466619 2023-02-28 20:13:01 +0000 Discover crashes in AbstractResource::isInstalled() after closing during initial loading 2025-06-04 21:36:39 +0000 1 1 2 Applications Discover discover 6.2.2 Neon Linux RESOLVED FIXED drkonqi NOR crash --- 1 git plasma-bugs-null aleixpol bmeier999 bplu4t2f nate postix v.n.suadicani https://invent.kde.org/plasma/discover/-/commit/4564d133485ed6399a801eaef10649ddb1376be5 6.4.0 0 oldest_to_newest 2212665 0 git 2023-02-28 20:13:01 +0000 Application: plasma-discover (5.27.1) Qt Version: 5.15.8 Frameworks Version: 5.103.0 Operating System: Linux 5.19.0-32-generic x86_64 Windowing System: X11 Distribution: KDE neon 5.27 DrKonqi: 5.27.1 [KCrashBackend] -- Information about the crash: After the upgrade to Plasma 5.27.1, clicking on the VLC icon in the new startup wizard opened Discover. While it was still loading, I closed the window. After that, the crash occurred. Opening Discover later via the Kickoff menu works without a problem, even if I try to close it while loading. The reporter is unsure if this crash is reproducible. -- Backtrace: Application: Discover (plasma-discover), signal: Segmentation fault [KCrash Handler] #4 0x00007f1277702a8b in AbstractResource::isInstalled() () at /usr/lib/x86_64-linux-gnu/plasma-discover/libDiscoverCommon.so #5 0x0000564b28f4db8c in () #6 0x0000564b28f41ea2 in () #7 0x00007f12754f40d4 in QtPrivate::QSlotObjectBase::call(QObject*, void**) (a=0x7fff986d1ea0, r=0x7f1268009680, this=0x564b322e7190) at ../../include/QtCore/../../src/corelib/kernel/qobjectdefs_impl.h:398 #8 doActivate<false>(QObject*, int, void**) (sender=0x564b2c1bde10, signal_index=0, argv=0x7fff986d1ea0) at kernel/qobject.cpp:3923 #9 0x00007f12754ed177 in QMetaObject::activate(QObject*, QMetaObject const*, int, void**) (sender=sender@entry=0x564b2c1bde10, m=m@entry=0x7f1275754140 <QObject::staticMetaObject>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7fff986d1ea0) at kernel/qobject.cpp:3983 #10 0x00007f12754ed233 in QObject::destroyed(QObject*) (this=this@entry=0x564b2c1bde10, _t1=<optimized out>, _t1@entry=0x564b2c1bde10) at .moc/moc_qobject.cpp:219 #11 0x00007f12754f23e7 in QObject::~QObject() (this=<optimized out>, __in_chrg=<optimized out>) at kernel/qobject.cpp:1010 #12 0x00007f12754f843d in QTimer::~QTimer() (this=0x564b2c1bde10, __in_chrg=<optimized out>) at kernel/qtimer.cpp:165 #13 0x00007f12754e711e in QObjectPrivate::deleteChildren() (this=0x564b2b3447d0) at kernel/qobject.cpp:2137 #14 0x00007f12754f21a6 in QObject::~QObject() (this=<optimized out>, __in_chrg=<optimized out>) at kernel/qobject.cpp:1115 #15 0x0000564b28f41a72 in () #16 0x00007f12754e9883 in QObject::event(QEvent*) (this=0x564b2b0f8930, e=0x564b2b8e8690) at kernel/qobject.cpp:1334 #17 0x00007f1276f6c793 in QApplicationPrivate::notify_helper(QObject*, QEvent*) (this=<optimized out>, receiver=0x564b2b0f8930, e=0x564b2b8e8690) at kernel/qapplication.cpp:3640 #18 0x00007f12754bc07a in QCoreApplication::notifyInternal2(QObject*, QEvent*) (receiver=0x564b2b0f8930, event=0x564b2b8e8690) at kernel/qcoreapplication.cpp:1064 #19 0x00007f12754bf167 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) (receiver=0x0, event_type=52, data=0x564b2af96c00) at kernel/qcoreapplication.cpp:1821 #20 0x00007f12754c2f4c in QCoreApplication::exec() () at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:86 #21 0x0000564b28f3fc63 in () #22 0x00007f1274a29d90 in __libc_start_call_main (main=main@entry=0x564b28f3f340, argc=argc@entry=2, argv=argv@entry=0x7fff986d2528) at ../sysdeps/nptl/libc_start_call_main.h:58 #23 0x00007f1274a29e40 in __libc_start_main_impl (main=0x564b28f3f340, argc=2, argv=0x7fff986d2528, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff986d2518) at ../csu/libc-start.c:392 #24 0x0000564b28f406a5 in () [Inferior 1 (process 4757) detached] Reported using DrKonqi 2212718 1 bmeier999 2023-02-28 21:20:38 +0000 Cant reproduce the crash 2266668 2 nate 2023-11-17 20:48:49 +0000 *** Bug 477111 has been marked as a duplicate of this bug. *** 2355945 3 nate 2024-09-18 17:49:48 +0000 *** Bug 493312 has been marked as a duplicate of this bug. *** 2371368 4 postix 2024-11-02 15:22:28 +0000 Can reproduce the crash: 1) Open Kickoff 2) Search for a not installed app, click on it "Get ..." Discover opens and refreshes the package list with `/usr/libexec/packagekitd` running the background. The view says "Loading". Waited for ~20 seconds and then closed Discover by pressing on the X in its titlebar. Discover then crashed with the following log: ``` #3 0x00007fa111e6287f in KCrash::defaultCrashHandler (sig=11) at /usr/src/debug/kcrash-6.7.0/src/kcrash.cpp:596 #4 0x00007fa10ea41580 in <signal handler called> () at /lib64/libc.so.6 #5 0x0000000000000090 in ??? () #6 0x00007fa111f596ed in AbstractResource::isInstalled (this=<optimized out>) at /usr/src/debug/discover-6.2.2/libdiscover/resources/AbstractResource.cpp:71 #7 0x000056290549cd34 in operator()<StreamResult> (__closure=<synthetic pointer>, res=...) at /usr/src/debug/discover-6.2.2/discover/DiscoverObject.cpp:366 #8 kIndexOf<QList<StreamResult>, DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()>::<lambda(auto:52)> > (func=..., list=...) at /usr/src/debug/discover-6.2.2/libdiscover/utils.h:123 #9 operator() (__closure=0x56293d6804f0) at /usr/src/debug/discover-6.2.2/discover/DiscoverObject.cpp:365 #10 std::__invoke_impl<bool, DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()>&> (__f=...) at /usr/include/c++/14/bits/invoke.h:61 #11 std::__invoke_r<bool, DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()>&> (__fn=...) at /usr/include/c++/14/bits/invoke.h:114 #12 std::_Function_handler<bool(), DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()> >::_M_invoke(const std::_Any_data &) (__functor=<optimized out>) at /usr/include/c++/14/bits/std_function.h:290 #13 0x000056290548fe46 in std::function<bool ()>::operator()() const (this=0x56293d7b3370) at /usr/include/c++/14/bits/std_function.h:591 #14 OneTimeAction::trigger (this=0x56293d7b3360) at /usr/src/debug/discover-6.2.2/libdiscover/utils.h:39 #15 OneTimeAction::trigger (this=0x56293d7b3360) at /usr/src/debug/discover-6.2.2/libdiscover/utils.h:34 #16 0x00007fa10f40e161 in QtPrivate::QSlotObjectBase::call (this=0x56293df5a3b0, r=<optimized out>, a=0x7ffdf787b690, this=<optimized out>, r=<optimized out>, a=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobjectdefs_impl.h:486 #17 doActivate<false> (sender=0x56293df18900, signal_index=0, argv=0x7ffdf787b690) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:4120 #18 0x00007fa10f406793 in QObject::destroyed (this=<optimized out>, _t1=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/build/src/corelib/kernel/moc_qobject.cpp:229 #19 0x00007fa10f3f3a4f in QObject::~QObject (this=0x56293df18900, this=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:1040 #20 0x00007fa10f41243d in QTimer::~QTimer (this=0x56293df18900, this=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qtimer.cpp:135 #21 0x00007fa10f3f260b in QObjectPrivate::deleteChildren (this=this@entry=0x56293d052660) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:2211 #22 0x00007fa10f3f39fb in QObject::~QObject (this=<optimized out>, this=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:1138 #23 0x0000562905490269 in DiscoverObject::~DiscoverObject (this=0x56293cbe8a40, this=<optimized out>) at /usr/src/debug/discover-6.2.2/discover/DiscoverObject.cpp:228 #24 0x00007fa10f3f9e7a in QObject::event (this=0x56293cbe8a40, e=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:1404 #25 0x00007fa110fdec35 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x56293cbe8a40, e=0x56293d4b0900) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/widgets/kernel/qapplication.cpp:3294 #26 0x00007fa10f3acbe8 in QCoreApplication::notifyInternal2 (receiver=0x56293cbe8a40, event=0x56293d4b0900) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qcoreapplication.cpp:1165 #27 0x00007fa10f3b57d8 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=52, data=0x56293cb92640) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qcoreapplication.cpp:1965 #28 0x00007fa10f3b6b07 in QCoreApplication::exec () at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/tools/qscopedpointer.h:110 #29 0x00007fa10fc0d580 in QGuiApplication::exec () at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/gui/kernel/qguiapplication.cpp:1975 #30 0x00007fa110fdbef9 in QApplication::exec () at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/widgets/kernel/qapplication.cpp:2562 #31 0x000056290548de06 in main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/discover-6.2.2/discover/main.cpp:219 ``` ``` #3 0x00007fa111e6287f in KCrash::defaultCrashHandler (sig=11) at /usr/src/debug/kcrash-6.7.0/src/kcrash.cpp:596 data = {<KCrash::MetadataWriter> = {_vptr.MetadataWriter = 0x7fa111e67828 <vtable for KCrash::Metadata+16>}, argv = {_M_elems = {0x0, 0x7fa111e65301 "--glrenderer", 0x56293d04daa0 "AMD Radeon RX 580 Series (radeonsi, polaris10, LLVM 18.1.8, DRM 3.59, 6.11.5-1-default)", 0x7fa111e6530e "--qtversion", 0x56293d04e930 "6.8.0", 0x7fa111e65320 "--kdeframeworksversion", 0x7fa111e6531a "6.7.0", 0x7fa111e65358 "--platform", 0x56293d23bd40 "wayland", 0x7fa111e65389 "--appname", 0x56293d0647b0 "plasma-discover", 0x7fa111e65393 "--apppath", 0x56293d0644e0 "/usr/bin", 0x7fa111e653a0 "--signal", 0x7ffdf787a746 "11", 0x7fa111e653ae "--pid", 0x7ffdf787a750 "4310", 0x7fa111e653b4 "--appversion", 0x56293d03ed20 "6.2.2", 0x7fa111e653c1 "--programname", 0x56293d0644b0 "Discover", 0x7fa111e653cf "--bugaddress", 0x56293d029720 "submit@bugs.kde.org", 0x7fa111e653dc "--productname", 0x56293d03e360 "discover/discover", 0x0 <repeats 13 times>}}, argc = 25, m_writer = 0x7ffdf787a6f0} platformName = {d = {d = 0x56293d23bd30, ptr = 0x56293d23bd40 "wayland", size = 7}, static _empty = 0 '\000'} about = 0x56293d04bcd0 argv = 0x7ffdf787a778 ini = {<KCrash::MetadataWriter> = {_vptr.MetadataWriter = 0x7fa111e67858 <vtable for KCrash::MetadataINIWriter+16>}, writable = false, fd = 31} sigtxt = "11\000\376\376\376\376\376\376\376" pidtxt = "4310\000", '\376' <repeats 15 times> argc = <optimized out> crashRecursionCounter = 2 #4 0x00007fa10ea41580 in <signal handler called> () at /lib64/libc.so.6 #5 0x0000000000000090 in ??? () #6 0x00007fa111f596ed in AbstractResource::isInstalled (this=<optimized out>) at /usr/src/debug/discover-6.2.2/libdiscover/resources/AbstractResource.cpp:71 #7 0x000056290549cd34 in operator()<StreamResult> (__closure=<synthetic pointer>, res=...) at /usr/src/debug/discover-6.2.2/discover/DiscoverObject.cpp:366 #8 kIndexOf<QList<StreamResult>, DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()>::<lambda(auto:52)> > (func=..., list=...) at /usr/src/debug/discover-6.2.2/libdiscover/utils.h:123 it = {i = 0x56293da15cc0} itEnd = {i = <optimized out>} i = 0 i = <optimized out> it = {i = <optimized out>} itEnd = {i = <optimized out>} #9 operator() (__closure=0x56293d6804f0) at /usr/src/debug/discover-6.2.2/discover/DiscoverObject.cpp:365 idx = <optimized out> timeout = {wp = {d = 0x56293e0553c0, value = 0x56293df18900}} res = {<QListSpecialMethods<StreamResult>> = {<QListSpecialMethodsBase<StreamResult>> = {<No data fields>}, <No data fields>}, d = {d = 0x56293da15cb0, ptr = 0x56293da15cc0, size = 3}} this = 0x56293cbe8a40 timeout = {wp = {d = <optimized out>, value = <optimized out>}} res = {<QListSpecialMethods<StreamResult>> = {<QListSpecialMethodsBase<StreamResult>> = {<No data fields>}, <No data fields>}, d = {d = <optimized out>, ptr = <optimized out>, size = <optimized out>}} this = <optimized out> idx = <optimized out> oneBroken = <optimized out> #10 std::__invoke_impl<bool, DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()>&> (__f=...) at /usr/include/c++/14/bits/invoke.h:61 #11 std::__invoke_r<bool, DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()>&> (__fn=...) at /usr/include/c++/14/bits/invoke.h:114 #12 std::_Function_handler<bool(), DiscoverObject::openApplication(const QUrl&)::<lambda()>::<lambda(QVector<StreamResult>&)>::<lambda()> >::_M_invoke(const std::_Any_data &) (__functor=<optimized out>) at /usr/include/c++/14/bits/std_function.h:290 #13 0x000056290548fe46 in std::function<bool ()>::operator()() const (this=0x56293d7b3370) at /usr/include/c++/14/bits/std_function.h:591 #14 OneTimeAction::trigger (this=0x56293d7b3360) at /usr/src/debug/discover-6.2.2/libdiscover/utils.h:39 #15 OneTimeAction::trigger (this=0x56293d7b3360) at /usr/src/debug/discover-6.2.2/libdiscover/utils.h:34 #16 0x00007fa10f40e161 in QtPrivate::QSlotObjectBase::call (this=0x56293df5a3b0, r=<optimized out>, a=0x7ffdf787b690, this=<optimized out>, r=<optimized out>, a=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobjectdefs_impl.h:486 #17 doActivate<false> (sender=0x56293df18900, signal_index=0, argv=0x7ffdf787b690) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:4120 obj = {m_slotObject = std::unique_ptr<class QtPrivate::QSlotObjectBase> = {get() = 0x56293df5a3b0}} receiver = <optimized out> td = <optimized out> receiverInSameThread = <optimized out> senderData = {previous = 0x0, receiver = 0x56293d7b3360, sender = 0x56293df18900, signal = 0} c = 0x56293df196d0 connections = {d = 0x56293df1ce60} list = 0x56293df1ceb0 inSenderThread = <optimized out> highestConnectionId = 2 signalVector = <optimized out> currentThreadId = 0x7fa10af09280 sp = <optimized out> signal_spy_set = 0x0 empty_argv = {0x0} senderDeleted = false #18 0x00007fa10f406793 in QObject::destroyed (this=<optimized out>, _t1=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/build/src/corelib/kernel/moc_qobject.cpp:229 _a = {0x0, 0x7ffdf787b688} #19 0x00007fa10f3f3a4f in QObject::~QObject (this=0x56293df18900, this=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:1040 d = <optimized out> sharedRefcount = 0x56293e0553c0 cd = <optimized out> d = <optimized out> sharedRefcount = <optimized out> cd = <optimized out> ownThread = <optimized out> privThread = <optimized out> signalSlotMutex = <optimized out> locker = {m_mutex = <optimized out>, m_isLocked = <optimized out>} receiverCount = <optimized out> signal = <optimized out> connectionList = <optimized out> c = <optimized out> m = <optimized out> needToUnlock = <optimized out> node = <optimized out> sender = <optimized out> m = <optimized out> needToUnlock = <optimized out> senderData = <optimized out> slotObj = <optimized out> locksAreTheSame = <optimized out> #20 0x00007fa10f41243d in QTimer::~QTimer (this=0x56293df18900, this=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qtimer.cpp:135 #21 0x00007fa10f3f260b in QObjectPrivate::deleteChildren (this=this@entry=0x56293d052660) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:2211 i = 2 #22 0x00007fa10f3f39fb in QObject::~QObject (this=<optimized out>, this=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:1138 d = <optimized out> sharedRefcount = <optimized out> cd = <optimized out> d = <optimized out> sharedRefcount = <optimized out> cd = <optimized out> ownThread = <optimized out> privThread = <optimized out> signalSlotMutex = <optimized out> locker = {m_mutex = <optimized out>, m_isLocked = <optimized out>} receiverCount = <optimized out> signal = <optimized out> connectionList = <optimized out> c = <optimized out> m = <optimized out> needToUnlock = <optimized out> node = <optimized out> sender = <optimized out> m = <optimized out> needToUnlock = <optimized out> senderData = <optimized out> slotObj = <optimized out> locksAreTheSame = <optimized out> #23 0x0000562905490269 in DiscoverObject::~DiscoverObject (this=0x56293cbe8a40, this=<optimized out>) at /usr/src/debug/discover-6.2.2/discover/DiscoverObject.cpp:228 #24 0x00007fa10f3f9e7a in QObject::event (this=0x56293cbe8a40, e=<optimized out>) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qobject.cpp:1404 #25 0x00007fa110fdec35 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x56293cbe8a40, e=0x56293d4b0900) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/widgets/kernel/qapplication.cpp:3294 consumed = false filtered = false #26 0x00007fa10f3acbe8 in QCoreApplication::notifyInternal2 (receiver=0x56293cbe8a40, event=0x56293d4b0900) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qcoreapplication.cpp:1165 selfRequired = <optimized out> result = false cbdata = {0x56293cbe8a40, 0x56293d4b0900, 0x7ffdf787b957} d = <optimized out> threadData = <optimized out> scopeLevelCounter = {threadData = 0x56293cb92640} #27 0x00007fa10f3b57d8 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=52, data=0x56293cb92640) at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/kernel/qcoreapplication.cpp:1965 e = <optimized out> pe = <optimized out> r = <optimized out> relocker = {m_func = {__locker = <optimized out>}, m_invoke = <optimized out>} event_deleter = {d = <optimized out>} locker = {_M_device = 0x56293cb92698, _M_owns = false} startOffset = 76 i = @0x7ffdf787b9d0: 76 cleanup = {receiver = 0x0, event_type = 52, data = 0x56293cb92640, exceptionCaught = true} #28 0x00007fa10f3b6b07 in QCoreApplication::exec () at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/corelib/tools/qscopedpointer.h:110 threadData = 0x56293cb92640 eventLoop = {<QObject> = {_vptr.QObject = 0x7fa10f82e448 <vtable for QEventLoop+16>, static staticMetaObject = {d = {superdata = {direct = 0x0}, stringdata = 0x7fa10f69d840 <_ZN12_GLOBAL__N_1L39qt_meta_stringdata_CLASSQObjectENDCLASSE.lto_priv.0>, data = 0x7fa10f69d720 <_ZL33qt_meta_data_CLASSQObjectENDCLASS.lto_priv.0>, static_metacall = 0x7fa10f407d00 <QObject::qt_static_metacall(QObject*, QMetaObject::Call, int, void**)>, relatedMetaObjects = 0x0, metaTypes = 0x7fa10f82bb80 <_Z27qt_incomplete_metaTypeArrayIN12_GLOBAL__N_141qt_meta_stringdata_CLASSQObjectENDCLASS_tEJN9QtPrivate20TypeAndForceCompleteI7QStringSt17integral_constantIbLb1EEEENS3_I7QObjectS6_EENS3_IvS5_IbLb0EEEENS3_IPS8_SA_EESB_SB_NS3_IRKS4_SA_EESB_SD_EE.lto_priv.0>, extradata = 0x0}}, d_ptr = {d = 0x56293d04d930}}, static staticMetaObject = {d = {superdata = {direct = 0x5629054e1400 <QObject::staticMetaObject>}, stringdata = 0x7fa10f69ca80 <_ZN12_GLOBAL__N_1L42qt_meta_stringdata_CLASSQEventLoopENDCLASSE.lto_priv.0>, data = 0x7fa10f69c980 <_ZL36qt_meta_data_CLASSQEventLoopENDCLASS.lto_priv.0>, static_metacall = 0x7fa10f3b1df0 <QEventLoop::qt_static_metacall(QObject*, QMetaObject::Call, int, void**)>, relatedMetaObjects = 0x0, metaTypes = 0x7fa10f82b700 <_Z27qt_incomplete_metaTypeArrayIN12_GLOBAL__N_144qt_meta_stringdata_CLASSQEventLoopENDCLASS_tEJN9QtPrivate20TypeAndForceCompleteI6QFlagsIN10QEventLoop17ProcessEventsFlagEESt17integral_constantIbLb1EEEENS3_IS5_S9_EENS3_IvS8_IbLb0EEEENS3_IiSC_EESD_SD_EE.lto_priv.0>, extradata = 0x0}}} returnCode = 0 #29 0x00007fa10fc0d580 in QGuiApplication::exec () at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/gui/kernel/qguiapplication.cpp:1975 #30 0x00007fa110fdbef9 in QApplication::exec () at /usr/src/debug/qtbase-everywhere-src-6.8.0/src/widgets/kernel/qapplication.cpp:2562 #31 0x000056290548de06 in main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/discover-6.2.2/discover/main.cpp:219 format = {d = 0x56293cb8b720} app = {<QGuiApplication> = {<QCoreApplication> = {<QObject> = {_vptr.QObject = 0x7fa1115bcac8 <vtable for QApplication+16>, static staticMetaObject = {d = {superdata = {direct = 0x0}, stringdata = 0x7fa10f69d840 <_ZN12_GLOBAL__N_1L39qt_meta_stringdata_CLASSQObjectENDCLASSE.lto_priv.0>, data = 0x7fa10f69d720 <_ZL33qt_meta_data_CLASSQObjectENDCLASS.lto_priv.0>, static_metacall = 0x7fa10f407d00 <QObject::qt_static_metacall(QObject*, QMetaObject::Call, int, void**)>, relatedMetaObjects = 0x0, metaTypes = 0x7fa10f82bb80 <_Z27qt_incomplete_metaTypeArrayIN12_GLOBAL__N_141qt_meta_stringdata_CLASSQObjectENDCLASS_tEJN9QtPrivate20TypeAndForceCompleteI7QStringSt17integral_constantIbLb1EEEENS3_I7QObjectS6_EENS3_IvS5_IbLb0EEEENS3_IPS8_SA_EESB_SB_NS3_IRKS4_SA_EESB_SD_EE.lto_priv.0>, extradata = 0x0}}, d_ptr = {d = 0x56293cb622a0}}, static staticMetaObject = {d = {superdata = {direct = 0x5629054e1400 <QObject::staticMetaObject>}, stringdata = 0x7fa10f69cd80 <_ZN12_GLOBAL__N_1L48qt_meta_stringdata_CLASSQCoreApplicationENDCLASSE.lto_priv.0>, data = 0x7fa10f69cbe0 <_ZL42qt_meta_data_CLASSQCoreApplicationENDCLASS.lto_priv.0>, static_metacall = 0x7fa10f3b4c70 <QCoreApplication::qt_static_metacall(QObject*, QMetaObject::Call, int, void**)>, relatedMetaObjects = 0x0, metaTypes = 0x7fa10f82b780 <_Z27qt_incomplete_metaTypeArrayIN12_GLOBAL__N_150qt_meta_stringdata_CLASSQCoreApplicationENDCLASS_tEJN9QtPrivate20TypeAndForceCompleteI7QStringSt17integral_constantIbLb1EEEES7_S7_S7_NS3_IbS6_EENS3_I16QCoreApplicationS6_EENS3_IvS5_IbLb0EEEESC_SC_SC_SC_SC_SC_NS3_IiSB_EESC_EE.lto_priv.0>, extradata = 0x0}}, static self = 0x7ffdf787bb70}, static staticMetaObject = {d = {superdata = {direct = 0x5629054e1720 <QCoreApplication::staticMetaObject>}, stringdata = 0x7fa1101da0a0 <_ZN12_GLOBAL__N_1L47qt_meta_stringdata_CLASSQGuiApplicationENDCLASSE.lto_priv.0>, data = 0x7fa1101d9da0 <_ZL41qt_meta_data_CLASSQGuiApplicationENDCLASS.lto_priv.0>, static_metacall = 0x7fa10fc1f6d0 <QGuiApplication::qt_static_metacall(QObject*, QMetaObject::Call, int, void**)>, relatedMetaObjects = 0x0, metaTypes = 0x7fa110311a40 <_Z27qt_incomplete_metaTypeArrayIN12_GLOBAL__N_149qt_meta_stringdata_CLASSQGuiApplicationENDCLASS_tEJN9QtPrivate20TypeAndForceCompleteI5QIconSt17integral_constantIbLb1EEEENS3_I7QStringS6_EES9_NS3_IN2Qt15LayoutDirectionES6_EES9_NS3_IbS6_EENS3_IP7QScreenS6_EENS3_I15QGuiApplicationS6_EENS3_IvS5_IbLb0EEEESK_NS3_ISF_SJ_EESK_SL_SK_SL_SK_SK_NS3_IP7QObjectSJ_EESK_NS3_IP7QWindowSJ_EESK_NS3_INSA_16ApplicationStateESJ_EESK_NS3_ISB_SJ_EESK_NS3_IR15QSessionManagerSJ_EESK_SX_SK_SK_NS3_IRK8QPaletteSJ_EESK_NS3_IRK5QFontSJ_EESK_NS3_IxSJ_EESK_SO_EE.lto_priv.0>, extradata = 0x0}}}, static staticMetaObject = {d = {superdata = {direct = 0x5629054e16a0 <QGuiApplication::staticMetaObject>}, stringdata = 0x7fa11144b540 <_ZN12_GLOBAL__N_1L44qt_meta_stringdata_CLASSQApplicationENDCLASSE.lto_priv.0>, data = 0x7fa11144b3a0 <_ZL38qt_meta_data_CLASSQApplicationENDCLASS.lto_priv.0>, static_metacall = 0x7fa110fe1a20 <QApplication::qt_static_metacall(QObject*, QMetaObject::Call, int, void**)>, relatedMetaObjects = 0x0, metaTypes = 0x7fa1115ac8c0 <_Z27qt_incomplete_metaTypeArrayIN12_GLOBAL__N_146qt_meta_stringdata_CLASSQApplicationENDCLASS_tEJN9QtPrivate20TypeAndForceCompleteIiSt17integral_constantIbLb1EEEES6_S6_S6_S6_S6_NS3_I7QStringS5_EENS3_IbS5_EENS3_I12QApplicationS5_EENS3_IvS4_IbLb0EEEENS3_IP7QWidgetSC_EESG_SD_NS3_IRKS7_SC_EESD_NS3_IKbSC_EESD_SD_EE.lto_priv.0>, extradata = 0x0}}} about = {d = std::unique_ptr<class KAboutDataPrivate> = {get() = 0x56293d063640}} discoverObject = <optimized out> ``` Operating System: openSUSE Tumbleweed 20241030 KDE Plasma Version: 6.2.2 KDE Frameworks Version: 6.7.0 Qt Version: 6.8.0 Kernel Version: 6.11.5-1-default (64-bit) Graphics Platform: Wayland 2425067 5 bug-janitor 2025-05-17 19:20:24 +0000 A possibly relevant merge request was started @ https://invent.kde.org/plasma/discover/-/merge_requests/1090 2429329 6 aleixpol 2025-05-31 14:55:15 +0000 Git commit 82226e8a5cd263d5e9eb2b4c7c48eb32cfae296f by Aleix Pol Gonzalez, on behalf of Wendi Gan. Committed on 31/05/2025 at 14:54. Pushed by apol into branch 'master'. Fix use-after-free when closing Discover When closing Discover: - First, ResourcesModel::~ResourcesModel() is called, with `AbstractResource` (child object of `AbstractResourcesBackend`) freed. - Next, DiscoverObject::~DiscoverObject() is called, with its child object `timeout` destroyed. Then, openResourceOrWait() is invoked, and res.resource->isInstalled() accesses freed memory (use-after-free). Change: Add `m_isDeleting` to avoid accessing freed memory during destruction. M +4 -0 discover/DiscoverObject.cpp M +2 -0 discover/DiscoverObject.h https://invent.kde.org/plasma/discover/-/commit/82226e8a5cd263d5e9eb2b4c7c48eb32cfae296f 2430426 7 nate 2025-06-04 21:36:39 +0000 Git commit 4564d133485ed6399a801eaef10649ddb1376be5 by Nate Graham. Committed on 04/06/2025 at 21:28. Pushed by ngraham into branch 'Plasma/6.4'. Fix use-after-free when closing Discover When closing Discover: - First, ResourcesModel::~ResourcesModel() is called, with `AbstractResource` (child object of `AbstractResourcesBackend`) freed. - Next, DiscoverObject::~DiscoverObject() is called, with its child object `timeout` destroyed. Then, openResourceOrWait() is invoked, and res.resource->isInstalled() accesses freed memory (use-after-free). Change: Add `m_isDeleting` to avoid accessing freed memory during destruction. (cherry picked from commit 82226e8a5cd263d5e9eb2b4c7c48eb32cfae296f) Co-authored-by: Wendi Gan <gwdx@mail.ustc.edu.cn> M +4 -0 discover/DiscoverObject.cpp M +2 -0 discover/DiscoverObject.h https://invent.kde.org/plasma/discover/-/commit/4564d133485ed6399a801eaef10649ddb1376be5