Ubuntu
gvfs package

gvfsd-mtp crashed with SIGSEGV in backend_died()

Bug #1130101 reported by Thomas Hotz on 2013-02-19

428

This bug affects 78 people

Affects		Status	Importance	Assigned to	Milestone
	gvfs	Fix Released	High	gnome-bugs #696479
	gvfs (Ubuntu)	Fix Released	Medium	Philip Langdale

Bug Description

I have a Samsung Wave M and had a LG Optimus L7 (P700). On my Thinkpad Edge E530 I get this crash when I unmount the device.

ProblemType: Crash
DistroRelease: Ubuntu 13.04
Package: gvfs-backends 1.15.3-0ubuntu1
ProcVersionSignature: Ubuntu 3.8.0-6.13-generic 3.8.0-rc7
Uname: Linux 3.8.0-6-generic x86_64
ApportVersion: 2.8-0ubuntu4
Architecture: amd64
Date: Tue Feb 19 13:43:47 2013
ExecutablePath: /usr/lib/gvfs/gvfsd-mtp
InstallationDate: Installed on 2013-02-19 (0 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Alpha amd64 (20130219)
MarkForUpload: True
ProcCmdline: /usr/lib/gvfs/gvfsd-mtp --spawner :1.16 /org/gtk/gvfs/exec_spaw/3
ProcEnviron:
SHELL=/bin/bash
XDG_RUNTIME_DIR=<set>
PATH=(custom, no user)
LANGUAGE=de_AT:de
LANG=de_AT.UTF-8
SegvAnalysis:
Segfault happened at: 0x7f2d2649a0bc: mov 0x20(%rax),%rax
PC (0x7f2d2649a0bc) ok
source "0x20(%rax)" (0xaaaaaaaaaaaaaaca) not located in a known VMA region (needed readable region)!
destination "%rax" ok
SegvReason: reading unknown VMA
Signal: 11
SourcePackage: gvfs
StacktraceTop:
?? () from /usr/lib/x86_64-linux-gnu/gvfs/libgvfsdaemon.so
?? () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
g_object_unref () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
g_value_unset () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
g_signal_emit_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: gvfsd-mtp crashed with SIGSEGV in g_object_unref()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo

Tags:

Related branches

lp:ubuntu/raring-proposed/gvfs

Revision history for this message

Thomas Hotz (thotz-deactivatedaccount) wrote on 2013-02-19:

Dependencies.txt Edit (7.8 KiB, text/plain; charset="utf-8")
Disassembly.txt Edit (615 bytes, text/plain; charset="utf-8")
ProcMaps.txt Edit (14.8 KiB, text/plain; charset="utf-8")
ProcStatus.txt Edit (820 bytes, text/plain; charset="utf-8")
Registers.txt Edit (830 bytes, text/plain; charset="utf-8")
Stacktrace.txt Edit (2.2 KiB, text/plain; charset="utf-8")
ThreadStacktrace.txt Edit (6.1 KiB, text/plain; charset="utf-8")

Thomas Hotz (thotz-deactivatedaccount) on 2013-02-25

information type:

Private → Public

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-02-26:

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gvfs (Ubuntu):
status:	New → Confirmed

Revision history for this message

poetzmij (poetzmij) wrote on 2013-02-26:

I'm guessing were all seeing this on different devices right?
It affects my galaxy nexus as well.

Revision history for this message

Vincent Ladeuil (vila) wrote on 2013-03-01:

Same here with a nexus 7

Revision history for this message

Lucas Benninger (lucas8060-deactivatedaccount) wrote on 2013-03-02:

I get this error when trying to read from files I already wrote to my nexus 4.

Revision history for this message

Philip Langdale (langdalepl) wrote on 2013-03-03:

When you all say you're seeing this error, you have confirmed you're getting the same stack trace? I'm still waiting for the retracer to fill in the blanks but I've never seen this personally.

Revision history for this message

crtm (carlosrtm) wrote on 2013-03-12:

crash when I unmount the device. (Samsung Galaxy SII)

Revision history for this message

Thomas Hotz (thotz-deactivatedaccount) wrote on 2013-03-13:

... waiting for the retracer? ... how much time will it take?

Revision history for this message

Bartek Feltman (bfeltman) wrote on 2013-03-14:

also crash when unmounting Xiaomi M2. MTP device.

Revision history for this message

Apport retracing service (apport) wrote on 2013-03-15:

#10

StacktraceTop:
backend_died (monitor=0x7f2d140019e0, old_backend=<optimized out>) at gvfsmonitor.c:77
g_cclosure_marshal_VOID__PARAMv (closure=0x7f2d14026d80, return_value=<optimized out>, instance=<optimized out>, args=<optimized out>, marshal_data=<optimized out>, n_params=<optimized out>, param_types=0x1edc280) at /build/buildd/glib2.0-2.35.8/./gobject/gmarshal.c:1070
handler_list_lookup (instance=<optimized out>, signal_id=<optimized out>) at /build/buildd/glib2.0-2.35.8/./gobject/gsignal.c:422
g_signal_emitv (instance_and_params=0x1edf9c0, signal_id=<optimized out>, detail=0, return_value=0x7f2d25fb9276 <parse_value_from_blob+2150>) at /build/buildd/glib2.0-2.35.8/./gobject/gsignal.c:3044
?? ()

Revision history for this message

Apport retracing service (apport) wrote on 2013-03-15: Stacktrace.txt

#11

Stacktrace.txt Edit (1.6 KiB, text/plain)

Revision history for this message

Apport retracing service (apport) wrote on 2013-03-15: ThreadStacktrace.txt

#12

ThreadStacktrace.txt Edit (10.1 KiB, text/plain)

Changed in gvfs (Ubuntu):
importance:	Undecided → Medium
summary:	- gvfsd-mtp crashed with SIGSEGV in g_object_unref() + gvfsd-mtp crashed with SIGSEGV in backend_died()
tags:	removed: need-amd64-retrace

Philip Langdale (langdalepl) on 2013-03-16

Changed in gvfs (Ubuntu):
assignee:	nobody → Philip Langdale (langdalepl)

Jean-Baptiste Lallement (jibel) on 2013-03-21

tags:

added: rls-r-incoming

Bug Watch Updater (bug-watch-updater) on 2013-03-24

Changed in gvfs:
importance:	Unknown → High
status:	Unknown → In Progress

Bug Watch Updater (bug-watch-updater) on 2013-03-31

Changed in gvfs:
status:	In Progress → Fix Released

Revision history for this message

Philip Langdale (langdalepl) wrote on 2013-04-02:

#13

Fixed in 1.16.1

Revision history for this message

Launchpad Janitor (janitor) wrote on 2013-04-05:

#14

This bug was fixed in the package gvfs - 1.16.0-1ubuntu4

---------------
gvfs (1.16.0-1ubuntu4) raring; urgency=low

  * debian/patches/git_shutdown_segfault.patch:
    - backport fix for a common mtp backend segfault (lp: #1130101)
  * debian/patches/git_obex_dbus_segfault.patch:
    - backport another fix for a obexftp segfault (lp: #1057546)
  * debian/patches/gvfsd_http_handle_socketpair_error.patch:
    - replace with the upstream version
-- Sebastien Bacher <email address hidden> Wed, 03 Apr 2013 21:40:19 +0200