Bug 352700

Application: roger ()
KDE Platform Version: 4.14.6
Qt Version: 4.8.6
Operating System: Linux 3.16.0-34-generic x86_64
Distribution: Ubuntu 15.04

-- Information about the crash:
- What I was doing when the application crashed: I closed the application. Every time, when I close roger router, the application crashes

The crash can be reproduced every time.

-- Backtrace:
Application: roger (roger), signal: Aborted
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7fe5bda939c0 (LWP 26490))]

Thread 6 (Thread 0x7fe5aedf7700 (LWP 26493)):
#0  0x00007fe5bb7167a4 in g_mutex_unlock (mutex=0x1dc7f50) at /build/buildd/glib2.0-2.44.1/./glib/gthread-posix.c:1348
#1  0x00007fe5bb6d16f9 in g_main_context_query (context=context@entry=0x1dc7f50, max_priority=2147483647, timeout=timeout@entry=0x7fe5aedf6c04, fds=fds@entry=0x7fe5a80010c0, n_fds=n_fds@entry=3) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3557
#2  0x00007fe5bb6d1e37 in g_main_context_iterate (context=0x1dc7f50, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3790
#3  0x00007fe5bb6d2242 in g_main_loop_run (loop=0x1dc7ee0) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:4002
#4  0x00007fe5bbcc8af6 in gdbus_shared_thread_func (user_data=0x1dc7f20) at /build/buildd/glib2.0-2.44.1/./gio/gdbusprivate.c:274
#5  0x00007fe5bb6f8955 in g_thread_proxy (data=0x1d79400) at /build/buildd/glib2.0-2.44.1/./glib/gthread.c:764
#6  0x00007fe5bac2e6aa in start_thread (arg=0x7fe5aedf7700) at pthread_create.c:333
#7  0x00007fe5ba963eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 5 (Thread 0x7fe5ae5f6700 (LWP 26494)):
#0  0x00007fe5ba9588dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x00007fe5bb6d1ebc in g_main_context_iterate (priority=2147483647, n_fds=1, fds=0x7fe5a00010c0, timeout=-1, context=0x1e055a0) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:4103
#2  0x00007fe5bb6d1ebc in g_main_context_iterate (context=context@entry=0x1e055a0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3803
#3  0x00007fe5bb6d1fcc in g_main_context_iteration (context=0x1e055a0, may_block=1) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3869
#4  0x00007fe5af86b27d in  () at /usr/lib/x86_64-linux-gnu/gio/modules/libdconfsettings.so
#5  0x00007fe5bb6f8955 in g_thread_proxy (data=0x1d795e0) at /build/buildd/glib2.0-2.44.1/./glib/gthread.c:764
#6  0x00007fe5bac2e6aa in start_thread (arg=0x7fe5ae5f6700) at pthread_create.c:333
#7  0x00007fe5ba963eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 4 (Thread 0x7fe5a7fff700 (LWP 26495)):
#0  0x00007fe5bb7167a4 in g_mutex_unlock (mutex=0x1f07e60) at /build/buildd/glib2.0-2.44.1/./glib/gthread-posix.c:1348
#1  0x00007fe5bb6d1ddb in g_main_context_iterate (context=context@entry=0x1f07e60, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3786
#2  0x00007fe5bb6d1fcc in g_main_context_iteration (context=0x1f07e60, may_block=may_block@entry=1) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3869
#3  0x00007fe5bb6d2009 in glib_worker_main (data=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:5618
#4  0x00007fe5bb6f8955 in g_thread_proxy (data=0x1f410f0) at /build/buildd/glib2.0-2.44.1/./glib/gthread.c:764
#5  0x00007fe5bac2e6aa in start_thread (arg=0x7fe5a7fff700) at pthread_create.c:333
#6  0x00007fe5ba963eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 3 (Thread 0x7fe5a4af2700 (LWP 26496)):
#0  0x00007fe5ba9588dd in poll () at ../sysdeps/unix/syscall-template.S:81
#1  0x00007fe5a6a8f601 in  () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#2  0x00007fe5a6a80b41 in pa_mainloop_poll () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#3  0x00007fe5a6a811de in pa_mainloop_iterate () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#4  0x00007fe5a6a81290 in pa_mainloop_run () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#5  0x00007fe5a6a8f596 in  () at /usr/lib/x86_64-linux-gnu/libpulse.so.0
#6  0x00007fe5a68326c8 in  () at /usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-6.0.so
#7  0x00007fe5bac2e6aa in start_thread (arg=0x7fe5a4af2700) at pthread_create.c:333
#8  0x00007fe5ba963eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 2 (Thread 0x7fe58fbed700 (LWP 26497)):
#0  0x00007fe5ba95e5a9 in syscall () at ../sysdeps/unix/sysv/linux/x86_64/syscall.S:38
#1  0x00007fe5bb716a0a in g_cond_wait_until (cond=cond@entry=0x1edb718, mutex=mutex@entry=0x1edb710, end_time=end_time@entry=5989094342) at /build/buildd/glib2.0-2.44.1/./glib/gthread-posix.c:1442
#2  0x00007fe5bb6a6889 in g_async_queue_pop_intern_unlocked (queue=queue@entry=0x1edb710, wait=wait@entry=1, end_time=end_time@entry=5989094342) at /build/buildd/glib2.0-2.44.1/./glib/gasyncqueue.c:422
#3  0x00007fe5bb6a6eab in g_async_queue_timeout_pop (queue=0x1edb710, timeout=timeout@entry=15000000) at /build/buildd/glib2.0-2.44.1/./glib/gasyncqueue.c:543
#4  0x00007fe5bb6f93ac in g_thread_pool_thread_proxy () at /build/buildd/glib2.0-2.44.1/./glib/gthreadpool.c:167
#5  0x00007fe5bb6f93ac in g_thread_pool_thread_proxy (data=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gthreadpool.c:364
#6  0x00007fe5bb6f8955 in g_thread_proxy (data=0x20d9b70) at /build/buildd/glib2.0-2.44.1/./glib/gthread.c:764
#7  0x00007fe5bac2e6aa in start_thread (arg=0x7fe58fbed700) at pthread_create.c:333
#8  0x00007fe5ba963eed in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7fe5bda939c0 (LWP 26490)):
[KCrash Handler]
#6  0x00007fe5ba892267 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55
#7  0x00007fe5ba893eca in __GI_abort () at abort.c:89
#8  0x00007fe5ba8d5c53 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7fe5ba9ee1a8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#9  0x00007fe5ba8ddc69 in _int_free (ptr=<optimized out>, str=0x7fe5ba9ee2b8 "double free or corruption (out)", action=1) at malloc.c:4965
#10 0x00007fe5ba8ddc69 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3834
#11 0x00007fe5ba8e189c in __GI___libc_free (mem=<optimized out>) at malloc.c:2950
#12 0x00007fe5bd69fd7c in action_free () at /usr/lib/x86_64-linux-gnu/libroutermanager.so.0
#13 0x00007fe5bb6efcdd in g_slist_foreach (list=<optimized out>, list@entry=0x21f3a90, func=0x7fe5bd69fd70 <action_free>, user_data=user_data@entry=0x0) at /build/buildd/glib2.0-2.44.1/./glib/gslist.c:878
#14 0x00007fe5bb6efcfb in g_slist_free_full (list=0x21f3a90, free_func=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gslist.c:172
#15 0x00007fe5bd6a56ad in  () at /usr/lib/x86_64-linux-gnu/libroutermanager.so.0
#16 0x00007fe5bb6efcdd in g_slist_foreach (list=<optimized out>, list@entry=0x20f0550, func=0x7fe5bd6a5690, user_data=user_data@entry=0x0) at /build/buildd/glib2.0-2.44.1/./glib/gslist.c:878
#17 0x00007fe5bb6efcfb in g_slist_free_full (list=0x20f0550, free_func=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gslist.c:172
#18 0x00007fe5bd6a5be7 in profile_shutdown () at /usr/lib/x86_64-linux-gnu/libroutermanager.so.0
#19 0x00007fe5bd6a190e in routermanager_shutdown () at /usr/lib/x86_64-linux-gnu/libroutermanager.so.0
#20 0x000000000040f089 in app_quit ()
#24 0x00007fe5bb9c18ff in <emit signal ??? on instance 0x24d5de0 [GtkMenuItem]> (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>) at /build/buildd/glib2.0-2.44.1/./gobject/gsignal.c:3361
    #21 0x00007fe5bb9a72d5 in g_closure_invoke (closure=0x22bfe40, return_value=0x0, n_param_values=1, param_values=0x7ffc17a07040, invocation_hint=0x7ffc17a06fe0) at /build/buildd/glib2.0-2.44.1/./gobject/gclosure.c:768
    #22 0x00007fe5bb9b903c in signal_emit_unlocked_R (node=node@entry=0x1d9dc40, detail=detail@entry=0, instance=instance@entry=0x24d5de0, emission_return=emission_return@entry=0x0, instance_and_params=instance_and_params@entry=0x7ffc17a07040) at /build/buildd/glib2.0-2.44.1/./gobject/gsignal.c:3549
    #23 0x00007fe5bb9c1698 in g_signal_emit_valist (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>, var_args=var_args@entry=0x7ffc17a071c0) at /build/buildd/glib2.0-2.44.1/./gobject/gsignal.c:3305
#25 0x00007fe58e3ad3fd in  () at /usr/lib/x86_64-linux-gnu/libdbusmenu-gtk3.so.4
#26 0x00007fe5bb9a9698 in g_cclosure_marshal_VOID__UINTv (closure=<optimized out>, return_value=<optimized out>, instance=<optimized out>, args=<optimized out>, marshal_data=<optimized out>, n_params=<optimized out>, param_types=0x222d240) at /build/buildd/glib2.0-2.44.1/./gobject/gmarshal.c:1274
#27 0x00007fe5bb9a7504 in _g_closure_invoke_va (closure=0x677a, closure@entry=0x21eed80, return_value=0x677a, return_value@entry=0x0, instance=0x6, instance@entry=0x2230d60, args=0xffffffffffffffff, args@entry=0x7ffc17a074e0, n_params=808466488, param_types=0x0) at /build/buildd/glib2.0-2.44.1/./gobject/gclosure.c:831
#28 0x00007fe5bb9c0fa7 in g_signal_emit_valist (instance=0x2230d60, signal_id=<optimized out>, detail=0, var_args=var_args@entry=0x7ffc17a074e0) at /build/buildd/glib2.0-2.44.1/./gobject/gsignal.c:3214
#29 0x00007fe5bb9c18ff in g_signal_emit (instance=<optimized out>, signal_id=<optimized out>, detail=<optimized out>) at /build/buildd/glib2.0-2.44.1/./gobject/gsignal.c:3361
#30 0x00007fe58e18d58a in dbusmenu_menuitem_handle_event () at /usr/lib/x86_64-linux-gnu/libdbusmenu-glib.so.4
#31 0x00007fe58e18e9d7 in  () at /usr/lib/x86_64-linux-gnu/libdbusmenu-glib.so.4
#32 0x00007fe5bb6d25e3 in g_timeout_dispatch (source=0x277e600, callback=<optimized out>, user_data=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:4545
#33 0x00007fe5bb6d1b4d in g_main_context_dispatch (context=0x1d78c70) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3122
#34 0x00007fe5bb6d1b4d in g_main_context_dispatch (context=context@entry=0x1d78c70) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3737
#35 0x00007fe5bb6d1f20 in g_main_context_iterate (context=context@entry=0x1d78c70, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3808
#36 0x00007fe5bb6d1fcc in g_main_context_iteration (context=0x1d78c70, context@entry=0x0, may_block=may_block@entry=1) at /build/buildd/glib2.0-2.44.1/./glib/gmain.c:3869
#37 0x00007fe5bbc9267c in g_application_run (application=0x1d751a0 [Application], argc=<optimized out>, argv=0x7ffc17a078b8) at /build/buildd/glib2.0-2.44.1/./gio/gapplication.c:2308
#38 0x000000000040ea4d in main ()

Possible duplicates by query: bug 348699, bug 347139, bug 347134, bug 347050, bug 346742.

Reported using DrKonqi