https://bugzilla.redhat.com/show_bug.cgi?id=859879
--- Comment #12 from Peng Huang shawn.p.huang@gmail.com --- (In reply to comment #11)
(In reply to comment #10)
#0 ibus_im_context_finalize (obj=0x2aa90b0) at ibusimcontext.c:647
In case the return value in the signal function is not void, it seems the signal function calls g_object_unref.
I think it is possible. g_signal_email may call g_object_ref/unref before and after calling the signal handlers. And in handlers, the object may be unrefed. So seems the object is destroyed by g_singal_emit, but actually it is destroyed in a handler.
BTW, I can not reproduce it in fedora 17 with latest ibus.