Bug 349535

Summary: Crash when closing Konsole (intermittent)
Product: [Applications] konsole Reporter: A <bugreports>
Component: generalAssignee: Konsole Developer <konsole-devel>
Status: RESOLVED DUPLICATE    
Severity: crash CC: johan.palmqvist-kde, mail, martin.sandsmark, tom-kde.bugs
Priority: NOR Keywords: drkonqi
Version: 3.0.1   
Target Milestone: ---   
Platform: Ubuntu   
OS: Linux   
Latest Commit: Version Fixed In:
Attachments: New crash information added by DrKonqi
New crash information added by DrKonqi

Description A 2015-06-23 14:54:17 UTC
Application: konsole (3.0.1)

Qt Version: 5.4.1
Operating System: Linux 3.19.0-21-generic x86_64
Distribution: Ubuntu 15.04

-- Information about the crash:
- What I was doing when the application crashed:

Closing Konsole. Upon closing Konsole I was informed that Konsole had crashed.

The crash can be reproduced sometimes.

-- Backtrace:
Application: Konsole (konsole), signal: Aborted
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7fad25710800 (LWP 1997))]

Thread 2 (Thread 0x7fad0fb02700 (LWP 1998)):
[KCrash Handler]
#6  0x00007fad25116267 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
#7  0x00007fad25117eca in __GI_abort () at abort.c:89
#8  0x00007fad25159c53 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7fad252721a8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#9  0x00007fad25161c69 in malloc_printerr (ptr=<optimized out>, str=0x7fad252722b8 "double free or corruption (out)", action=1) at malloc.c:4965
#10 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
#11 0x00007fad2516589c in __GI___libc_free (mem=<optimized out>) at malloc.c:2950
#12 0x00007fad19123af6 in _nv007tls () from /usr/lib/nvidia-346/tls/libnvidia-tls.so.346.59
#13 0x00007fad1d6ba359 in __nptl_deallocate_tsd () at pthread_create.c:175
#14 0x00007fad1d6bb76d in __nptl_deallocate_tsd () at ../sysdeps/unix/sysv/linux/exit-thread.h:36
#15 start_thread (arg=0x7fad0fb02700) at pthread_create.c:346
#16 0x00007fad251e7eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7fad25710800 (LWP 1997)):
#0  0x00007fad251dc8dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x00007fad1f6e8b72 in ?? () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#2  0x00007fad1f6ea3ff in ?? () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#3  0x00007fad1f6ea512 in xcb_wait_for_reply () from /usr/lib/x86_64-linux-gnu/libxcb.so.1
#4  0x00007fad1fb4069f in _XReply () from /usr/lib/x86_64-linux-gnu/libX11.so.6
#5  0x00007fad1fb3c28d in XSync () from /usr/lib/x86_64-linux-gnu/libX11.so.6
#6  0x00007fad1fb1e5be in XCloseDisplay () from /usr/lib/x86_64-linux-gnu/libX11.so.6
#7  0x00007fad1229b1f4 in ?? () from /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so
#8  0x00007fad1229b619 in ?? () from /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so
#9  0x00007fad1229fd3e in ?? () from /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so
#10 0x00007fad1229fe19 in ?? () from /usr/lib/x86_64-linux-gnu/qt5/plugins/platforms/libqxcb.so
#11 0x00007fad220935c0 in QGuiApplicationPrivate::~QGuiApplicationPrivate() () from /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5
#12 0x00007fad226544e9 in QApplicationPrivate::~QApplicationPrivate() () from /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#13 0x00007fad21d8983b in QObject::~QObject() () from /usr/lib/x86_64-linux-gnu/libQt5Core.so.5
#14 0x00007fad22656133 in QApplication::~QApplication() () from /usr/lib/x86_64-linux-gnu/libQt5Widgets.so.5
#15 0x00007fad254cc779 in kdemain () from /usr/lib/x86_64-linux-gnu/libkdeinit5_konsole.so
#16 0x00007fad25101a40 in __libc_start_main (main=0x400720 <main>, argc=1, argv=0x7ffe77e74418, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffe77e74408) at libc-start.c:289
#17 0x000000000040074e in _start ()

Possible duplicates by query: bug 348828, bug 347129, bug 346593, bug 346576, bug 341818.

Reported using DrKonqi
Comment 1 Volker Siegel 2015-10-22 20:34:03 UTC
I had the same problem, also intermittent.
It matches the description of this bug exactly,
so I suggest to change the status to CONFIRMED.
Comment 2 Johan Palmqvist 2016-01-21 21:39:38 UTC
Created attachment 96776 [details]
New crash information added by DrKonqi

konsole (15.08.0) using Qt 5.5.1

- What I was doing when the application crashed: Exactly the same scenario (Konsole crashes when closing with Ctrl+D) shortly after the first bug report was filed (#358326) but stacktrace differs. Between the crashes there was a reboot to a different kernel version (4.2.0 to 4.3.0) and very little activity in Konsole.

-- Backtrace (Reduced):
#6  0x00007f178958f227 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
#7  0x00007f1789590e8a in __GI_abort () at abort.c:89
[...]
#9  0x00007f17895dabc9 in malloc_printerr (ptr=<optimized out>, str=0x7f17896eb238 "double free or corruption (out)", action=1) at malloc.c:4965
#10 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
#11 0x00007f17895de7fc in __GI___libc_free (mem=<optimized out>) at malloc.c:2950
Comment 3 Tom Mittelstädt 2016-02-03 22:54:42 UTC
Created attachment 96998 [details]
New crash information added by DrKonqi

konsole (15.08.0) using Qt 5.5.1

- What I was doing when the application crashed:

Same here, but with silghtly different stacktrace

-- Backtrace (Reduced):
#6  0x00007f431ed3c267 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
#7  0x00007f431ed3deca in __GI_abort () at abort.c:89
[...]
#9  0x00007f431ed87c69 in malloc_printerr (ptr=<optimized out>, str=0x7f431ee982b8 "double free or corruption (out)", action=1) at malloc.c:4965
#10 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
#11 0x00007f431ed8b89c in __GI___libc_free (mem=<optimized out>) at malloc.c:2950
Comment 4 Martin Sandsmark 2016-08-13 17:32:18 UTC

*** This bug has been marked as a duplicate of bug 342201 ***