Description:

Dia crashes on quit on a simple drawing of a Database table with at least one attribute. Error is "double free or corruption" -- stack trace follows. Tested on an empty profile (i.e. no user's ".dia/" directory existing). However, the drawing can be safely saved before quitting.

Additional info:
* package version(s): 0.97.2-5
* reproducible: always.
* stack trace:

*** Error in `dia': double free or corruption (!prev): 0x00000000023100b0 ***
======= Backtrace: =========
/usr/lib/libc.so.6(+0x731ff)[0x7f1c67d501ff]
/usr/lib/libc.so.6(+0x789ae)[0x7f1c67d559ae]
/usr/lib/libc.so.6(+0x796b6)[0x7f1c67d566b6]
/usr/lib/dia/libdia.so(destroy_object_list+0x1c)[0x7f1c6a5e462c]
/usr/lib/dia/libdia.so(layer_destroy+0x15)[0x7f1c6a5ce995]
/usr/lib/dia/libdia.so(+0x1f9e9)[0x7f1c6a5ce9e9]
/usr/lib/libgobject-2.0.so.0(g_object_unref+0x1aa)[0x7f1c690fa06a]
dia(ddisplay_really_destroy+0x3e)[0x43248e]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x138)[0x7f1c690f56a8]
/usr/lib/libgobject-2.0.so.0(+0x2203d)[0x7f1c6910703d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0xde9)[0x7f1c6910ed49]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f1c6910f002]
/usr/lib/libgtk-x11-2.0.so.0(+0x1514b0)[0x7f1c6a0cd4b0]
/usr/lib/libgobject-2.0.so.0(g_object_run_dispose+0x60)[0x7f1c690fbdc0]
dia(app_exit+0x190)[0x42d640]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x138)[0x7f1c690f56a8]
/usr/lib/libgobject-2.0.so.0(+0x2203d)[0x7f1c6910703d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0xde9)[0x7f1c6910ed49]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f1c6910f002]
/usr/lib/libgtk-x11-2.0.so.0(+0x738a0)[0x7f1c69fef8a0]
/usr/lib/libgtk-x11-2.0.so.0(+0x74059)[0x7f1c69ff0059]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x138)[0x7f1c690f56a8]
/usr/lib/libgobject-2.0.so.0(+0x2203d)[0x7f1c6910703d]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0xab9)[0x7f1c6910ea19]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f1c6910f002]
/usr/lib/libgtk-x11-2.0.so.0(gtk_accel_group_activate+0xed)[0x7f1c69feac3d]
/usr/lib/libgtk-x11-2.0.so.0(gtk_accel_groups_activate+0xcd)[0x7f1c69febf4d]
/usr/lib/libgtk-x11-2.0.so.0(gtk_window_activate_key+0x156)[0x7f1c6a1ce916]
/usr/lib/libgtk-x11-2.0.so.0(+0x2529a1)[0x7f1c6a1ce9a1]
/usr/lib/libgtk-x11-2.0.so.0(+0x12cd85)[0x7f1c6a0a8d85]
/usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x138)[0x7f1c690f56a8]
/usr/lib/libgobject-2.0.so.0(+0x21dfb)[0x7f1c69106dfb]
/usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0xab9)[0x7f1c6910ea19]
/usr/lib/libgobject-2.0.so.0(g_signal_emit+0x82)[0x7f1c6910f002]
/usr/lib/libgtk-x11-2.0.so.0(+0x23cab4)[0x7f1c6a1b8ab4]
/usr/lib/libgtk-x11-2.0.so.0(gtk_propagate_event+0x197)[0x7f1c6a0a7607]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main_do_event+0x2db)[0x7f1c6a0a78eb]
/usr/lib/libgdk-x11-2.0.so.0(+0x59c3c)[0x7f1c69d22c3c]
/usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x146)[0x7f1c68e2d296]
/usr/lib/libglib-2.0.so.0(+0x485e8)[0x7f1c68e2d5e8]
/usr/lib/libglib-2.0.so.0(g_main_loop_run+0x6a)[0x7f1c68e2d9ea]
/usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xa7)[0x7f1c6a0a69d7]
dia(main+0x25)[0x41c415]
/usr/lib/libc.so.6(__libc_start_main+0xf5)[0x7f1c67cfeb05]
dia[0x41c445]


Steps to reproduce:

1. start dia
2. on the side pane:
2.1 select "Database" objects category,
2.2 select "Table"
3. on canvas:
3.1 click to add a table
3.2 double click on the freshly placed object
3.3 select "Attributes" tab
3.4 click "New"
3.5 fill "Attribute data -> Name"
3.6 click "OK"
4. save drawing
5. quit by Ctrl+Q

Expected behavior: dia terminates gracefully.
Observed behavior: dia crashes (abort).

Also observed other random crashes with similar footprint when placing objects on the canvas. Difficult to reproduce.