[bug #23040] crasher in NSNotificationCenter.m:464 when gdnc crashes

[Sebastian Reitenbach]

URL:
  <http://savannah.gnu.org/bugs/?23040>

                 Summary: crasher in NSNotificationCenter.m:464 when gdnc
crashes
                 Project: GNUstep
            Submitted by: buzzdee
            Submitted on: Thursday 04/24/2008 at 18:24
                Category: None
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

AddressManager and ProjectCenter, maybe other applications too, will crash,
in case gdnc crashes when an application tries to connect to it. This happens
on OpenBSD 4.3 sparc 64, with these versions installed:

gnustep-back-0.13.2
gnustep-base-1.15.3p0
gnustep-gui-0.13.2p1
gnustep-make-2.0.5
ffcall-1.10

gcc -v
Reading specs from /usr/lib/gcc-lib/sparc64-unknown-openbsd4.3/3.3.5/specs
Configured with:
Thread model: single
gcc version 3.3.5 (propolice)

Program received signal SIGSEGV, Segmentation fault.
listPurge (list=0x4ebea810, observer=0x4859cc10) at
NSNotificationCenter.m:464
464               if (tmp->next->observer == observer)
Current language:  auto; currently objective-c
(gdb) bt
#0  listPurge (list=0x4ebea810, observer=0x4859cc10) at
NSNotificationCenter.m:464
#1  0x000000004230c274 in -[NSNotificationCenter removeObserver:name:object:]
(self=0x41a2c790, _cmd=0xfffffffffffbf670, observer=0x4859cc10,
    name=0x0, object=0x0) at NSNotificationCenter.m:507
#2  0x000000004230c74c in -[NSNotificationCenter removeObserver:]
(self=0x41a2c790, _cmd=0x437d3100, observer=0x4859cc10)
    at NSNotificationCenter.m:932
#3  0x0000000043415334 in -[NSWindow dealloc] (self=0x4859cc10,
_cmd=0x42766ef0) at NSWindow.m:716
#4  0x000000004231cb30 in -[NSObject release] (self=0x4859cc10,
_cmd=0x43794fa8) at NSObject.m:1992
#5  0x000000004335f070 in -[NSMenu dealloc] (self=0x55897110,
_cmd=0x42766ef0) at NSMenu.m:507
#6  0x000000004231cb30 in -[NSObject release] (self=0x55897110,
_cmd=0x43798a30) at NSObject.m:1992
#7  0x000000004336a768 in -[NSMenuItem dealloc] (self=0x4c440810,
_cmd=0x42766ef0) at NSMenuItem.m:119
#8  0x000000004231cb30 in -[NSObject release] (self=0x4c440810,
_cmd=0x4379a0f0) at NSObject.m:1992
...

Previous frame identical to this frame (corrupt stack?)
(gdb) list NSNotificationCenter.m:507
502         }
503       else
504         {
505           Observation       *start = list;
506
507           list = listPurge(list, observer);
508           if (list == ENDOBS)
509             {
510               /*
511                * The list is empty so remove from map.
(gdb) list NSNotificationCenter.m:464
459       if (list != ENDOBS)
460         {
461           tmp = list;
462           while (tmp->next != ENDOBS)
463             {
464               if (tmp->next->observer == observer)
465                 {
466                   Observation       *next = tmp->next;
467
468                   tmp->next = next->next;
(gdb) print tmp->next->observer
Cannot access memory at address 0x0
(gdb) print observer
$1 = 0x4859cc10
(gdb) frame 1
#1  0x000000004230c274 in -[NSNotificationCenter removeObserver:name:object:]
(self=0x41a2c790, _cmd=0xfffffffffffbf670, observer=0x4859cc10,
    name=0x0, object=0x0) at NSNotificationCenter.m:507
507           list = listPurge(list, observer);
(gdb) print list
$2 = list
(gdb) print  listPurge(list, observer);
Invalid character '
(gdb) print  listPurge(list, observer)

Program received signal SIGBUS, Bus error.
0x0000000042309b70 in listPurge (list=0x7, observer=0x4859cc10) at
NSNotificationCenter.m:452
452       while (list != ENDOBS && list->observer == observer)
The program being debugged was signaled while in a function called from GDB.
GDB remains in the frame where the signal was received.
To change this behavior use "set unwindonsignal on"
Evaluation of the expression containing the function (listPurge) will be
abandoned.

GNUMail doesn't crash at that point, it popups a window, showing an exception
connection refused.




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?23040>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/