Bug 306709

Summary: Crash while doing Wine Conformance Test
Product: [Plasma] kwin Reporter: Doug <dougt901-2012>
Component: generalAssignee: KWin default assignee <kwin-bugs-null>
Status: RESOLVED WAITINGFORINFO    
Severity: crash    
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: openSUSE   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Doug 2012-09-13 01:37:54 UTC 
Application: kwin (4.9.1 "release 561")
KDE Platform Version: 4.9.1 "release 561"
Qt Version: 4.8.2
Operating System: Linux 3.4.6-2.10-desktop x86_64
Distribution: "openSUSE 12.2 (x86_64)"

-- Information about the crash:
- What I was doing when the application crashed:
Was in the middle of Wine conformance test (see http://wiki.winehq.org/ConformanceTests )
- Unusual behavior I noticed:
Conformance test blanked screen several times (I think on purpose).  Then there was a longer screen-blank that seemed anomalous.  Display stopped temporarily.

-- Backtrace:
Application: KWin (kwin), signal: Segmentation fault
Using host libthread_db library "/lib64/libthread_db.so.1".
[Current thread is 1 (Thread 0x7ff3ae557780 (LWP 2861))]

Thread 3 (Thread 0x7ff38dc80700 (LWP 2880)):
#0  0x00007ff3a96408f4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007ff3aac85217 in QTWTF::TCMalloc_PageHeap::scavengerThread (this=0x7ff3aaf92640 <QTWTF::pageheap_memory>) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:2359
#2  0x00007ff3aac85249 in QTWTF::TCMalloc_PageHeap::runScavengerThread (context=<optimized out>) at ../3rdparty/javascriptcore/JavaScriptCore/wtf/FastMalloc.cpp:1464
#3  0x00007ff3a963ce0e in start_thread () from /lib64/libpthread.so.0
#4  0x00007ff3add8b2bd in clone () from /lib64/libc.so.6

Thread 2 (Thread 0x7ff38ed71700 (LWP 27560)):
#0  0x00007ff3a96408f4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0
#1  0x00007ff38ef204e3 in ?? () from /usr/lib64/dri/r600_dri.so
#2  0x00007ff3a963ce0e in start_thread () from /lib64/libpthread.so.0
#3  0x00007ff3add8b2bd in clone () from /lib64/libc.so.6

Thread 1 (Thread 0x7ff3ae557780 (LWP 2861)):
[KCrash Handler]
#5  0x0000003000000001 in ?? ()
#6  0x00007ff3a99df712 in QObject::property (this=0x1faf3f0, name=0x7ff3ac558baa "visibleRect") at kernel/qobject.cpp:3750
#7  0x00007ff3ac548f9d in KWin::EffectWindow::expandedGeometry (this=<optimized out>) at /usr/src/debug/kde-workspace-4.9.1/kwin/libkwineffects/kwineffects.cpp:311
#8  0x00007ff3ac554ceb in KWin::AnimationEffect::updateLayerRepaints (this=<optimized out>) at /usr/src/debug/kde-workspace-4.9.1/kwin/libkwineffects/kwinanimationeffect.cpp:711
#9  0x00007ff3ac55565a in KWin::AnimationEffect::triggerRepaint (this=<optimized out>) at /usr/src/debug/kde-workspace-4.9.1/kwin/libkwineffects/kwinanimationeffect.cpp:596
#10 0x00007ff3ac555a3d in KWin::AnimationEffect::animate (this=0x1cbffe0, w=0x1cc7dc0, a=<optimized out>, meta=0, ms=150, to=..., curve=..., delay=0, from=...) at /usr/src/debug/kde-workspace-4.9.1/kwin/libkwineffects/kwinanimationeffect.cpp:185
#11 0x00007ff3ae13337e in KWin::ScriptedEffect::animate (this=0x1cbffe0, w=0x1cc7dc0, a=KWin::AnimationEffect::Opacity, ms=150, to=..., from=..., data=0x0, curve=..., delay=0) at /usr/src/debug/kde-workspace-4.9.1/kwin/scripting/scriptedeffect.cpp:252
#12 0x00007ff3ae088cf4 in qt_static_metacall (_a=<optimized out>, _id=<optimized out>, _o=<optimized out>, _c=<optimized out>) at /usr/src/debug/kde-workspace-4.9.1/build/kwin/moc_scriptedeffect.cpp:234
#13 KWin::ScriptedEffect::qt_static_metacall (_o=0x1cbffe0, _c=<optimized out>, _id=<optimized out>, _a=0x7fff3b781dd0) at /usr/src/debug/kde-workspace-4.9.1/build/kwin/moc_scriptedeffect.cpp:226
#14 0x00007ff3ae088efb in KWin::ScriptedEffect::qt_metacall (this=0x1cbffe0, _c=QMetaObject::InvokeMetaMethod, _id=<optimized out>, _a=0x7fff3b781dd0) at /usr/src/debug/kde-workspace-4.9.1/build/kwin/moc_scriptedeffect.cpp:287
#15 0x00007ff3aacf3b9d in QScript::callQtMethod (exec=exec@entry=0x7ff38cb6f0c8, callType=callType@entry=QMetaMethod::Method, thisQObject=thisQObject@entry=0x1cbffe0, scriptArgs=..., meta=meta@entry=0x7ff3ae388480 <KWin::ScriptedEffect::staticMetaObject>, initialIndex=14, maybeOverloaded=true) at bridge/qscriptqobject.cpp:960
#16 0x00007ff3aacf54cd in QScript::QtFunction::execute (this=this@entry=0x7ff38e504040, exec=0x7ff38cb6f0c8, thisValue=..., thisValue@entry=..., scriptArgs=...) at bridge/qscriptqobject.cpp:1015
#17 0x00007ff3aacf56f9 in QScript::QtFunction::call (exec=0x7ff38cb6f0c8, callee=0x7ff38e504040, thisValue=..., args=...) at bridge/qscriptqobject.cpp:1030
#18 0x00007ff3aabf7c50 in QTJSC::NativeFuncWrapper::operator() (this=0x7fff3b781fe0, exec=0x7ff38cb6f0c8, jsobj=0x7ff38e504040, thisValue=..., argList=...) at ../3rdparty/javascriptcore/JavaScriptCore/runtime/CallData.cpp:46
#19 0x00007ff3aabd4eca in QTJSC::cti_op_call_NotJSFunction (args=0x7fff3b782030) at ../3rdparty/javascriptcore/JavaScriptCore/jit/JITStubs.cpp:1780
#20 0x00007ff3ae3e6241 in ?? ()
#21 0x0000000000000000 in ?? ()

Reported using DrKonqi
Comment 1 Thomas Lübking 2012-09-13 13:13:24 UTC 
if Qt is not off by n lines that's (likely) an out of bound access in QObject (rather than a dangeling EffectWindow)

3745	    int id = meta->indexOfProperty(name);
3746	    if (id < 0) {
3747	        if (!d->extraData)
3748	            return QVariant();
3749	        const int i = d->extraData->propertyNames.indexOf(name);
3750	        return d->extraData->propertyValues.value(i);

Can you try causing this while running kwin in valgrind and provide the valgrind log?
Comment 2 Martin Flöser 2013-01-07 17:24:05 UTC 
if possible please provide the valgrind log. If you don't know what is requested, please ask.
Comment 3 Doug 2013-01-08 02:52:53 UTC 
Sorry, missed the earlier request and cannot provide valgrind log.  The 64-bit wine conformance test that caused the problem no longer executes at all on my computer (probably I changed the setup somehow), and the 32-bit does not cause that malfunction (although it causes others).
Comment 4 Thomas Lübking 2013-01-08 07:26:21 UTC 
Including the WM crashes?
Comment 5 Thomas Lübking 2013-12-05 08:09:02 UTC 
from the backtrace it looks like bug #317849