Thunar crashes now and then with a segmentation fault. Steps to Reproduce: 1) Start thunar. 2) Wait. No specific action is required for thunar to crash. I just have to wait a few minutes and thunar crashes. Output in console says "Segmentation fault (core dumped)", there is no core file though. Executing generate-core-file in gdb outputs "Couldn't get registers: No such process." Output of "bt full" in gdb: #0 0x00007ffff4bca887 in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #1 0x00007ffff4bcad5e in g_slice_alloc0 () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #2 0x00007ffff4bad244 in g_source_new () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #3 0x00007ffff4bb00a9 in g_timeout_source_new () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #4 0x00007ffff510a4c2 in ?? () from /usr/lib/libgio-2.0.so.0 No symbol table info available. #5 0x00007ffff4bafdf3 in ?? () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #6 0x00007ffff4baf296 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #7 0x00007ffff4baf5e8 in ?? () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #8 0x00007ffff4baf9ea in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 No symbol table info available. #9 0x00007ffff6a3b9d7 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0 No symbol table info available. #10 0x0000000000424262 in main (argc=1, argv=0x7fffffffe538) at main.c:310 session_client = 0xc84b40 dbus_service = 0x0 application = 0x7e76c0 error = 0x0 working_directory = 0x7f5820 "XSMP" filenames = 0x7f59e0 startup_id = 0x0 Any help getting more detailed debug info would be appreciated. Thunar version 1.6.3git-fc4a4b6 crashes as well.
We are seeing this type of crash reported several hundred times per day in Xubuntu with the automatic error reporting. However, you seem to be the only person who can reproduce it reliably. It is crashing inside the glib memory allocator which indicates random memory corruption in a totally different part of the code, and seems to give many different types of crash. Please install debugging symbols for glib and gtk to get the missing symbols filled in, then redo the stack trace. Then please run it in valgrind like this: G_SLICE=always-malloc G_DEBUG=gc-friendly valgrind -v --tool=memcheck --num-callers=40 --track-origins=yes --log-file=valgrind.log thunar And then attach valgrind.log. It will run really slow, don't worry about that.
Also is there anything unusual about the way you're running thunar? Are you leaving it open on a directory where the files are constantly changing? strace may also be useful, to see what activity it is doing leading up to the crash.
Another thing to try is: G_SLICE=debug-blocks gdb thunar
I was about to investigate this further today, but (un?)fortunately the random crashing has stopped. Suddenly everything's fine. Somehow I'm feeling unsatisfied now.
Crashing has started again.
The crashing has started again. However I'm unable to attach any logs, I get logged out by the site repeatedly.
Created attachment 5406 GDB trace log
Created attachment 5407 Valgrind log Thunar did not crash when running with valgrind. I just quit thunar and attached the log anyway, as it may still be helpful.
These logs are no use out of context. How did you run it? How did it crash? What signal was received?
Couldn't you just read my initial bug report? Everything necessary should be in there. GDB log created with "gdb thunar", in gdb console "r". I ran valgrind just the way you told me to. Crash is a segmentation fault. That's it, or did I miss something?
Are you saying that the crash is reproducable but NOT if you run it with the valgrind command? Or did it just crash once and now you can't reproduce it at all? Please try the command from comment 3.
I can reproduce it, the crash occurs usually within 10 seconds to two minutes. I ran it with valgrind for ~10 minutes, then gave up. Somehow I missed your comment 3, sorry. I'll attach a new log.
Created attachment 5408 G_SLICE=debug-blocks gdb thunar
Created attachment 5409 G_SLICE=debug-blocks gdb thunar
That is really weird. Everything is consistent with memory corruption caused by mismatch between memory allocators - forcing it to always use malloc prevents the crash. But your last log crashes while allocating. G_SLICE=debug-blocks should cause a crash on deallocation.
Please let me know if I can help any further.
Turns out this is a gtk bug. Report: https://bugzilla.gnome.org/show_bug.cgi?id=723366 Here is where they fixed it in Gtk3: https://git.gnome.org/browse/gtk+/commit/gtk/gtkmountoperation.c?id=05f2f634260519b5448ffd53e8883412c0251443 It was never fixed in Gtk2.
Actually, since your steps to reproduce don't include closing the window, this bug is probably a totally different memory corruption crash to the one I've been hunting.
Maybe try an up-to-date version. I am closing this bug as there hasn't been any progress with it. Feel free to reopen if you deem necessary. Trying to clean up the bug tracker a bit...
*** Bug 11880 has been marked as a duplicate of this bug. ***
Reopening. Some people report they can still reproduce this (e.g. bug #11880).
I'm getting this on Void Linux Backtrace: - - - - - - (gdb) bt full #0 0x00007ffff6bcf630 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #1 0x00007ffff65c7d78 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #2 0x00007ffff65c8cba in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #3 0x00007ffff65cb714 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #4 0x00007ffff65cb91d in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #5 0x00007ffff4a73d6d in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #6 0x00007ffff4a74050 in ?? () from /usr/lib/libglib-2.0.so.0 #7 0x00007ffff4a74372 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #8 0x00007ffff6903ce1 in gtk_dialog_run () from /usr/lib/libgtk-x11-2.0.so.0 #9 0x0000000000426330 in ?? () #10 0x000000000046ac77 in ?? () #11 0x00007ffff4d47ec5 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0 #12 0x00007ffff4d59b7c in ?? () from /usr/lib/libgobject-2.0.so.0 #13 0x00007ffff4d621d8 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0 #14 0x00007ffff4d6243f in g_signal_emit () from /usr/lib/libgobject-2.0.so.0 #15 0x00007ffff68a4e51 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #16 0x00007ffff68a4f41 in gtk_action_activate () from /usr/lib/libgtk-x11-2.0.so.0 #17 0x00007ffff69bfd30 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #18 0x00007ffff4d480f4 in ?? () from /usr/lib/libgobject-2.0.so.0 #19 0x00007ffff4d61ae7 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0 #20 0x00007ffff4d6243f in g_signal_emit () from /usr/lib/libgobject-2.0.so.0 #21 0x00007ffff6b2d3c2 in gtk_widget_activate () from /usr/lib/libgtk-x11-2.0.so.0 #22 0x00007ffff69c461b in gtk_menu_shell_activate_item () from /usr/lib/libgtk-x11-2.0.so.0 #23 0x00007ffff69c3230 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #24 0x00007ffff69b630b in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #25 0x00007ffff69aadce in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #26 0x00007ffff4d47ec5 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0 #27 0x00007ffff4d59a72 in ?? () from /usr/lib/libgobject-2.0.so.0 #28 0x00007ffff4d61ce5 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0 #29 0x00007ffff4d6243f in g_signal_emit () from /usr/lib/libgobject-2.0.so.0 #30 0x00007ffff6b2d2a4 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #31 0x00007ffff6b2cdc8 in gtk_widget_event () from /usr/lib/libgtk-x11-2.0.so.0 #32 0x00007ffff69a9317 in gtk_propagate_event () from /usr/lib/libgtk-x11-2.0.so.0 #33 0x00007ffff69a7de1 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0 #34 0x00007ffff65cb963 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #35 0x00007ffff4a73d6d in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #36 0x00007ffff4a74050 in ?? () from /usr/lib/libglib-2.0.so.0 #37 0x00007ffff4a74372 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #38 0x000000000043be5a in ?? () #39 0x000000000047072f in ?? () #40 0x000000000047084b in ?? () #41 0x00007ffff69aadce in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #42 0x00007ffff4d47ec5 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0 #43 0x00007ffff4d59b7c in ?? () from /usr/lib/libgobject-2.0.so.0 #44 0x00007ffff4d61ce5 in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0 #45 0x00007ffff4d6243f in g_signal_emit () from /usr/lib/libgobject-2.0.so.0 #46 0x00007ffff6b2d2a4 in ?? () from /usr/lib/libgtk-x11-2.0.so.0 #47 0x00007ffff6b2cdc8 in gtk_widget_event () from /usr/lib/libgtk-x11-2.0.so.0 #48 0x00007ffff69a9317 in gtk_propagate_event () from /usr/lib/libgtk-x11-2.0.so.0 #49 0x00007ffff69a7de1 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0 #50 0x00007ffff65cb963 in ?? () from /usr/lib/libgdk-x11-2.0.so.0 #51 0x00007ffff4a73d6d in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #52 0x00007ffff4a74050 in ?? () from /usr/lib/libglib-2.0.so.0 #53 0x00007ffff4a74372 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #54 0x00007ffff69a7369 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0 #55 0x000000000041fc3e in ?? () #56 0x00007ffff4489800 in __libc_start_main (main=0x41f7a0, argc=1, argv=0x7fffffffe538, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe528) at libc-start.c:289 result = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 6185736941815576266, 4324512, 140737488348464, 0, 0, -6185736321614629174, -6185747998012754230}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x4854e0, 0x7fffffffe538}, data = {prev = 0x0, cleanup = 0x0, canceltype = 4740320}}} not_first_call = <optimized out> #57 0x000000000041fcc9 in ?? ()
Steps to reproduce * Open Thunar * Go to a folder on a remote share mounted with sshfs * Copy a folder (with contents) from the remote mount to my local drive * Right-click the folder on the remote mount and try to Delete * Segfault This was reproduced twice in a row.
Will B, this is not the same problem (compare the backtraces, "g_slice_alloc"). Besides, your bug is not reproducible here and I'm using sshfs all day. Update thunar to the latest version, and if you still have the problem, please open a _new_ bug.
I *am* running the very latest (1.6.8). Sorry for posting to the wrong bug and wasting your time. :-(
After thinking about this once more, I decided to close this bug again. Bug #11880 for which this has been reopened was most certainly caused by the missing return value in the thunar reload idle function and got fixed in 1.6.10. Anyone feel free to reopen if you are sure you suffer from this same bug and have more information to provide that could help with this (if it is still reproducible).
Waaait, I'm still getting this with 1.6.10! Debugging just takes a while because I have to wait for it to happen (or not happen). Please reopen. (In reply to Harald Judt from comment #1 on bug 11880) > Without steps to reproduce, I do not > know how to track this. So, some suggestions... > > 1) Which glib version do you use? For comparison, I have installed 2.42.2 > here. Do you see any suspicious rise in memory consumption when this happens? > glib-2.42.2 and no suspicious memory consumption as far as I can tell. > 2) What could help is if you added debugging statements in thunar-file.c, > like: > > http://git.xfce.org/xfce/thunar/tree/thunar/thunar-file.c#n651 > > gchar *p = g_file_get_path (path); > g_print ("thunar_file_monitor_update: %s\n", p); > g_free (p); > > To the beginning of the function. Similar to the folder monitor function: > http://git.xfce.org/xfce/thunar/tree/thunar/thunar-folder.c#n706 Which target should be monitored in thunar_folder_monitor? There's an event_file and other_file. Anyway, I tried both, with seems to cause an assertion failure. Which is interesting, as that seems to solve the crash. So I went one step further and disarmed this function entirely: At the top of thunar_folder_monitor: _thunar_return_if_fail(0); Thunar has not crashed since. So the crash seems to stem from that function.
This bug has not been resolved! It's still happening in version 1.6.10 with glib version 2.44.1. But if it's indeed a problem with glib, then I guess this is really an upstream issue... Anyway, here's my backtrace: Starting program: /usr/bin/thunar [Thread debugging using libthread_db enabled] Using host libthread_db library "/usr/lib/libthread_db.so.1". [New Thread 0x7fffe9f02700 (LWP 32335)] [New Thread 0x7fffea703700 (LWP 32334)] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fffe9f02700 (LWP 32335)] 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 (gdb) bt #0 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 #1 0x00007ffff4b53c64 in g_list_append () from /usr/lib/libglib-2.0.so.0 #2 0x00007ffff4b685e2 in g_queue_push_tail () from /usr/lib/libglib-2.0.so.0 #3 0x00007ffff516b5f2 in ik_read_callback () from /usr/lib/libgio-2.0.so.0 #4 0x00007ffff4b578ca in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #5 0x00007ffff4b57c70 in g_main_context_iterate.isra () from /usr/lib/libglib-2.0.so.0 #6 0x00007ffff4b57d1c in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0 #7 0x00007ffff4b57d59 in glib_worker_main () from /usr/lib/libglib-2.0.so.0 #8 0x00007ffff4b7eeb5 in g_thread_proxy () from /usr/lib/libglib-2.0.so.0 #9 0x00007ffff48f8354 in start_thread () from /usr/lib/libpthread.so.0 #10 0x00007ffff4636bfd in clone () from /usr/lib/libc.so.6
I've got a few more backtraces. The program segfaults in different places every time. gdb thunar GNU gdb (GDB) 7.9.1 Copyright (C) 2015 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-unknown-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from thunar...done. (gdb) r Starting program: /usr/bin/thunar [Thread debugging using libthread_db enabled] Using host libthread_db library "/usr/lib/libthread_db.so.1". [New Thread 0x7fffe9f02700 (LWP 18948)] [New Thread 0x7fffea703700 (LWP 18947)] Program received signal SIGSEGV, Segmentation fault. 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 (gdb) bt #0 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 #1 0x00007ffff4b7518e in g_slice_alloc0 () from /usr/lib/libglib-2.0.so.0 #2 0x00007ffff4b554b7 in g_source_new () from /usr/lib/libglib-2.0.so.0 #3 0x00007ffff4b585e9 in g_timeout_source_new () from /usr/lib/libglib-2.0.so.0 #4 0x00007ffff50c5a12 in rate_limiter_timeout () from /usr/lib/libgio-2.0.so.0 #5 0x00007ffff4b58333 in g_timeout_dispatch () from /usr/lib/libglib-2.0.so.0 #6 0x00007ffff4b578ca in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #7 0x00007ffff4b57c70 in g_main_context_iterate.isra () from /usr/lib/libglib-2.0.so.0 #8 0x00007ffff4b57f92 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #9 0x00007ffff6a2c467 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0 #10 0x000000000041ed09 in main (argc=1, argv=0x7fffffffe7e8) at main.c:312 (gdb) c Continuing. [Thread 0x7fffe9f02700 (LWP 18948) exited] [Thread 0x7fffea703700 (LWP 18947) exited] Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. (gdb) r Starting program: /usr/bin/thunar [Thread debugging using libthread_db enabled] Using host libthread_db library "/usr/lib/libthread_db.so.1". [New Thread 0x7fffe9f02700 (LWP 19963)] [New Thread 0x7fffea703700 (LWP 19962)] Program received signal SIGSEGV, Segmentation fault. 0x00007ffff4b740b0 in magazine_cache_push_magazine () from /usr/lib/libglib-2.0.so.0 (gdb) bt #0 0x00007ffff4b740b0 in magazine_cache_push_magazine () from /usr/lib/libglib-2.0.so.0 #1 0x00007ffff4b75382 in g_slice_free1 () from /usr/lib/libglib-2.0.so.0 #2 0x00007ffff50c5819 in emit_cb () from /usr/lib/libgio-2.0.so.0 #3 0x00007ffff4b578ca in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #4 0x00007ffff4b57c70 in g_main_context_iterate.isra () from /usr/lib/libglib-2.0.so.0 #5 0x00007ffff4b57f92 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #6 0x00007ffff6a2c467 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0 #7 0x000000000041ed09 in main (argc=1, argv=0x7fffffffe7e8) at main.c:312 (gdb) c Continuing. [Thread 0x7fffe9f02700 (LWP 19963) exited] [Thread 0x7fffea703700 (LWP 19962) exited] Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. (gdb) r Starting program: /usr/bin/thunar [Thread debugging using libthread_db enabled] Using host libthread_db library "/usr/lib/libthread_db.so.1". [New Thread 0x7fffe9f02700 (LWP 25513)] [New Thread 0x7fffea703700 (LWP 25512)] Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fffe9f02700 (LWP 25513)] 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 (gdb) bt #0 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 #1 0x00007ffff4b53c64 in g_list_append () from /usr/lib/libglib-2.0.so.0 #2 0x00007ffff4b685e2 in g_queue_push_tail () from /usr/lib/libglib-2.0.so.0 #3 0x00007ffff516b42c in ik_process_eq_callback () from /usr/lib/libgio-2.0.so.0 #4 0x00007ffff4b58333 in g_timeout_dispatch () from /usr/lib/libglib-2.0.so.0 #5 0x00007ffff4b578ca in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #6 0x00007ffff4b57c70 in g_main_context_iterate.isra () from /usr/lib/libglib-2.0.so.0 #7 0x00007ffff4b57d1c in g_main_context_iteration () from /usr/lib/libglib-2.0.so.0 #8 0x00007ffff4b57d59 in glib_worker_main () from /usr/lib/libglib-2.0.so.0 #9 0x00007ffff4b7eeb5 in g_thread_proxy () from /usr/lib/libglib-2.0.so.0 #10 0x00007ffff48f8354 in start_thread () from /usr/lib/libpthread.so.0 #11 0x00007ffff4636bfd in clone () from /usr/lib/libc.so.6 (gdb) c Continuing. [Thread 0x7fffea703700 (LWP 25512) exited] [Thread 0x7fffe9f02700 (LWP 25513) exited] Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. (gdb) r Starting program: /usr/bin/thunar [Thread debugging using libthread_db enabled] Using host libthread_db library "/usr/lib/libthread_db.so.1". [New Thread 0x7fffe9f02700 (LWP 3495)] [New Thread 0x7fffea703700 (LWP 3494)] Program received signal SIGSEGV, Segmentation fault. 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 (gdb) bt #0 0x00007ffff4b74c5a in g_slice_alloc () from /usr/lib/libglib-2.0.so.0 #1 0x00007ffff4b7518e in g_slice_alloc0 () from /usr/lib/libglib-2.0.so.0 #2 0x00007ffff4b554b7 in g_source_new () from /usr/lib/libglib-2.0.so.0 #3 0x00007ffff4b58822 in g_idle_source_new () from /usr/lib/libglib-2.0.so.0 #4 0x00007ffff50c5735 in emit_in_idle () from /usr/lib/libgio-2.0.so.0 #5 0x00007ffff50c5b6a in foreach_rate_limiter_fire () from /usr/lib/libgio-2.0.so.0 #6 0x00007ffff4b45ff0 in g_hash_table_foreach_remove_or_steal () from /usr/lib/libglib-2.0.so.0 #7 0x00007ffff50c59d0 in rate_limiter_timeout () from /usr/lib/libgio-2.0.so.0 #8 0x00007ffff4b58333 in g_timeout_dispatch () from /usr/lib/libglib-2.0.so.0 #9 0x00007ffff4b578ca in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0 #10 0x00007ffff4b57c70 in g_main_context_iterate.isra () from /usr/lib/libglib-2.0.so.0 #11 0x00007ffff4b57f92 in g_main_loop_run () from /usr/lib/libglib-2.0.so.0 #12 0x00007ffff6a2c467 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0 #13 0x000000000041ed09 in main (argc=1, argv=0x7fffffffe7e8) at main.c:312 (gdb)