Bug#657327: malloc(): memory corruption

[Aleksey Midenkov]

Package: libgstreamer0.10-0
Version: 0.10.35.2-1ubuntu1
Severity: important

Start subtitleeditor 0.39.0-2
Run Video -> Open
Open some AVI. Program should abort with something like backtrace below.

Downgrade libgstreamer0.10-0 to version 0.10.35-1 and the bug will go off.
The backtrace shows the problem in libgstreamermm-0.10.so.2 but
nevertheless the bug is in libgstreamer0.10-0. I had another backtrace
with libgstreamer0.10-0 in focus, but then downgraded/upgraded some
packages. Downgrading exactly libgstreamer0.10-0 helps.
I know I'm on Ubuntu, but you guys probably should forward this bug to
upstream anyway. Thanks!

--- Backtrace ---
subtitleeditor
The messenger is now down
An IOException occurred at scim_bridge_client_imcontext_set_cursor_location ()
*** glibc detected *** subtitleeditor: malloc(): memory corruption
(fast): 0x00000000014d2bb0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7c8f6)[0x7f3627d998f6]
/lib/x86_64-linux-gnu/libc.so.6(+0x7eb2c)[0x7f3627d9bb2c]
/lib/x86_64-linux-gnu/libc.so.6(__libc_calloc+0xc2)[0x7f3627d9e8f2]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(g_malloc0+0x21)[0x7f3628ac3631]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_param_spec_pool_list+0x8d)[0x7f3628f883fd]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x12294)[0x7f3628f80294]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x2963b)[0x7f3628f9763b]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_type_class_ref+0x55c)[0x7f3628f9a61c]
/usr/lib/x86_64-linux-gnu/libglibmm-2.4.so.1(_ZN4Glib15ConstructParamsC2ERKNS_5ClassEPKcz+0xb7)[0x7f3629203a77]
/usr/lib/libgstreamermm-0.10.so.2(_ZN3Gst8PlayBin2C1ERKN4Glib7ustringE+0x7c)[0x7f362b3e1b6c]
/usr/lib/libgstreamermm-0.10.so.2(_ZN3Gst8PlayBin26createERKN4Glib7ustringE+0x31)[0x7f362b3e23f1]
subtitleeditor[0x423e8a]
subtitleeditor[0x424459]
/usr/lib/subtitleeditor/plugins/actions/libvideoplayermanagement.so(_ZN21VideoPlayerManagement7on_openEv+0x65)[0x7f3615bec995]
/usr/lib/x86_64-linux-gnu/libglibmm-2.4.so.1(_ZN4Glib17SignalProxyNormal19slot0_void_callbackEP8_GObjectPv+0x28)[0x7f36292055f8]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_closure_invoke+0x154)[0x7f3628f7d364]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x1f8f3)[0x7f3628f8d8f3]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x60b)[0x7f3628f94feb]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f3628f951b2]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(+0x75213)[0x7f362996e213]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_closure_invoke+0x154)[0x7f3628f7d364]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x1f9fa)[0x7f3628f8d9fa]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x60b)[0x7f3628f94feb]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f3628f951b2]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(gtk_widget_activate+0x6e)[0x7f3629b48dae]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(gtk_menu_shell_activate_item+0xfd)[0x7f3629a43f6d]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(+0x14b305)[0x7f3629a44305]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(+0x136c68)[0x7f3629a2fc68]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_closure_invoke+0x154)[0x7f3628f7d364]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(+0x1fbfa)[0x7f3628f8dbfa]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit_valist+0x4ed)[0x7f3628f94ecd]
/usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f3628f951b2]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(+0x250bb1)[0x7f3629b49bb1]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(gtk_propagate_event+0xc3)[0x7f3629a2de23]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(gtk_main_do_event+0x283)[0x7f3629a2e183]
/usr/lib/x86_64-linux-gnu/libgdk-x11-2.0.so.0(+0x5bfac)[0x7f362947efac]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_context_dispatch+0x16a)[0x7f3628abd7da]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(+0x47ba0)[0x7f3628abdba0]
/lib/x86_64-linux-gnu/libglib-2.0.so.0(g_main_loop_run+0x6a)[0x7f3628abdf9a]
/usr/lib/x86_64-linux-gnu/libgtk-x11-2.0.so.0(gtk_main+0xa7)[0x7f3629a2d1b7]
/usr/lib/x86_64-linux-gnu/libgtkmm-2.4.so.1(_ZN3Gtk4Main3runERNS_6WindowE+0x106)[0x7f362a8b5326]
subtitleeditor[0x415212]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7f3627d3e30d]
subtitleeditor[0x415ac5]
======= Memory map: ========
00400000-0044e000 r-xp 00000000 08:05 142368
  /usr/bin/subtitleeditor
0064d000-0064e000 r--p 0004d000 08:05 142368
  /usr/bin/subtitleeditor
0064e000-00650000 rw-p 0004e000 08:05 142368
  /usr/bin/subtitleeditor
00650000-00651000 rw-p 00000000 00:00 0
00ba2000-0151b000 rw-p 00000000 00:00 0                                  [heap]
7f360a7fd000-7f360a7fe000 ---p 00000000 00:00 0
7f360a7fe000-7f360affe000 rw-p 00000000 00:00 0
7f360affe000-7f360afff000 ---p 00000000 00:00 0
7f360afff000-7f360b7ff000 rw-p 00000000 00:00 0
7f360b7ff000-7f360b800000 ---p 00000000 00:00 0
7f360b800000-7f360c000000 rw-p 00000000 00:00 0
7f360c000000-7f360c022000 rw-p 00000000 00:00 0
7f360c022000-7f3610000000 ---p 00000000 00:00 0
7f3610414000-7f36104b9000 r--p 00000000 08:05 150737
  /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans-Bold.ttf
7f36104b9000-7f36104cc000 r-xp 00000000 08:05 148981
  /usr/lib/gtk-2.0/2.10.0/immodules/im-scim-bridge.so
7f36104cc000-7f36106cb000 ---p 00013000 08:05 148981
  /usr/lib/gtk-2.0/2.10.0/immodules/im-scim-bridge.so
7f36106cb000-7f36106cc000 r--p 00012000 08:05 148981
  /usr/lib/gtk-2.0/2.10.0/immodules/im-scim-bridge.so
7f36106cc000-7f36106cd000 rw-p 00013000 08:05 148981
  /usr/lib/gtk-2.0/2.10.0/immodules/im-scim-bridge.so
7f36106cd000-7f36106ce000 ---p 00000000 00:00 0
7f36106ce000-7f3610ece000 rw-p 00000000 00:00 0
7f3610ece000-7f3610ecf000 ---p 00000000 00:00 0
7f3610ecf000-7f36116cf000 rw-p 00000000 00:00 0
7f36116cf000-7f361177f000 r--p 00000000 08:05 149656
  /usr/share/fonts/truetype/ttf-dejavu/DejaVuSans.ttf
7f361177f000-7f36117df000 rw-s 00000000 00:04 33947652
  /SYSV00000000 (deleted)
7f36117df000-7f36117e3000 r-xp 00000000 08:05 420981
  /usr/lib/subtitleeditor/plugins/subtitleformats/libsubrip.so
7f36117e3000-7f36119e2000 ---p 00004000 08:05 420981
  /usr/lib/subtitleeditor/plugins/subtitleformats/libsubrip.so
7f36119e2000-7f36119e3000 r--p 00003000 08:05 420981
  /usr/lib/subtitleeditor/plugins/subtitleformats/libsubrip.so
7f36119e3000-7f36119e4000 rw-p 00004000 08:05 420981
  /usr/lib/subtitleeditor/plugins/subtitleformats/libsubrip.so
7f36119e4000-7f36119e8000 r-xp 00000000 08:05 420989
  /usr/lib/subtitleeditor/plugins/subtitleformats/libadobeencoredvdpal.so
7f36119e8000-7f3611be8000 ---p 00004000 08:05 420989
  /usr/lib/subtitleeditor/plugins/subtitleformats/libadobeencoredvdpal.so
7f3611be8000-7f3611be9000 r--p 00004000 08:05 420989
  /usr/lib/subtitleeditor/plugins/subtitleformats/libadobeencoredvdpal.so
7f3611be9000-7f3611bea000 rw-p 00005000 08:05 420989
  /usr/lib/subtitleeditor/plugins/subtitleformats/libadobeencoredvdpal.so
7f3611bea000-7f3611bf0000 r-xp 00000000 08:05 420982
  /usr/lib/subtitleeditor/plugins/subtitleformats/libtimedtextauthoringformat1.soAborted



--- System information. ---
Architecture: amd64
Kernel:       Linux 3.0.0-9-generic

Debian Release: squeeze/sid
  500 testing         dl.google.com
  500 stable          dl.google.com
  500 release         apt.spideroak.com
  500 precise-updates ru.archive.ubuntu.com
  500 precise-security security.ubuntu.com
  500 precise         ru.archive.ubuntu.com
  500 precise         archive.canonical.com
  500 oneiric         ru.archive.ubuntu.com
  500 natty-getdeb    archive.getdeb.net
  500 natty           ru.archive.ubuntu.com
  500 natty           ppa.launchpad.net
  500 maverick        ppa.quickbuild.pearsoncomputing.net
  500 lucid           ppa.launchpad.net
  500 karmic          ppa.launchpad.net
  500 hardy           ru.archive.ubuntu.com

--- Package information. ---
Depends            (Version) | Installed
============================-+-============
libc6              (>= 2.10) | 2.13-24ubuntu4
libglib2.0-0     (>= 2.26.0) | 2.31.12-0ubuntu1