GDM-2.15.0 and amd64

[Pascal Hofstee]

Hi,

I guess i should have expected this to happen when the new gdm hit the
tree ... Every GDM update i can remember seems to somehow involve yet
another malloc crash bug. I hope this gives enough information to track
down this one.

Below is the backtrace for the one encounter this morning:

#0  idalloc (ptr=0x6) at /usr/src/lib/libc/stdlib/malloc.c:2866
2866			malloc_mutex_lock(&chunk->arena->mtx);
[New LWP 100094]
(gdb) thread apply all bt full

Thread 1 (LWP 100094):
#0  idalloc (ptr=0x6) at /usr/src/lib/libc/stdlib/malloc.c:2866
	chunk = (arena_chunk_t *) 0x0
	__func__ = "idalloc"
#1  0x000000080357236e in free (ptr=0x6)
at /usr/src/lib/libc/stdlib/malloc.c:3565
	__func__ = "free"
#2  0x00000008024d1cd0 in IA__g_free (mem=0x6) at gmem.c:187
No locals.
#3  0x0000000000414222 in parse_stock (node=0x6, info=0x803b50940,
translated_text=0x7fffffffe9e0, 
    translation_score=0x7fffffffe9ec, error=0x7fffffffeba0) at
greeter_parser.c:370
	prop = (xmlChar *) 0x803a69580 "options"
#4  0x0000000000414669 in parse_gtkbutton (node=0x6, info=0x803b50940,
error=0x7fffffffeba0) at greeter_parser.c:519
	translated_text = 0x6 <Address 0x6 out of bounds>
	translation_score = 1000
	child = 0x803b3c100
#5  0x00000000004165e4 in parse_items (node=0x6, items_out=0x803b508b8,
parent=0x803b50860, error=0x7fffffffeba0)
    at greeter_parser.c:1654
	child = 0x803b3bc80
	items = (GList *) 0x0
	res = 6
	type = (xmlChar *) 0x803b50940 "`\bµ\003\b"
	info = (GreeterItemInfo *) 0x803b50940
	item_type = GREETER_ITEM_TYPE_BUTTON
#6  0x0000000000414dc3 in parse_box (node=0x803b3b980, info=0x803b50860,
error=0x7fffffffeba0) at greeter_parser.c:795
	prop = (xmlChar *) 0x803a014e4 "ZZZZ"
	p = 0x803a014e6 "ZZ"
#7  0x0000000000415671 in parse_rect (node=0x6, info=0x803b50860,
error=0x7fffffffeba0) at greeter_parser.c:1100
	child = 0x803b3b980
	i = 4345352
#8  0x0000000000416598 in parse_items (node=0x6, items_out=0x803b507f0,
parent=0x803b50780, error=0x7fffffffeba0)
    at greeter_parser.c:1642
	child = 0x803b3b380
	items = (GList *) 0x0
	res = 0
	type = (xmlChar *) 0x803b50860 "\200\aµ\003\b"
	info = (GreeterItemInfo *) 0x803b50860
	item_type = GREETER_ITEM_TYPE_RECT
#9  0x0000000000414a36 in parse_fixed (node=0x6, info=0x1fffff,
error=0x73) at greeter_parser.c:647
No locals.
#10 0x000000000041563f in parse_rect (node=0x6, info=0x803b50780,
error=0x7fffffffeba0) at greeter_parser.c:1095
	child = 0x803b3b280
	i = 4345352
#11 0x0000000000416598 in parse_items (node=0x6,
items_out=0x7fffffffeb60, parent=0x803b505c0, error=0x7fffffffeba0)
    at greeter_parser.c:1642
	child = 0x803b3ac80
	items = (GList *) 0x803ea7720
	res = 0
	type = (xmlChar *) 0x803b50780 "À\005µ\003\b"
	info = (GreeterItemInfo *) 0x803b50780
	item_type = GREETER_ITEM_TYPE_RECT
#12 0x00000000004168b4 in greeter_parse (file=0x803b505c0 "",
datadir=0x0, canvas=0x803ec50a0, width=1024, height=768, 
    error=0x7fffffffeba0) at greeter_parser.c:1776
	root = (GreeterItemInfo *) 0x803b505c0
	doc = 0x803a30880
	node = 0x803b3a500
	prop = (xmlChar *) 0x0
	res = 0
	items = (GList *) 0x0
#13 0x000000000040cf9c in main (argc=1, argv=0x7fffffffec78) at
greeter.c:1194
	bg_color = 0x1fffff <Address 0x1fffff out of bounds>
	hup = {__sigaction_u = {__sa_handler = 0x422770 <ve_signal_notify>,
__sa_sigaction = 0x422770 <ve_signal_notify>}, 
  sa_flags = 0, sa_mask = {__bits = {524288, 0, 0, 0}}}
	term = {__sigaction_u = {__sa_handler = 0x40c5f0 <greeter_done>,
__sa_sigaction = 0x40c5f0 <greeter_done>}, 
  sa_flags = 0, sa_mask = {__bits = {524288, 0, 0, 0}}}
	mask = {__bits = {524288, 0, 0, 0}}
	ctrlch = (GIOChannel *) 0x803a682d8
	error = (GError *) 0x0
	root = (GreeterItemInfo *) 0x7fffffffebd0
	theme_file = 0x803e7aa80
"/usr/X11R6/share/gnome/gdm/themes/circles/circles.xml"
	theme_dir = 0x803e7aa00 "/usr/X11R6/share/gnome/gdm/themes/circles"
	gdm_graphical_theme = (gchar *) 0x803a682d8 "circles"
	gdm_gtk_theme = 0x1fffff <Address 0x1fffff out of bounds>
	sid = 6
	r = 2097151
(gdb) 


-- 
  Pascal Hofstee