[Oneric] unity-panel-service crashed with SIGSEGV in getenv()

Bug Description

kernel 3.0.0-7.8
updated 3:20-ish on July 28
was starting synaptic

The bug report has been sending four reports on the same thing in a matter of seconds. There was some kind of message upon restarting that the "keyboard" was being toggled by someone. I think that counts as security as passwords could be divulged through keyloggers. I can't get the message back, nor did I even acknowledged it's closure. Can someone close dialog boxes outside of the internal X? That is to say can someone mess with your computer even though computer sharing is off?

ProblemType: Crash
DistroRelease: Ubuntu 11.10
Package: unity-services 4.4.0-0ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-7.8-generic 3.0.0
Uname: Linux 3.0.0-7-generic x86_64
Architecture: amd64
CompizPlugins: [core,bailer,detection,composite,opengl,decor,mousepoll,vpswitch,regex,animation,snap,expo,move,compiztoolbox,place,grid,imgpng,gnomecompat,wall,ezoom,workarounds,staticswitcher,resize,fade,unitymtgrabhandles,scale,session,unitydialog,unityshell]
CrashCounter: 1
Date: Thu Jul 28 15:10:52 2011
EcryptfsInUse: Yes
ExecutablePath: /usr/lib/unity/unity-panel-service
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Alpha amd64 (20110727)
ProcCmdline: /usr/lib/unity/unity-panel-service
ProcEnviron:
SHELL=/bin/bash
LANG=en_US.UTF-8
SegvAnalysis:
Segfault happened at: 0x7faac3865da0 <getenv+144>: cmp 0x0(%rbp),%r13w
PC (0x7faac3865da0) ok
source "0x0(%rbp)" (0x000000e0) not located in a known VMA region (needed readable region)!
destination "%r13w" ok
Stack memory exhausted (SP below stack segment)
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: unity
StacktraceTop:
getenv () from /lib/x86_64-linux-gnu/libc.so.6
?? () from /lib/x86_64-linux-gnu/libc.so.6
?? () from /usr/lib/x86_64-linux-gnu/libgio-2.0.so.0
g_type_class_ref () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
g_object_new_valist () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
Title: unity-panel-service crashed with SIGSEGV in getenv()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare

StacktraceTop:
getenv (name=0x7faac398e8f7 "NGUAGE") at getenv.c:90
guess_category_value (domainname=0x7faac3c60440 "glib20", msgid1=0x7faac464272b "unique-name", msgid2=0x0, plural=0, n=0, category=5) at dcigettext.c:1359
__dcigettext (domainname=0x7faac3c60440 "glib20", msgid1=0x7faac464272b "unique-name", msgid2=0x0, plural=0, n=0, category=5) at dcigettext.c:575
g_dbus_connection_class_init (klass=<value optimized out>) at /build/buildd/glib2.0-2.29.14/./gio/gdbusconnection.c:775
g_dbus_connection_class_intern_init (klass=<value optimized out>) at /build/buildd/glib2.0-2.29.14/./gio/gdbusconnection.c:452

This bug seems to be in glibc, looking at Google and other LP bugs with the same trace (http://goo.gl/sTVD7). Leaving on Unity to track.

Got this bug as soon as I logged in.

Is Unity doing a setenv() anywhere? My best guess is that you're hitting a race between getenv() in a thread and setenv() in another thread.

see: https://bugzilla.gnome.org/show_bug.cgi?id=659326

yes Ryan, there are even some unsetenv() in the service:

$ grep -r setenv services/*
services/panel-a11y.c: g_unsetenv ("NO_AT_BRIDGE");
services/panel-a11y.c: g_unsetenv ("NO_GAIL");
services/panel-main.c: g_unsetenv("UBUNTU_MENUPROXY");
services/panel-main.c: g_setenv ("NO_AT_BRIDGE", "1", TRUE);
services/panel-main.c: g_unsetenv ("NO_GAIL");

any one has touched the kb during the process

On dj 22 set 2011 12:16:02 CEST, Neil J. Patel wrote:
> ** Changed in: unity
> Assignee: (unassigned) => Neil J. Patel (njpatel)
>
> ** Changed in: unity
> Status: Confirmed => In Progress
>

I didn't get this bug until this morning's updates. 23 Sept 2011 8:40 EST updated.

I just got this on unity 4.16.0, Oneiric.

This bug was fixed in the package unity - 4.18.0-0ubuntu1

---------------
unity (4.18.0-0ubuntu1) oneiric; urgency=low

* New upstream release.
- Screen corruption when resuming from suspend/hibernate (LP: #676166)
- unity-panel-service crashed with SIGSEGV in bamf_factory_view_for_path()
(LP: #764024)
- Dash and launcher appear underneath windows (LP: #805087)
- unity-panel-service crashed with SIGSEGV in g_type_check_instance_cast()
(LP: #811401)
- [Oneric] unity-panel-service crashed with SIGSEGV in getenv()
(LP: #817691)
- compiz crashed with SIGSEGV in unity::FilterBar::RemoveFilter()
(LP: #845732)
- crash on closing a window (LP: #856015)
- Cannot open a window that starts iconified (LP: #732997)
- Launcher - When useing Alt F1 launcher keyboard navigation, Launcher
should not scroll until top or bottom of Launcher is reached
(LP: #765749)
- Stacking problem when switching between apps with multiple windows
(LP: #802527)
- Pull panel to de-maximize window occasionally not working in a secondary
screen (LP: #802651)
- Window under Dash gets focused if it opened later (LP: #830730)
- Clickable areas of previously active window remains on 'Show Desktop'
(LP: #836325)
- A minimized window 'remains' behind on the desktop if
/apps/compiz-1/plugins/unityshell/screen0/options/show_minimized_windows
is set to true (LP: #847967)
- a11y support on Unity is broken (LP: #851103)
- compiz crashed with SIGSEGV in dee_model_get_tag() (LP: #840758)
- crash when looping paint list in preparePaint (on closing windows)
(LP: #853807)
- Alt-Tab should not preview windows at excessively large sizes
(LP: #854740)
- Clicking on a tweet/message link sometimes does not work (LP: #790565)
- Dragging a launcher icon makes it squashed (LP: #855761)
- unable to unminimize gedit windows where more than one window where one
has a dialog open (LP: #856030)
- (oneiric) alt-tab UX doesn't work well on multi-monitor (LP: #855364)
- Launcher shows on the primary monitor instead of the left most monitor
(LP: #857668)
- Keynav - pressing down key causes launcher items to jump up and down
(LP: #858469)
- Windows creep cross the screen with ALT+TAB (LP: #722830)
- Minimize animation flickr when for maximized apps (LP: #737125)
- All unity windows are invisible (panel, launcher, dash) (LP: #745996)
- Dash "See 97 more results" has ~1 second of latency (LP: #731158)
- Windows cannot be dragged down from panel if banshee closed to sound
menu (LP: #781215)
- no menu bar on top, compositing bug? (LP: #806358)
- Launcher - a spread can accidentally be triggered during the 'dragging
and dropping behind the Launcher' interaction (LP: #832988)
- Impossible to navigate between panel menus when the mouse cursor is over
the panel (LP: #834065)
- Pressing alt on maximized window does show menu but not window controls
(LP: #836274)
- Application name drawn under Dash controls when window opens under Dash
(LP: #838176)
- Start ...