Bug 372500

Application: konsole (16.08.2)

Qt Version: 5.7.1
Frameworks Version: 5.27.0
Operating System: Linux 4.8.0-1-amd64 x86_64
Distribution: Debian GNU/Linux testing (stretch)

-- Information about the crash:
- What I was doing when the application crashed:

I was testing the bug reported to the Debian bug tracker: https://bugs.debian.org/844380 and I could reproduce it by creating some vertical splits, closing some of them, and creating some more.

The crash can be reproduced sometimes.

-- Backtrace:
Application: Konsole (konsole), signal: Segmentation fault
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[Current thread is 1 (Thread 0x7f0d2e9101c0 (LWP 23439))]

Thread 3 (Thread 0x7f0d2a726700 (LWP 23441)):
#0  __libc_enable_asynccancel () at ../sysdeps/unix/sysv/linux/x86_64/cancellation.S:67
#1  0x00007f0d3fcc0562 in poll () at ../sysdeps/unix/syscall-template.S:84
#2  0x00007f0d3722f9d6 in g_main_context_poll (priority=<optimized out>, n_fds=1, fds=0x7f0d1c003020, timeout=<optimized out>, context=0x7f0d1c000990) at ././glib/gmain.c:4228
#3  g_main_context_iterate (context=context@entry=0x7f0d1c000990, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ././glib/gmain.c:3924
#4  0x00007f0d3722faec in g_main_context_iteration (context=0x7f0d1c000990, may_block=may_block@entry=1) at ././glib/gmain.c:3990
#5  0x00007f0d3c8bd73b in QEventDispatcherGlib::processEvents (this=0x7f0d1c0008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:425
#6  0x00007f0d3c8670ca in QEventLoop::exec (this=this@entry=0x7f0d2a725c90, flags=..., flags@entry=...) at kernel/qeventloop.cpp:212
#7  0x00007f0d3c6890e3 in QThread::exec (this=this@entry=0x7f0d4032ed60 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at thread/qthread.cpp:507
#8  0x00007f0d402b96d5 in QDBusConnectionManager::run (this=0x7f0d4032ed60 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at qdbusconnection.cpp:178
#9  0x00007f0d3c68dd98 in QThreadPrivate::start (arg=0x7f0d4032ed60 <(anonymous namespace)::Q_QGS__q_manager::innerFunction()::holder>) at thread/qthread_unix.cpp:368
#10 0x00007f0d38ef0464 in start_thread (arg=0x7f0d2a726700) at pthread_create.c:333
#11 0x00007f0d3fcc99df in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105

Thread 2 (Thread 0x7f0d2c69b700 (LWP 23440)):
#0  0x00007f0d3fcc056d in poll () at ../sysdeps/unix/syscall-template.S:84
#1  0x00007f0d39315150 in poll (__timeout=-1, __nfds=1, __fds=0x7f0d2c69abc0) at /usr/include/x86_64-linux-gnu/bits/poll2.h:46
#2  _xcb_conn_wait (c=c@entry=0x564f53b24dc0, cond=cond@entry=0x564f53b24e00, vector=vector@entry=0x0, count=count@entry=0x0) at ../../src/xcb_conn.c:479
#3  0x00007f0d39316ee9 in xcb_wait_for_event (c=0x564f53b24dc0) at ../../src/xcb_in.c:693
#4  0x00007f0d2e3c0b69 in QXcbEventReader::run (this=0x564f53b2f1d0) at qxcbconnection.cpp:1343
#5  0x00007f0d3c68dd98 in QThreadPrivate::start (arg=0x564f53b2f1d0) at thread/qthread_unix.cpp:368
#6  0x00007f0d38ef0464 in start_thread (arg=0x7f0d2c69b700) at pthread_create.c:333
#7  0x00007f0d3fcc99df in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:105

Thread 1 (Thread 0x7f0d2e9101c0 (LWP 23439)):
[KCrash Handler]
#6  std::__atomic_base<int>::operator++ (this=<optimized out>) at /usr/include/c++/6/bits/atomic_base.h:296
#7  QAtomicOps<int>::ref<int> (_q_value=...) at ../../include/QtCore/../../src/corelib/arch/qatomic_cxx11.h:265
#8  QBasicAtomicInteger<int>::ref (this=<optimized out>) at ../../include/QtCore/../../src/corelib/thread/qbasicatomic.h:110
#9  QtPrivate::RefCount::ref (this=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qrefcount.h:61
#10 QString::operator= (this=this@entry=0x564f541e4970, other=...) at tools/qstring.cpp:1814
#11 0x00007f0d402795e9 in QDomNodePrivate::QDomNodePrivate (this=this@entry=0x564f541e4920, n=n@entry=0x564f540ae790, deep=deep@entry=true) at dom/qdom.cpp:1462
#12 0x00007f0d40279785 in QDomCharacterDataPrivate::QDomCharacterDataPrivate (deep=true, n=0x564f540ae790, this=0x564f541e4920) at dom/qdom.cpp:3879
#13 QDomTextPrivate::QDomTextPrivate (deep=true, n=0x564f540ae790, this=0x564f541e4920) at dom/qdom.cpp:5167
#14 QDomTextPrivate::cloneNode (this=0x564f540ae790, deep=<optimized out>) at dom/qdom.cpp:5173
#15 0x00007f0d4027962e in QDomNodePrivate::QDomNodePrivate (this=this@entry=0x564f541e48b0, n=n@entry=0x564f540ae720, deep=deep@entry=true) at dom/qdom.cpp:1471
#16 0x00007f0d40279735 in QDomAttrPrivate::QDomAttrPrivate (deep=true, n=0x564f540ae720, this=0x564f541e48b0) at dom/qdom.cpp:4106
#17 QDomAttrPrivate::cloneNode (this=0x564f540ae720, deep=<optimized out>) at dom/qdom.cpp:4125
#18 0x00007f0d40281967 in QDomNamedNodeMapPrivate::clone (this=0x564f540ae4d0, p=p@entry=0x564f541e4620) at dom/qdom.cpp:3053
#19 0x00007f0d402819ba in QDomElementPrivate::QDomElementPrivate (this=0x564f541e4620, n=0x564f540ae450, deep=<optimized out>) at dom/qdom.cpp:4413
#20 0x00007f0d402819f5 in QDomElementPrivate::cloneNode (this=0x564f540ae450, deep=<optimized out>) at dom/qdom.cpp:4426
#21 0x00007f0d4027962e in QDomNodePrivate::QDomNodePrivate (this=this@entry=0x564f541e45a0, n=n@entry=0x564f54085690, deep=<optimized out>) at dom/qdom.cpp:1471
#22 0x00007f0d402819a4 in QDomElementPrivate::QDomElementPrivate (this=0x564f541e45a0, n=0x564f54085690, deep=<optimized out>) at dom/qdom.cpp:4411
#23 0x00007f0d402819f5 in QDomElementPrivate::cloneNode (this=0x564f54085690, deep=<optimized out>) at dom/qdom.cpp:4426
#24 0x00007f0d4027962e in QDomNodePrivate::QDomNodePrivate (this=this@entry=0x564f54059250, n=n@entry=0x564f5409c790, deep=<optimized out>) at dom/qdom.cpp:1471
#25 0x00007f0d402819a4 in QDomElementPrivate::QDomElementPrivate (this=0x564f54059250, n=0x564f5409c790, deep=<optimized out>) at dom/qdom.cpp:4411
#26 0x00007f0d402819f5 in QDomElementPrivate::cloneNode (this=0x564f5409c790, deep=<optimized out>) at dom/qdom.cpp:4426
#27 0x00007f0d4027962e in QDomNodePrivate::QDomNodePrivate (this=this@entry=0x564f545b3fc0, n=n@entry=0x564f54192e40, deep=<optimized out>) at dom/qdom.cpp:1471
#28 0x00007f0d402819a4 in QDomElementPrivate::QDomElementPrivate (this=0x564f545b3fc0, n=0x564f54192e40, deep=<optimized out>) at dom/qdom.cpp:4411
#29 0x00007f0d402819f5 in QDomElementPrivate::cloneNode (this=0x564f54192e40, deep=<optimized out>) at dom/qdom.cpp:4426
#30 0x00007f0d4027962e in QDomNodePrivate::QDomNodePrivate (this=this@entry=0x564f54059ae0, n=n@entry=0x564f5409c530, deep=<optimized out>) at dom/qdom.cpp:1471
#31 0x00007f0d4027d0c4 in QDomDocumentPrivate::QDomDocumentPrivate (this=0x564f54059ae0, n=0x564f5409c530, deep=<optimized out>) at dom/qdom.cpp:6183
#32 0x00007f0d4027d195 in QDomDocumentPrivate::cloneNode (this=0x564f5409c530, deep=<optimized out>) at dom/qdom.cpp:6246
#33 0x00007f0d4027a1e5 in QDomNode::cloneNode (this=this@entry=0x7fffdbf9c060, deep=deep@entry=true) at dom/qdom.cpp:2350
#34 0x00007f0d3f22b596 in KXMLGUIFactory::removeClient (this=<optimized out>, client=<optimized out>) at ./src/kxmlguifactory.cpp:454
#35 0x00007f0d3ff998c3 in ?? () from /usr/lib/x86_64-linux-gnu/libkdeinit5_konsole.so
#36 0x00007f0d3ff9c44d in ?? () from /usr/lib/x86_64-linux-gnu/libkdeinit5_konsole.so
#37 0x00007f0d3c89504e in QtPrivate::QSlotObjectBase::call (a=0x7fffdbf9c3c0, r=0x564f53b93460, this=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobject_impl.h:101
#38 QMetaObject::activate (sender=0x564f53c37270, signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=2, argv=argv@entry=0x7fffdbf9c3c0) at kernel/qobject.cpp:3723
#39 0x00007f0d3c8955f7 in QMetaObject::activate (sender=<optimized out>, m=m@entry=0x7f0d3fbd7920 <Konsole::ViewManager::staticMetaObject>, local_signal_index=local_signal_index@entry=2, argv=argv@entry=0x7fffdbf9c3c0) at kernel/qobject.cpp:3602
#40 0x00007f0d3f98fc02 in Konsole::ViewManager::activeViewChanged (this=<optimized out>, _t1=<optimized out>) at ./obj-x86_64-linux-gnu/src/moc_ViewManager.cpp:469
#41 0x00007f0d3c89504e in QtPrivate::QSlotObjectBase::call (a=0x7fffdbf9c500, r=0x564f53c37270, this=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobject_impl.h:101
#42 QMetaObject::activate (sender=sender@entry=0x564f5469bc50, signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7fffdbf9c500) at kernel/qobject.cpp:3723
#43 0x00007f0d3c8955f7 in QMetaObject::activate (sender=sender@entry=0x564f5469bc50, m=m@entry=0x7f0d3fbd7b60 <Konsole::SessionController::staticMetaObject>, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7fffdbf9c500) at kernel/qobject.cpp:3602
#44 0x00007f0d3f98f18f in Konsole::SessionController::focused (this=this@entry=0x564f5469bc50, _t1=<optimized out>, _t1@entry=0x564f5469bc50) at ./obj-x86_64-linux-gnu/src/moc_SessionController.cpp:459
#45 0x00007f0d3f959a3b in Konsole::SessionController::eventFilter (this=0x564f5469bc50, watched=<optimized out>, event=<optimized out>) at ./src/SessionController.cpp:458
#46 0x00007f0d3c868e41 in QCoreApplicationPrivate::sendThroughObjectEventFilters (receiver=receiver@entry=0x564f54af8e40, event=event@entry=0x7fffdbf9c840) at kernel/qcoreapplication.cpp:1099
#47 0x00007f0d3d3e5b05 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x564f54af8e40, e=0x7fffdbf9c840) at kernel/qapplication.cpp:3795
#48 0x00007f0d3d3ed2e1 in QApplication::notify (this=0x564f53b16bd0, receiver=0x564f54af8e40, e=0x7fffdbf9c840) at kernel/qapplication.cpp:3556
#49 0x00007f0d3c8690e0 in QCoreApplication::notifyInternal2 (receiver=receiver@entry=0x564f54af8e40, event=event@entry=0x7fffdbf9c840) at kernel/qcoreapplication.cpp:988
#50 0x00007f0d3d3eae5e in QCoreApplication::sendEvent (event=0x7fffdbf9c840, receiver=0x564f54af8e40) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#51 QApplicationPrivate::setFocusWidget (focus=focus@entry=0x564f54af8e40, reason=reason@entry=Qt::OtherFocusReason) at kernel/qapplication.cpp:1873
#52 0x00007f0d3d4275d5 in QWidget::setFocus (this=0x564f54af8e40, reason=reason@entry=Qt::OtherFocusReason) at kernel/qwidget.cpp:6556
#53 0x00007f0d3f98153e in Konsole::ViewManager::splitView (this=0x564f53c37270, orientation=Qt::Horizontal) at ./src/ViewManager.cpp:429
#54 0x00007f0d3c89504e in QtPrivate::QSlotObjectBase::call (a=0x7fffdbf9caf0, r=0x564f53c37270, this=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qobject_impl.h:101
#55 QMetaObject::activate (sender=sender@entry=0x564f53c38fa0, signalOffset=<optimized out>, local_signal_index=local_signal_index@entry=1, argv=argv@entry=0x7fffdbf9caf0) at kernel/qobject.cpp:3723
#56 0x00007f0d3c8955f7 in QMetaObject::activate (sender=sender@entry=0x564f53c38fa0, m=m@entry=0x7f0d3d8bef60 <QAction::staticMetaObject>, local_signal_index=local_signal_index@entry=1, argv=argv@entry=0x7fffdbf9caf0) at kernel/qobject.cpp:3602
#57 0x00007f0d3d3df162 in QAction::triggered (this=this@entry=0x564f53c38fa0, _t1=<optimized out>) at .moc/moc_qaction.cpp:369
#58 0x00007f0d3d3e1b50 in QAction::activate (this=0x564f53c38fa0, event=<optimized out>) at kernel/qaction.cpp:1170
#59 0x00007f0d3d3e24cc in QAction::event (this=<optimized out>, e=<optimized out>) at kernel/qaction.cpp:1098
#60 0x00007f0d3d3e5b2c in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x564f53c38fa0, e=0x7fffdbf9cdd0) at kernel/qapplication.cpp:3799
#61 0x00007f0d3d3ed2e1 in QApplication::notify (this=0x564f53b16bd0, receiver=0x564f53c38fa0, e=0x7fffdbf9cdd0) at kernel/qapplication.cpp:3556
#62 0x00007f0d3c8690e0 in QCoreApplication::notifyInternal2 (receiver=0x564f53c38fa0, event=event@entry=0x7fffdbf9cdd0) at kernel/qcoreapplication.cpp:988
#63 0x00007f0d3ce771b8 in QCoreApplication::sendEvent (event=0x7fffdbf9cdd0, receiver=<optimized out>) at ../../include/QtCore/../../src/corelib/kernel/qcoreapplication.h:231
#64 QShortcutMap::dispatchEvent (this=this@entry=0x564f53b16d88, e=e@entry=0x7fffdbf9ce80) at kernel/qshortcutmap.cpp:674
#65 0x00007f0d3ce77279 in QShortcutMap::tryShortcut (this=this@entry=0x564f53b16d88, e=e@entry=0x7fffdbf9ce80) at kernel/qshortcutmap.cpp:351
#66 0x00007f0d3ce2fc5d in QWindowSystemInterface::handleShortcutEvent (window=<optimized out>, window@entry=0x564f53c4f7e0, timestamp=<optimized out>, keyCode=40, modifiers=..., nativeScanCode=18, nativeVirtualKey=40, nativeModifiers=5, text=..., autorepeat=false, count=1) at kernel/qwindowsysteminterface.cpp:235
#67 0x00007f0d3ce47144 in QGuiApplicationPrivate::processKeyEvent (e=0x564f54042a90) at kernel/qguiapplication.cpp:2002
#68 0x00007f0d3ce4c665 in QGuiApplicationPrivate::processWindowSystemEvent (e=e@entry=0x564f54042a90) at kernel/qguiapplication.cpp:1693
#69 0x00007f0d3ce2a61b in QWindowSystemInterface::sendWindowSystemEvents (flags=...) at kernel/qwindowsysteminterface.cpp:659
#70 0x00007f0d2e3f74e0 in userEventSourceDispatch (source=<optimized out>) at eventdispatchers/qeventdispatcher_glib.cpp:76
#71 0x00007f0d3722f7d7 in g_main_dispatch (context=0x7f0d240016f0) at ././glib/gmain.c:3203
#72 g_main_context_dispatch (context=context@entry=0x7f0d240016f0) at ././glib/gmain.c:3856
#73 0x00007f0d3722fa40 in g_main_context_iterate (context=context@entry=0x7f0d240016f0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ././glib/gmain.c:3929
#74 0x00007f0d3722faec in g_main_context_iteration (context=0x7f0d240016f0, may_block=may_block@entry=1) at ././glib/gmain.c:3990
#75 0x00007f0d3c8bd71f in QEventDispatcherGlib::processEvents (this=0x564f53b61150, flags=...) at kernel/qeventdispatcher_glib.cpp:423
#76 0x00007f0d3c8670ca in QEventLoop::exec (this=this@entry=0x7fffdbf9d230, flags=..., flags@entry=...) at kernel/qeventloop.cpp:212
#77 0x00007f0d3c86f83c in QCoreApplication::exec () at kernel/qcoreapplication.cpp:1261
#78 0x00007f0d3ffa6cd8 in kdemain () from /usr/lib/x86_64-linux-gnu/libkdeinit5_konsole.so
#79 0x00007f0d3fc012b1 in __libc_start_main (main=0x564f520f1780, argc=1, argv=0x7fffdbf9d4f8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffdbf9d4e8) at ../csu/libc-start.c:291
#80 0x0000564f520f17ba in _start ()

Reported using DrKonqi