Debian Bug report logs - #924496
'realloc(): invalid next size: 0x000055a779ef2170' crash when opening iPod w/ ~12000 tracks

version graph

Package: rhythmbox; Maintainer for rhythmbox is Debian GNOME Maintainers <[email protected]>; Source for rhythmbox is src:rhythmbox (PTS, buildd, popcon).

Reported by: Fred Korz <[email protected]>

Date: Wed, 13 Mar 2019 16:39:02 UTC

Severity: important

Tags: unreproducible

Found in version rhythmbox/3.4.3-2

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#924496: 'realloc(): invalid next size: 0x000055a779ef2170' crash when opening iPod w/ ~12000 tracks
Reply-To: Fred Korz <[email protected]>, [email protected]
Resent-From: Fred Korz <[email protected]>
Resent-To: [email protected]
Resent-CC: Debian GNOME Maintainers <[email protected]>
X-Loop: [email protected]
Resent-Date: Tue, 19 Mar 2019 21:03:04 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: followup 924496
X-Debian-PR-Package: rhythmbox
X-Debian-PR-Keywords: 
References: <155249486944.32696.15928913745492797476.reportbug@tallcase.nyc.corp.google.com> <[email protected]> <155249486944.32696.15928913745492797476.reportbug@tallcase.nyc.corp.google.com>
X-Debian-PR-Source: rhythmbox
Received: via spool by [email protected] id=B924496.155302924712462
          (code B ref 924496); Tue, 19 Mar 2019 21:03:04 +0000
Received: (at 924496) by bugs.debian.org; 19 Mar 2019 21:00:47 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.7 required=4.0 tests=BAYES_00,DIGITS_LETTERS,
	DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,
	HTML_MESSAGE,MULTALT,RCVD_IN_DNSWL_NONE,SPF_PASS,TXREP autolearn=no
	autolearn_force=no version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 36; hammy, 149; neutral, 177; spammy,
	1. spammytokens:0.987-1--20190320 hammytokens:0.000-+--rhythmbox,
	0.000-+--sk:0x00005, 0.000-+--sk:rhythmb, 0.000-+--realloc,
	0.000-+--sk:HowToGe
Received: from mail-oi1-x242.google.com ([2607:f8b0:4864:20::242])
	by buxtehude.debian.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
	(Exim 4.89)
	(envelope-from <[email protected]>)
	id 1h6Lqp-0003Ee-G5
	for [email protected]; Tue, 19 Mar 2019 21:00:47 +0000
Received: by mail-oi1-x242.google.com with SMTP id y84so33963oia.12
        for <[email protected]>; Tue, 19 Mar 2019 14:00:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:references:in-reply-to:from:date:message-id:subject:to
         :cc;
        bh=USVF/WFO0lrFgNUuqSmi4kM6PJwrX/6o7rfuKvFzLus=;
        b=Z7z38GQGcvN7XfJTBqNqfDC4GuwfOB5MgIcjSY+8gyLXAYyXu25mxflnGhB4a72s1V
         UIVZR11b6dUNRrnqGWrEXigyexNXG2HEnG8WuQlo3KLrkSHs1mbuFneWDufLnFiqPBun
         oMcukyuxNzbaKu3EkyRa1ih8P7yRH40pLcHIykwWnhchkn2SCPeFJdNTj62tsTdVGk2o
         FNP5AMGfCpbeaFguDNjy5qOEGFuDggAUijzr/vgOEpkGJn7ALKhWiPXId41n4lQxMK/1
         vQ6EpTfq8Fs6rGc0GHhZ39htqPbXs5UANYwszV6ql2LBUaaxrJBkLLUU1cHlaT449QNn
         pNeg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:references:in-reply-to:from:date
         :message-id:subject:to:cc;
        bh=USVF/WFO0lrFgNUuqSmi4kM6PJwrX/6o7rfuKvFzLus=;
        b=pEvWdrWEiKmJYpeWW9vr293UNvV+7cPARe3DNBfHM6gmGUkVJYKo6tv7c5QHp284ne
         2dIsv6POlytX+mE+pvHjjRCv0j/6OSgtsQ6G2JasldydtxeyT9PhlwEVrdWIMQicCL1w
         cNRzEaCMgiw8IIGlPJCWsUcWVq30HiK5oNMVc4/1WO0+fKFhuflOopR8PuxVQ69gtxMQ
         FxBiNhqyOifOxNp/FKW1vlju+I45ZWEL5Gcl7HXBtsfupYai/IRbpSFB0TJjl8sa5Y34
         HyxXh/tf+ZO4phtKfHu5l5oK7a1wEutEOKYrrTshy3y1/9HkbLfzHKyIwXOxKPGUUGFq
         LUFg==
X-Gm-Message-State: APjAAAUQYeR/HRULg1eJNCZcVUve8RhwGQZQCc73RVdjMsw7JEp7UV9y
	h2bD0sHlTMeD8Q9R7eI1zPvBat1QjzP9/2qZHIk=
X-Google-Smtp-Source: APXvYqw3Q+jiict7lBYDQPilqrKJtqwH70QGBxTAiRDIof2SQD7A9594LxDfE71S8uYc6moAHC01a2eZlQ+XGIJyLx8=
X-Received: by 2002:aca:f108:: with SMTP id p8mr2927755oih.19.1553029244829;
 Tue, 19 Mar 2019 14:00:44 -0700 (PDT)
MIME-Version: 1.0
In-Reply-To: <[email protected]>
From: Fred Korz <[email protected]>
Date: Tue, 19 Mar 2019 17:00:34 -0400
Message-ID: <CAN=AfRojXu6YfTc1vxOEQ33ujTRCCqgUOAN51txz4ogsNbHGGQ@mail.gmail.com>
To: Bernhard Übelacker <[email protected]>
Cc: [email protected]
Content-Type: multipart/alternative; boundary="00000000000076c62b058478cc04"

[Message part 1 (text/plain, inline)]
Hello Bernhard,

Now it (a) loads completely without crash from the same iPod (and no
changes there), and (b) does so in <50% as long.

Arrgh! I hate Heisenbugs!!!!  It was entirely repeatable last week, 3 for 3.

I've not rebooted since before my report, nor has the rhythmbox package
changed version (3.4.3-2) ,
but any of the dependencies may have been updated by automation.

I installed the debugging symbol packages, then started under gdb, plugged
in the iPod and no load-up crash, plays fine.
I then ejected and ran rhythmbox without gdb, plugged in the iPod, and
again no load-up crash, plays fine.

Some more answers embedded below.

On Tue, Mar 19, 2019 at 10:27 AM Bernhard Übelacker <[email protected]>
wrote:

> Hello Fred Korz,
> I just tried to get some more information out of backtrace,
> without having an iPod or being involved on packaging rhythmbox...
>
> But am I right this "Debian Release: rodete" is a version
> of gLinux - Googles internal rebuild of Debian testing?
> Can this be downloaded somewhere?
>

The name, "rodete", is "ROlling DEbian TEsting" and apparently a pun in
spanish as well.
It is Debian testing but, as I understand it, run through an internal
"sieve" of tests before rolling out a consistent snapshot to users.
It's sort of what would happen if one lagged testing by about 1-2 weeks,
though some packages can be closer to testing's head if urgent.


> And are there debug symbols available for installation?
>

Yes they are.  I've installed these debug symbol packages at work and will
install at home tonight.


> In Debian these packages are available in a separate
> repository [1] and are named like this:
>
>     rhythmbox-dbgsym librhythmbox-core10-dbgsym libglib2.0-0-dbgsym
> libtdb1-dbgsym
>
> If yes, you could try to install them and run rhythmbox
> like this and provide the output:
>
>     gdb -q -ex 'set width 0' -ex 'set pagination off' -ex 'run' -ex 'bt'
> -ex 'detach' -ex 'quit' --args /usr/bin/rhythmbox
>

Damn Heisenbug.  Blew out 3 times last week, once with a coworker there to
see it.  None this time, either with gdb or without.


>
> As this fault seems to be inside the memory allocator, maybe
> setting "export MALLOC_CHECK_=2" might reveal some more details?
>
> Can this fault be reproduced on a plain Debian testing, too?
>

I'll try tonight/tomorrow (20190319/20190320) on a system at home where
I've been running Debian testing for 14+ years now,
usually update nightly, and rarely get burned by something slipping through
from experimental into testing that wasn't quite ready.

It's likely that I'll have to install rhythmbox + symbol packages. I've had
no need for rhythmbox there.  That system is where the backup
copy of my music library lives and I use vlc directly from the files, or
serve my library via forked-daapd (successor to firefly / mt-daapd).


> Kind regards,
> Bernhard
>

Thanks for the guidance.  I wIll both (a) get back to you with results -
reproduction or Heisenbug - and (b) keep the instructions in case
of some future return of the Heisenbug, hoping to get a better capture.


> [1]
> https://wiki.debian.org/HowToGetABacktrace#Installing_the_debugging_symbols
> [1]
> https://stackoverflow.com/questions/6750815/how-to-turn-off-glibc-run-time-protections
>

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 11:28:32 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.