[http://sourceforge.net/p/ufoai/bugs/2351 Item 2351] imported from sourceforge.net tracker on 2013-01-28 19:30:37

Ufoai crash during loading map of base attack.

terminal output:

Created AI player (team 7)
-------------------------------------
Connecting to localhost...
connection attempt from loopback connection
load material file: 'materials/baseattack.mat'
*** glibc detected *** ./ufo: double free or corruption (!prev): 0x2386ac60 ***
======= Backtrace: =========
/lib/libc.so.6(+0x1ec751)[0x3da751]
/usr/lib/libpng12.so.0(png_free_default+0x29)[0x68a3c9]
/usr/lib/libpng12.so.0(png_free+0x4c)[0x68a41c]
/usr/lib/libpng12.so.0(png_free_data+0x212)[0x6720e2]
/usr/lib/libpng12.so.0[0x67253a]
/usr/lib/libpng12.so.0[0x67e427]
/usr/lib/libpng12.so.0(png_destroy_read_struct+0x6e)[0x67e8ae]
./ufo[0x816fdc3]
./ufo(R_FindImageDebug+0x116)[0x8172d0b]
./ufo(R_AliasModelGetSkin+0xc7)[0x818100a]
./ufo[0x818614c]
./ufo(R_ModLoadAliasMD2Model+0xa4)[0x8186bdb]
./ufo[0x81807ec]
./ufo(R_RegisterModelShort+0xf6)[0x81809a6]
./ufo(LM_Register+0x24)[0x808e0e2]
./ufo(V_LoadMedia+0xef)[0x8095034]
./ufo(CL_RequestNextDownload+0x382)[0x807449d]
./ufo[0x8074507]
./ufo(Cmd_ExecuteString+0xcb)[0x8131988]
./ufo(Cbuf_Execute+0x10f)[0x81306bf]
./ufo[0x807564a]
./ufo(CL_Frame+0xb0)[0x8075a1f]
./ufo[0x813ddb2]
./ufo(Qcommon_Frame+0x7b)[0x813e216]
./ufo(main+0x5c)[0x8191837]
/lib/libc.so.6(__libc_start_main+0xe6)[0x382bb6]
./ufo[0x80675e1]
======= Memory map: ========
00110000-0014b000 r-xp 00000000 08:03 8618929 /usr/lib/libsoftokn3.so
0014b000-0014c000 rw-p 0003b000 08:03 8618929 /usr/lib/libsoftokn3.so
0014c000-0014e000 rwxp 00000000 00:0f 2588 /dev/zero
0014e000-00155000 r-xp 00000000 08:03 5537897 /usr/lib/libXrandr.so.2.2.0
00155000-00156000 rw-p 00006000 08:03 5537897 /usr/lib/libXrandr.so.2.2.0
00156000-0015a000 r-xp 00000000 08:03 5537912 /usr/lib/libXfixes.so.3.1.0
0015a000-0015b000 rw-p 00003000 08:03 5537912 /usr/lib/libXfixes.so.3.1.0
0015c000-0017a000 r-xp 00000000 08:03 24215619 /lib/ld-2.11.1.so
0017a000-0017b000 r--p 0001d000 08:03 24215619 /lib/ld-2.11.1.so
0017b000-0017c000 rw-p 0001e000 08:03 24215619 /lib/ld-2.11.1.so
0017c000-001cf000 r-xp 00000000 08:03 5542454 /usr/lib/libmikmod.so.3.0.0
001cf000-001d1000 rw-p 00052000 08:03 5542454 /usr/lib/libmikmod.so.3.0.0
001d1000-001d6000 rw-p 00000000 00:00 0
001d6000-001e6000 r-xp 00000000 08:03 5537828 /usr/lib/libXext.so.6.4.0
001e6000-001e7000 rw-p 00010000 08:03 5537828 /usr/lib/libXext.so.6.4.0
001e7000-001f0000 r-xp 00000000 08:03 5537958 /usr/lib/libXcursor.so.1.0.2
001f0000-001f1000 rw-p 00009000 08:03 5537958 /usr/lib/libXcursor.so.1.0.2
001f1000-001f6000 r-xp 00000000 08:03 30310407 /usr/lib/alsa-lib/libasound_module_pcm_pulse.so
001f6000-001f7000 rw-p 00004000 08:03 30310407 /usr/lib/alsa-lib/libasound_module_pcm_pulse.so
001f7000-001fe000 r-xp 00000000 08:03 8686342 /usr/lib/libSM.so.6.0.0
001fe000-001ff000 rw-p 00006000 08:03 8686342 /usr/lib/libSM.so.6.0.0
00200000-00201000 r-xp 00000000 00:00 0 [vdso]
00201000-00253000 r-xp 00000000 08:03 5543625 /usr/lib/libssl.so.1.0.0
00253000-00257000 rw-p 00051000 08:03 5543625 /usr/lib/libssl.so.1.0.0
00257000-00270000 r-xp 00000000 08:03 8618788 /usr/lib/libsasl2.so.2.0.23
00270000-00271000 rw-p 00018000 08:03 8618788 /usr/lib/libsasl2.so.2.0.23
00271000-0028e000 r-xp 00000000 08:03 5537798 /usr/lib/libxcb.so.1.1.0
0028e000-0028f000 rw-p 0001c000 08:03 5537798 /usr/lib/libxcb.so.1.1.0
0028f000-00296000 r-xp 00000000 08:03 5210463 /lib/libcrypt-2.11.1.so
00296000-00297000 r--p 00007000 08:03 5210463 /lib/libcrypt-2.11.1.so
00297000-00298000 rw-p 00008000 08:03 5210463 /lib/libcrypt-2.11.1.so
00298000-002bf000 rw-p 00000000 00:00 0
002bf000-002db000 r-xp 00000000 08:03 28147939 /lib/libselinux.so.1
002db000-002dc000 r--p 0001b000 08:03 28147939 /lib/libselinux.so.1
002dc000-002dd000 rw-p 0001c000 08:03 28147939 /lib/libselinux.so.1
002dd000-002e2000 r-xp 00000000 08:03 25330287 /usr/lib/libXtst.so.6.1.0
002e2000-002e3000 rw-p 00004000 08:03 25330287 /usr/lib/libXtst.so.6.1.0
002e3000-002f0000 r-xp 00000000 08:03 5537854 /usr/lib/libXi.so.6.1.0
002f0000-002f1000 rw-p 0000d000 08:03 5537854 /usr/lib/libXi.so.6.1.0
002f5000-002f8000 r-xp 00000000 08:03 28147744 /lib/libdl-2.11.1.so
002f8000-002f9000 r--p 00002000 08:03 28147744 /lib/libdl-2.11.1.so
002f9000-002fa000 rw-p 00003000 08:03 28147744 /lib/libdl-2.11.1.so
002fc000-00303000 r-xp 00000000 08:03 28147931 /lib/librt-2.11.1.so
00303000-00304000 r--p 00006000 08:03 28147931 /lib/librt-2.11.1.so
00304000-00305000 rw-p 00007000 08:03 28147931 /lib/librt-2.11.1.so
00307000-00309000 r-xp 00000000 08:03 8686330 /usr/lib/libXau.so.6.0.0
00309000-0030a000 rw-p 00001000 08:03 8686330 /usr/lib/libXau.so.6.0.0
0030c000-0030d000 r-xp 00000000 08:03 9830413 /usr/lib/nvidia/tls/libnvidia-tls.so.190.53
0030d000-0030e000 rw-p 00000000 08:03 9830413 /usr/lib/nvidia/tls/libnvidia-tls.so.190.53
00311000-00339000 r-xp 00000000 08:03 25002369 /lib/libm-2.11.1.so
00339000-0033a000 r--p 00027000 08:03 25002369 /lib/libm-2.11.1.so
0033a000-0033b000 rw-p 00028000 08:03 25002369 /lib/libm-2.11.1.so
0033d000-00353000 r-xp 00000000 08:03 28147929 /lib/libpthread-2.11.1.so
00353000-00354000 r--p 00015000 08:03 28147929 /lib/libpthread-2.11.1.so
00354000-00355000 rw-p 00016000 08:03 28147929 /lib/libpthread-2.11.1.so
00355000-00357000 rw-p 00000000 00:00 0
00359000-0036b000 r-xp 00000000 08:03 28147928 /lib/libz.so.1.2.3
0036b000-0036c000 rw-p 00011000 08:03 28147928 /lib/libz.so.1.2.3
0036c000-004db000 r-xp 00000000 08:03 24477731 /lib/libc-2.11.1.so
004db000-004dd000 r--p 0016e000 08:03 24477731 /lib/libc-2.11.1.so
004dd000-004de000 rw-p 00170000 08:03 24477731 /lib/libc-2.11.1.so
004de000-004e1000 rw-p 00000000 00:00 0
004e1000-004f8000 r-xp 00000000 08:03 8686341 /usr/lib/libICE.so.6.3.0
004f8000-004fa000 rw-p 00016000 08:03 8686341 /usr/lib/libICE.so.6.3.0
004fa000-004fb000 rw-p 00000000 00:00 0
004fb000-0050f000 r-xp 00000000 08:03 28147938 /lib/libresolv-2.11.1.so
0050f000-00510000 ---p 00014000 08:03 28147938 /lib/libresolv-2.11.1.so
00510000-00511000 r--p 00014000 08:03 28147938 /lib/libresolv-2.11.1.so
00511000-00512000 rw-p 00015000 08:03 28147938 /lib/libresolv-2.11.1.so
00512000-00514000 rw-p 00000000 00:00 0
00514000-00559000 r-xp 00000000 08:03 28147961 /lib/libdbus-1.so.3.4.0
00559000-0055a000 r--p 00044000 08:03 28147961 /lib/libdbus-1.so.3.4.0
0055a000-0055b000 rw-p 00045000 08:03 28147961 /lib/libdbus-1.so.3.4.0
0055b000-0055f000 r-xp 00000000 08:03 28147960 /lib/libcap-ng.so.0.0.0
0055f000-00560000 r--p 00003000 08:03 28147960 /lib/libcap-ng.so.0.0.0
00560000-00561000 rw-p 00004000 08:03 28147960 /lib/libcap-ng.so.0.0.0
00561000-0056c000 r-xp 00000000 08:03 5210502 /lib/libnss_files-2.11.1.so
0056c000-0056d000 r--p 0000a000 08:03 5210502 /lib/libnss_files-2.11.1.so
0056d000-0056e000 rw-p 0000b000 08:03 5210502 /lib/libnss_files-2.11.1.so
005bd000-00602000 r-xp 00000000 08:03 12747362 /usr/lib/libfreebl3.so
00602000-00603000 rw-p 00044000 08:03 12747362 /usr/lib/libfreebl3.so
00603000-00607000 rw-p 00000000 00:00 0
00647000-0064b000 r-xp 00000000 08:03 28147949 /lib/libuuid.so.1.3.0
0064b000-0064c000 rw-p 00003000 08:03 28147949 /lib/libuuid.so.1.3.0
0064e000-0066b000 r-xp 00000000 08:03 28147934 /lib/libgcc_s-4.4.2-20091222.so.1
0066b000-0066c000 rw-p 0001c000 08:03 28147934 /lib/libgcc_s-4.4.2-20091222.so.1
0066e000-00695000 r-xp 00000000 08:03 5538435 /usr/lib/libpng12.so.0.39.0
00695000-00696000 rw-p 00026000 08:03 5538435 /usr/lib/libpng12.so.0.39.0
00698000-0072c000 r-xp 00000000 08:03 5538708 /usr/lib/libfreetype.so.6.3.22
0072c000-00730000 rw-p 00094000 08:03 5538708 /usr/lib/libfreetype.so.6.3.22
0075c000-00761000 r-xp 00000000 08:03 5539212 /usr/lib/libSDL_ttf-2.0.so.0.6.3./ufo(Sys_Backtrace+0x1f)[0x81928c9]
./ufo[0x8192934]
[0x200400]
/lib/libc.so.6(abort+0x17a)[0x39835a]
/lib/libc.so.6(+0x1e634d)[0x3d434d]
/lib/libc.so.6(+0x1ec751)[0x3da751]
/usr/lib/libpng12.so.0(png_free_default+0x29)[0x68a3c9]
/usr/lib/libpng12.so.0(png_free+0x4c)[0x68a41c]
/usr/lib/libpng12.so.0(png_free_data+0x212)[0x6720e2]
/usr/lib/libpng12.so.0[0x67253a]
/usr/lib/libpng12.so.0[0x67e427]
/usr/lib/libpng12.so.0(png_destroy_read_struct+0x6e)[0x67e8ae]
./ufo[0x816fdc3]
./ufo(R_FindImageDebug+0x116)[0x8172d0b]
./ufo(R_AliasModelGetSkin+0xc7)[0x818100a]
./ufo[0x818614c]
./ufo(R_ModLoadAliasMD2Model+0xa4)[0x8186bdb]
./ufo[0x81807ec]
./ufo(R_RegisterModelShort+0xf6)[0x81809a6]
./ufo(LM_Register+0x24)[0x808e0e2]
./ufo(V_LoadMedia+0xef)[0x8095034]
./ufo(CL_RequestNextDownload+0x382)[0x807449d]
./ufo[0x8074507]
./ufo(Cmd_ExecuteString+0xcb)[0x8131988]
./ufo(Cbuf_Execute+0x10f)[0x81306bf]
./ufo[0x807564a]
./ufo(CL_Frame+0xb0)[0x8075a1f]
./ufo[0x813ddb2]
./ufo(Qcommon_Frame+0x7b)[0x813e216]
./ufo(main+0x5c)[0x8191837]
/lib/libc.so.6(__libc_start_main+0xe6)[0x382bb6]
./ufo[0x80675e1]
./ufo(Sys_Backtrace+0x1f)[0x81928c9]
./ufo(Sys_Error+0xe)[0x8191bb1]
./ufo(Sys_InitSignals+0x0)[0x8192947]
[0x200400]
/lib/libc.so.6(abort+0x17a)[0x39835a]
/lib/libc.so.6(+0x1e634d)[0x3d434d]
/lib/libc.so.6(+0x1ec751)[0x3da751]
/usr/lib/libpng12.so.0(png_free_default+0x29)[0x68a3c9]
/usr/lib/libpng12.so.0(png_free+0x4c)[0x68a41c]
/usr/lib/libpng12.so.0(png_free_data+0x212)[0x6720e2]
/usr/lib/libpng12.so.0[0x67253a]
/usr/lib/libpng12.so.0[0x67e427]
/usr/lib/libpng12.so.0(png_destroy_read_struct+0x6e)[0x67e8ae]
./ufo[0x816fdc3]
./ufo(R_FindImageDebug+0x116)[0x8172d0b]
./ufo(R_AliasModelGetSkin+0xc7)[0x818100a]
./ufo[0x818614c]
./ufo(R_ModLoadAliasMD2Model+0xa4)[0x8186bdb]
./ufo[0x81807ec]
./ufo(R_RegisterModelShort+0xf6)[0x81809a6]
./ufo(LM_Register+0x24)[0x808e0e2]
./ufo(V_LoadMedia+0xef)[0x8095034]
./ufo(CL_RequestNextDownload+0x382)[0x807449d]
./ufo[0x8074507]
./ufo(Cmd_ExecuteString+0xcb)[0x8131988]
./ufo(Cbuf_Execute+0x10f)[0x81306bf]
./ufo[0x807564a]
./ufo(CL_Frame+0xb0)[0x8075a1f]
./ufo[0x813ddb2]
./ufo(Qcommon_Frame+0x7b)[0x813e216]
./ufo(main+0x5c)[0x8191837]
/lib/libc.so.6(__libc_start_main+0xe6)[0x382bb6]
./ufo[0x80675e1]
Error: Received signal 6.

===== Comments Ported from Sourceforge =====

====== hunter688 (2010-02-07 17:03:18) ======

crash appear after message "loading models" during loading map
====== geever (2010-02-10 12:35:45) ======

The bug is in PNG loading somewhere.
It happens since r28395 which was the fix of the PNG signature check. That commit is fine, the bug must be somewhere else.

r28394 warns for:
LoadPNG: Not a PNG file: textures/tex_misc/soft_drinks1_nm.png
LoadPNG: Not a PNG file: textures/tex_misc/soft_drinks2_nm.png
LoadPNG: Not a PNG file: models/objects/gascylinder/gascylinder.png

so I guess it's loading "models/objects/gascylinder/gascylinder.png" (model texture)

/usr/include/libpng/png.h:3- * libpng version 1.2.27 - April 29, 2008

-geever
====== tlh2000 (2010-02-10 20:53:06) ======

see the pending sdl_image patch on the patch tracker
====== tlh2000 (2010-02-11 07:47:01) ======

fixed in r28533
====== sf-robot (2010-02-26 02:20:10) ======

This Tracker item was closed automatically by the system. It was
previously set to a Pending status, and the original submitter
did not respond within 14 days (the time period specified by
the administrator of this Tracker).