                        
up_backend_get_critical_action (daemon->priv->backend));

Reply at:
https://bugs.launchpad.net/ubuntu/+source/upower/+bug/1547793/comments/10


** Changed in: upower
       Status: Unknown => In Progress

** Changed in: upower
   Importance: Unknown => Critical

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to upower in Ubuntu.
https://bugs.launchpad.net/bugs/1547793

Title:
  upowerd crashed with SIGSEGV in g_variant_is_trusted()

Status in Upower:
  In Progress
Status in upower package in Ubuntu:
  In Progress
Status in upower package in Debian:
  New

Bug description:
  Crash when connecting laptop to charger.

  ProblemType: Crash
  DistroRelease: Ubuntu 16.04
  Package: upower 0.99.4-1
  ProcVersionSignature: Ubuntu 4.4.0-4.19-generic 4.4.1
  Uname: Linux 4.4.0-4-generic x86_64
  NonfreeKernelModules: wl
  ApportVersion: 2.20-0ubuntu3
  Architecture: amd64
  CrashCounter: 1
  Date: Sat Feb 20 16:18:04 2016
  ExecutablePath: /usr/lib/upower/upowerd
  InstallationDate: Installed on 2015-04-07 (319 days ago)
  InstallationMedia: Ubuntu-GNOME 15.04 "Vivid Vervet" - Beta amd64 (20150326)
  ProcCmdline: /usr/lib/upower/upowerd
  ProcEnviron:
   LANG=en_AU.UTF-8
   LANGUAGE=en_AU:en
   PATH=(custom, no user)
  SegvAnalysis:
   Segfault happened at: 0x7fdb12e38ee0:        mov    0x20(%rdi),%eax
   PC (0x7fdb12e38ee0) ok
   source "0x20(%rdi)" (0x00000020) not located in a known VMA region (needed 
readable region)!
   destination "%eax" ok
  SegvReason: reading NULL VMA
  Signal: 11
  SourcePackage: upower
  StacktraceTop:
   ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
   g_variant_builder_add_value () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
   ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
   g_variant_new_va () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
   g_variant_new () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
  Title: upowerd crashed with SIGSEGV in g_variant_builder_add_value()
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups:

To manage notifications about this bug go to:
https://bugs.launchpad.net/upower/+bug/1547793/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to