Crash in startup-notification



I didn't see a project for startup-notification in Bugzilla, but I'm
seeing a reproduceable crash everytime I startup Metacity 2.4.13 under
GNOME 2.1.x with startup-notification-0.4.  Here is the back trace:

#0  0x287b9d40 in strcmp () from /usr/lib/libc_r.so.4
#1  0x2873e404 in find_handler_foreach (value=0x818e7a0,
data=0xbfbff7bc)
    at sn-xmessages.c:96
#2  0x2873d076 in sn_list_foreach (list=0x818f340,
    func=0x2873e3c4 <find_handler_foreach>, data=0xbfbff7bc) at
sn-list.c:157
#3  0x2873e48e in sn_internal_remove_xmessage_func (display=0x8171a00,
    screen=0, message_type=0x2873fd38 "_NET_STARTUP_INFO",
    func=0x2873d8c8 <xmessage_func>, func_data=0x0) at
sn-xmessages.c:123
#4  0x2873d1d4 in sn_monitor_context_unref (context=0x818e780)
    at sn-monitor.c:177
#5  0x806d55b in meta_screen_free (screen=0x815bb80) at screen.c:661
#6  0x8059d1a in meta_display_close (display=0x817f000) at display.c:714
#7  0x8067d12 in main (argc=3, argv=0xbfbffa48) at main.c:352
#8  0x805733a in _start ()

Now, if I explore a little in frame 1:

(gdb) frame 1
#1  0x2873e404 in find_handler_foreach (value=0x818e7a0,
data=0xbfbff7bc)
    at sn-xmessages.c:96
96      in sn-xmessages.c
(gdb) print ((FindHandlerData *)data)->message_type
$7 = 0x16 <Address 0x16 out of bounds>
(gdb) print ((SnXmessageHandler *)value)->message_type
$8 = 0x818e800 "_NET_STARTUP_INFO"
(gdb)

I looked at sn-xmessages.c in sn_internal_remove_xmessage_func(), and I
don't see where fhd.message_type is ever initialized.  The struct is
simply declared (never bzero'd), and a few members are assigned, but not
message_type.  Therefore, I think gdb is correct.

(gdb) frame 3
#3  0x2873e48e in sn_internal_remove_xmessage_func (display=0x8171a00,
    screen=0, message_type=0x2873fd38 "_NET_STARTUP_INFO",
    func=0x2873d8c8 <xmessage_func>, func_data=0x0) at
sn-xmessages.c:123
123     in sn-xmessages.c
(gdb) print fhd
$9 = {message_type = 0x16 <Address 0x16 out of bounds>,
  func = 0x2873d8c8 <xmessage_func>, func_data = 0x0, root = 55, handler
= 0x0}
(gdb)

Sorry if this has been reported before.  Like I said, I didn't see where
to report this in Bugzilla.

Joe

-- 
Joe Marcus Clarke
FreeBSD GNOME Team	::	marcus FreeBSD org
http://www.FreeBSD.org/gnome

Attachment: signature.asc
Description: This is a digitally signed message part



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]