[gtk-vnc-devel] crash on disconnect

[Jonh Wendell <jwendell gnome org>]

Hi, folks.

I'm experiencing a crash when I disconnect in the middle of a zrle long
update (like when showing a big colored background image).

The bug itself was already reported in Ubuntu:
https://bugs.launchpad.net/ubuntu/+source/vinagre/+bug/207205
My backtrace is similar to that one attached there in Launchpad:
http://launchpadlibrarian.net/12902128/ThreadStacktrace.txt


I'm attaching my backtrace with debug output.

Any idea?

Thanks,
-- 
Jonh Wendell
www.bani.com.br

GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
(gdb) run --gtk-vnc-debug 200.100.100.247
Starting program: /usr/bin/vinagre --gtk-vnc-debug 200.100.100.247
[Thread debugging using libthread_db enabled]
[New Thread 0xb6e90720 (LWP 27030)]
gtk-vnc: Expose 0x0 @ 1031,599
gtk-vnc: Started background coroutine
gtk-vnc: Resolving host 200.100.100.247 5900
gtk-vnc: Trying socket 22
gtk-vnc: Protocol initialization
gtk-vnc: Server version: 3.8
gtk-vnc: Using version: 3.8
gtk-vnc: Possible auth 2
gtk-vnc: Requested auth type 2
gtk-vnc: Waiting for auth type
gtk-vnc: Choose auth 2
gtk-vnc: Requesting missing credentials
gtk-vnc: Set password credential
gtk-vnc: Waiting for missing credentials
gtk-vnc: Got all credentials
gtk-vnc: Do Challenge
gtk-vnc: Checking auth result
gtk-vnc: Expose 224x166 @ 348,216
gtk-vnc: Success
gtk-vnc: Pixel format BPP: 32,  Depth: 24, Byte order: 1234, True color: 1
             Mask  red: 255, green: 255, blue: 255
             Shift red:  16, green:   8, blue:   0
gtk-vnc: Display name 'MAC_CPD_DEMIAN'
gtk-vnc: Visual mask: 16711680 65280 255
      shift:  16   8   0
gtk-vnc: Mask local: 255 255 255
    remote: 255 255 255
    merged: 255 255 255
gtk-vnc: Pixel shifts
   right:  16   8   0
    left:  16   8   0
gtk-vnc: Expose 0x0 @ 1013,581
gtk-vnc: Running main loop
gtk-vnc: FramebufferUpdate(-239, 0, 0, 12, 21)
gtk-vnc: FramebufferUpdate(16, 0, 0, 1024, 768)
gtk-vnc: Expose 0x0 @ 12,21
gtk-vnc: FramebufferUpdate(16, 937, 28, 12, 21)
gtk-vnc: Expose 0x0 @ 1013,581
gtk-vnc: FramebufferUpdate(16, 905, 744, 32, 18)
gtk-vnc: FramebufferUpdate(16, 937, 744, 32, 16)
gtk-vnc: Expose 0x0 @ 1280,800
gtk-vnc: FramebufferUpdate(16, 937, 28, 12, 21)
gtk-vnc: Expose 1065x44 @ 12,21
gtk-vnc: FramebufferUpdate(16, 937, 744, 16, 16)
gtk-vnc: Expose 1065x760 @ 16,16
gtk-vnc: FramebufferUpdate(16, 937, 744, 16, 16)
gtk-vnc: Expose 1065x760 @ 16,16
gtk-vnc: FramebufferUpdate(16, 119, 738, 160, 30)
gtk-vnc: Expose 247x754 @ 160,30
gtk-vnc: Expose 0x0 @ 1280,800
gtk-vnc: FramebufferUpdate(16, 119, 738, 160, 30)
gtk-vnc: Expose 247x754 @ 160,30
gtk-vnc: FramebufferUpdate(16, 0, 0, 1024, 742)
gtk-vnc: Expose 128x16 @ 1024,742
gtk-vnc: FramebufferUpdate(16, 112, 736, 176, 32)
gtk-vnc: Expose 240x752 @ 176,32
gtk-vnc: FramebufferUpdate(16, 119, 738, 160, 30)
gtk-vnc: Expose 247x754 @ 160,30
gtk-vnc: FramebufferUpdate(16, 656, 608, 224, 64)
gtk-vnc: FramebufferUpdate(16, 672, 672, 208, 16)
gtk-vnc: Expose 784x624 @ 224,80
gtk-vnc: FramebufferUpdate(16, 656, 544, 160, 48)
gtk-vnc: FramebufferUpdate(16, 640, 592, 64, 16)
gtk-vnc: FramebufferUpdate(16, 640, 608, 240, 48)
gtk-vnc: FramebufferUpdate(16, 656, 656, 224, 16)
gtk-vnc: FramebufferUpdate(16, 672, 672, 208, 16)
gtk-vnc: FramebufferUpdate(16, 16, 715, 400, 16)
gtk-vnc: FramebufferUpdate(16, 784, 715, 48, 16)
gtk-vnc: FramebufferUpdate(16, 16, 731, 336, 7)
gtk-vnc: FramebufferUpdate(16, 368, 731, 32, 7)
gtk-vnc: FramebufferUpdate(16, 784, 731, 48, 7)
gtk-vnc: Expose 144x560 @ 864,194
gtk-vnc: FramebufferUpdate(16, 656, 544, 160, 48)
gtk-vnc: FramebufferUpdate(16, 640, 592, 64, 16)
gtk-vnc: FramebufferUpdate(16, 640, 608, 192, 48)
gtk-vnc: FramebufferUpdate(16, 0, 715, 416, 23)
gtk-vnc: FramebufferUpdate(16, 784, 715, 48, 23)
gtk-vnc: Expose 128x560 @ 832,194
gtk-vnc: FramebufferUpdate(16, 736, 592, 
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb6e90720 (LWP 27030)]
0xb759e9bc in memcpy () from /lib/tls/i686/cmov/libc.so.6
(gdb) bt full
#0  0xb759e9bc in memcpy () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#1  0xb7d3a078 in gvnc_blt_fast (gvnc=0x82d5900, src=0xb118ed90 "", pitch=256, x=0, y=26, width=64, height=64) at gvnc.c:1120
	dst = (uint8_t *) 0xafd20000 <Address 0xafd20000 out of bounds>
	i = 0
#2  0xb7d3a0dd in gvnc_blt (gvnc=0x82d5900, src=0xb118ed90 "", pitch=256, x=0, y=26, width=64, height=64) at gvnc.c:1129
No locals.
#3  0xb7d3a897 in gvnc_zrle_update_tile_blit (gvnc=0x82d5900, x=0, y=26, width=64, height=64) at gvnc.c:1299
	blit_data = '\0' <repeats 16383 times>
	i = 4096
	bpp = 4
#4  0xb7d3ad83 in gvnc_zrle_update_tile (gvnc=0x82d5900, x=0, y=26, width=64, height=64) at gvnc.c:1417
	subencoding = 0 '\0'
	pixel = "�\026\000"
#5  0xb7d3b020 in gvnc_zrle_update (gvnc=0x82d5900, x=0, y=26, width=1024, height=712) at gvnc.c:1473
	w = 64
	h = 64
	length = 1204446
	offset = 0
	i = 0
	j = 0
	zlib_data = (
    uint8_t *) 0xafbdf008 "ܽ\apUW\232.��36�36x��\231nw\034�033�04\r\006\223\223�031D�022 �rB9#P\026IBB\210\214\220 d\021D\016\002\221\223P\016'�23\217r�o�}�mOw�L�z�\236��Z;��177^g��\0327\016��\200\231\001Y\027=\006M�\030�12�\bnG\217GS��\216C}�O\203~�30�027�\004a߶\f�\222�\022m$\a\203�i���>r\002\032\"'B\027;\025�15n�n\232\t��M\2066z\002\2375\036"...
#6  0xb7d3c928 in gvnc_framebuffer_update (gvnc=0x82d5900, etype=16, x=0, y=26, width=1024, height=712) at gvnc.c:1999
No locals.
#7  0xb7d3cc48 in gvnc_server_message (gvnc=0x82d5900) at gvnc.c:2071
	y = 26
	w = 1024
	etype = 16
	x = 0
	h = 712
	pad = ""
	n_rects = 1
	i = 0
	msg = 0 '\0'
	ret = 0
#8  0xb7d43b1e in vnc_coroutine (opaque=0x82d1a18) at vncdisplay.c:1509
	obj = (VncDisplay *) 0x82d1a18
	priv = (VncDisplayPrivate *) 0x82d1a60
	encodings = {-27, 7, -258, -223, 1464686185, -239, -240, -257, 16, 5, 2, 1, 0}
	encodingsp = (int32_t *) 0xb1192f40
	n_encodings = 12
	ret = 1
	s = {obj = 0x82d1a18, caller = 0x82d1ad8, signum = 5, cred_list = 0x0, width = 0, height = 0, msg = 0x0, auth_type = 0, str = 0x0}
#9  0xb7d465cc in coroutine_trampoline (cc=0x82d1af0) at coroutine_ucontext.c:40
	co = (struct coroutine *) 0x82d1ad8
#10 0xb7d463ce in continuation_trampoline (i0=137173744, i1=-1210817584) at continuation.c:31
	arg = {p = 0x82d1af0, i = {137173744, -1210817584}}
	cc = (struct continuation *) 0x82d1af0
#11 0xb7566074 in makecontext () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#12 0x082d1af0 in ?? ()
No symbol table info available.
#13 0xb7d463d0 in continuation_trampoline (i0=2, i1=-1210804972) at continuation.c:32
	arg = {p = 0xb76848c5, i = {-1217902395, -1210678824}}
	cc = (struct continuation *) 0x1
#14 0xb7d65ed5 in ?? () from /usr/lib/libgthread-2.0.so.0
No symbol table info available.
#15 0x00000002 in ?? ()
No symbol table info available.
#16 0xb7d49514 in ?? () from /usr/lib/libgtk-vnc-1.0.so.0
No symbol table info available.
#17 0xbffc41c8 in ?? ()
No symbol table info available.
#18 0xb7d467c5 in coroutine_yieldto (to=0xb7d4a520, arg=0x82d1ad8) at coroutine_ucontext.c:102
No locals.
Backtrace stopped: frame did not save the PC
(gdb) quit
The program is running.  Exit anyway? (y or n)