Titan Media Editor, will not run , R5 application, Crash In app server

[SeanCollins]

I am attaching the application Titan Media Editor "author was Elegant Media", this application runs on beos hrev5 but not on Haiku. It was a little buggy on BeOS hrev5, but it did run, it will not start now at all.I am also attaching the source code as well.

Thread 457 caused an exception: General protection fault
Reading symbols from /boot/system/runtime_loader...done.
Loaded symbols for /boot/system/runtime_loader
Reading symbols from /boot/home/Desktop/Titan_0.1_Alpha/lib/EMMediaEngine_Library.so...done.
Loaded symbols for /boot/home/Desktop/Titan_0.1_Alpha/lib/EMMediaEngine_Library.so
Reading symbols from /boot/home/Desktop/Titan_0.1_Alpha/lib/EMProjectManager_Library.so...done.
Loaded symbols for /boot/home/Desktop/Titan_0.1_Alpha/lib/EMProjectManager_Library.so
Reading symbols from /boot/system/lib/libbe.so...done.
Loaded symbols for /boot/system/lib/libbe.so
Reading symbols from /boot/system/lib/libtracker.so...done.
Loaded symbols for /boot/system/lib/libtracker.so
Reading symbols from /boot/system/lib/libstdc++.r4.so...done.
Loaded symbols for /boot/system/lib/libstdc++.r4.so
Reading symbols from /boot/system/lib/libroot.so...done.
Loaded symbols for /boot/system/lib/libroot.so
Reading symbols from /boot/system/lib/libmedia.so...done.
Loaded symbols for /boot/system/lib/libmedia.so
Reading symbols from /boot/system/lib/libnetwork.so...done.
Loaded symbols for /boot/system/lib/libnetwork.so
Reading symbols from /boot/system/lib/libmidi.so...done.
Loaded symbols for /boot/system/lib/libmidi.so
Reading symbols from /boot/system/lib/libtranslation.so...done.
Loaded symbols for /boot/system/lib/libtranslation.so
Reading symbols from /boot/system/lib/liblocale.so...done.
Loaded symbols for /boot/system/lib/liblocale.so
Reading symbols from /boot/system/lib/libmidi2.so...done.
Loaded symbols for /boot/system/lib/libmidi2.so
Reading symbols from /boot/system/lib/libfluidsynth.so...done.
Loaded symbols for /boot/system/lib/libfluidsynth.so
Reading symbols from /boot/system/lib/libtextencoding.so...done.
Loaded symbols for /boot/system/lib/libtextencoding.so
Reading symbols from /boot/system/lib/libicudata.so.44...
warning: Lowest section in /boot/system/lib/libicudata.so.44 is .hash at 00000094
done.
Loaded symbols for /boot/system/lib/libicudata.so.44
Reading symbols from /boot/system/lib/libicui18n.so.44...done.
Loaded symbols for /boot/system/lib/libicui18n.so.44
Reading symbols from /boot/system/lib/libicuio.so.44...done.
Loaded symbols for /boot/system/lib/libicuio.so.44
Reading symbols from /boot/system/lib/libicule.so.44...done.
Loaded symbols for /boot/system/lib/libicule.so.44
Reading symbols from /boot/system/lib/libiculx.so.44...done.
Loaded symbols for /boot/system/lib/libiculx.so.44
Reading symbols from /boot/system/lib/libicutu.so.44...done.
Loaded symbols for /boot/system/lib/libicutu.so.44
Reading symbols from /boot/system/lib/libicuuc.so.44...done.
Loaded symbols for /boot/system/lib/libicuuc.so.44
Reading symbols from /boot/system/lib/libroot-addon-icu.so...done.
Loaded symbols for /boot/system/lib/libroot-addon-icu.so
[tcsetpgrp failed in terminal_inferior: Invalid Argument]
[Switching to team /boot/home/Desktop/Titan_0.1_Alpha/Titan_r1 (457) thread Titan_r1 (457)]
0x00a22fbb in BPrivate::processHeap::free () from /boot/system/lib/libroot.so
(gdb) bt
#0  0x00a22fbb in BPrivate::processHeap::free () from /boot/system/lib/libroot.so
#1  0x00a24708 in free () from /boot/system/lib/libroot.so
#2  0x0099df6c in __builtin_vec_delete () from /boot/system/lib/libroot.so
#3  0x002c074c in ifstream::~ifstream ()
#4  0x0029ba83 in EMResourceRepository::LoadResources ()
#5  0x0025addf in ApplicationInit::LoadResources ()
#6  0x0025b79f in ApplicationInit::SetUpSystem ()
#7  0x0025d65a in Titan_r1::ReadyToRun ()
#8  0x00563521 in BApplication::DispatchMessage () from /boot/system/lib/libbe.so
#9  0x0056e041 in BLooper::task_looper () from /boot/system/lib/libbe.so
#10 0x0056219a in BApplication::Run () from /boot/system/lib/libbe.so
#11 0x0025d54a in main ()
(gdb)

[SeanCollins]

​http://pastebin.com/3n8rGThT

Crash back trace, also brings down the app server and causes a white screen GDB after shutdown. doesn't happen immediately but within 30-60 seconds of closing debugger.

[mmadia]

Deleted the attachments, as concern has been expressed about the source code not being open sourced.

[SeanCollins]

​http://forums.begroovy.com/index.php?topic=4808.0

I have attempted to contact the authors, with no response, I have one found a few refrences. There was no liscensing in the code package itself and its been made available for download on haikuware.

The code for this application is available for download in 2 places currently.

[SeanCollins]

This has been opened under a BSD 2 cluase liscense, ScottMC is hosting the code here ​https://bitbucket.org/scottmc/titan/wiki/Home

[SeanCollins]

Added attachment of last known working binary. App server crash is still present. Link to source code is in comment #5

[SeanCollins]

New Debug crash report with the new debugger tools.

[anevilyak]

The app crash itself isn't really what's interesting here, since that appears to be a plain ordinary double free bug, which Titan is known to have several of. What'd be more of interest is the app_server crash, a report of which can be saved by typing save-report at the debugger prompt.

[SeanCollins]

I have done the save - report at the prompt, nothing gets save unfortunately and it is typically a white screen gdb type crash where the system stops responding. the app server crash is very very reproducable.

just luanch the attached titan binary once, maybe twice, terminate the application and wait. shouldn't take long.

[stippi]

app_server debug report

[stippi]

I've attached the debug-report for app_server, but I am afraid it is not very useful. My theory is that app_server tears down its representation of the Titan application after it crashed. Since it crashes during initialization, I suppose something gets freed that should not be and that leaves app_server with corrupted memory. It probably comes down to when exactly Titan crashes that leaves things in unhealthy state at app_server. Maybe compiling app_server with extensive tracing can help narrow things down.

[korli]

@stippi to me it looks like the EventTarget is gone while used in _AddTokens(). While locking seems fine, shouldn't the MouseFilter implement RemoveTarget() to check that the desktop MouseEventWindow isn't the removed target? Or this case is already managed elsewhere?