Bug 364121

Application: kwin_x11 (5.5.5)

Qt Version: 5.5.1
Operating System: Linux 4.4.0-22-generic x86_64
Distribution: Ubuntu 16.04 LTS

-- Information about the crash:
- What I was doing when the application crashed:
I tried to open Dolphin. Dolphin opens successfully but kwin crashes and all windows from every desktop are suddenly visible all at once. I do kwin --replace to get things back to normal.

The crash can be reproduced every time.

-- Backtrace:
Application: KWin (kwin_x11), signal: Aborted
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f6afe024940 (LWP 3219))]

Thread 2 (Thread 0x7f6accf0f700 (LWP 3226)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:185
#1  0x00007f6afb26abd4 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Script.so.5
#2  0x00007f6afb26ac19 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Script.so.5
#3  0x00007f6af7a966fa in start_thread (arg=0x7f6accf0f700) at pthread_create.c:333
#4  0x00007f6afdb1ab5d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:109

Thread 1 (Thread 0x7f6afe024940 (LWP 3219)):
[KCrash Handler]
#6  0x00007f6afda49418 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54
#7  0x00007f6afda4b01a in __GI_abort () at abort.c:89
#8  0x00007f6afda8b72a in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7f6afdba46b0 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
#9  0x00007f6afda93f4a in malloc_printerr (ar_ptr=<optimized out>, ptr=<optimized out>, str=0x7f6afdba47e0 "double free or corruption (!prev)", action=3) at malloc.c:5007
#10 _int_free (av=<optimized out>, p=<optimized out>, have_lock=1) at malloc.c:3868
#11 0x00007f6afda96a99 in _int_realloc (av=av@entry=0x7f6afddd7b20 <main_arena>, oldp=oldp@entry=0x131c610, oldsize=oldsize@entry=240, nb=nb@entry=272) at malloc.c:4359
#12 0x00007f6afda97db9 in __GI___libc_realloc (oldmem=0x131c620, bytes=bytes@entry=256) at malloc.c:3046
#13 0x00007f6afbe277b7 in get_index (c=0x131dff0, c=0x131dff0, idx=8) at ../../src/xcb_ext.c:52
#14 get_lazyreply (c=c@entry=0x131dff0, ext=ext@entry=0x7f6af9226050 <xcb_render_id>) at ../../src/xcb_ext.c:74
#15 0x00007f6afbe27843 in xcb_get_extension_data (c=c@entry=0x131dff0, ext=0x7f6af9226050 <xcb_render_id>) at ../../src/xcb_ext.c:95
#16 0x00007f6afbe25527 in xcb_send_request64 (c=0x131dff0, flags=flags@entry=0, vector=vector@entry=0x7fff5d3356b0, req=req@entry=0x7f6af9225c40 <xcb_req>) at ../../src/xcb_out.c:204
#17 0x00007f6afbe25969 in xcb_send_request (c=<optimized out>, flags=flags@entry=0, vector=vector@entry=0x7fff5d3356b0, req=req@entry=0x7f6af9225c40 <xcb_req>) at ../../src/xcb_out.c:292
#18 0x00007f6af90213ab in xcb_render_free_picture (c=<optimized out>, picture=<optimized out>) at render.c:1157
#19 0x00007f6afb665690 in KWin::XRenderPictureData::~XRenderPictureData (this=<optimized out>, __in_chrg=<optimized out>) at /build/kwin-2AFxJo/kwin-5.5.5/libkwineffects/kwinxrenderutils.cpp:154
#20 0x00007f6afb667074 in QExplicitlySharedDataPointer<KWin::XRenderPictureData>::~QExplicitlySharedDataPointer (this=<optimized out>, __in_chrg=<optimized out>) at /usr/include/x86_64-linux-gnu/qt5/QtCore/qshareddata.h:156
#21 KWin::XRenderPicture::~XRenderPicture (this=<optimized out>, __in_chrg=<optimized out>) at /build/kwin-2AFxJo/kwin-5.5.5/libkwineffects/kwinxrenderutils.h:66
#22 0x00007f6afda4dfe8 in __run_exit_handlers (status=0, listp=0x7f6afddd75f8 <__exit_funcs>, run_list_atexit=run_list_atexit@entry=true) at exit.c:82
#23 0x00007f6afda4e035 in __GI_exit (status=<optimized out>) at exit.c:104
#24 0x00007f6afda34837 in __libc_start_main (main=0x400780 <main(int, char**)>, argc=2, argv=0x7fff5d335828, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff5d335818) at ../csu/libc-start.c:325
#25 0x00000000004007b9 in _start ()

Possible duplicates by query: bug 363251, bug 354434, bug 349754.

Reported using DrKonqi