Summary: | plasmashell crashed sometimes in QtWaylandClient::QWaylandWindow::createDecoration when hovering over task manager icons | ||
---|---|---|---|
Product: | [Frameworks and Libraries] KPipeWire | Reporter: | Matt Fagnani <matt.fagnani> |
Component: | general | Assignee: | Plasma Bugs List <plasma-bugs> |
Status: | RESOLVED DUPLICATE | ||
Severity: | crash | CC: | aleixpol, kde, nate, nicolas.fella |
Priority: | NOR | Keywords: | qt6 |
Version: | unspecified | ||
Target Milestone: | --- | ||
Platform: | Fedora RPMs | ||
OS: | Linux | ||
Latest Commit: | Version Fixed In: | ||
Sentry Crash Report: | |||
Bug Depends on: | |||
Bug Blocks: | 479302 | ||
Attachments: | Valgrind log from trying to reproduce plasmashell crash by hovering over task manager icons |
Description
Matt Fagnani
2023-12-04 21:55:10 UTC
I reproduced the crash by moving the cursor quickly between the Dolphin and Konsole icons which were both running. Here is the trace from coredumpctl gdb. Core was generated by `/usr/bin/plasmashell --no-respawn'. Program terminated with signal SIGSEGV, Segmentation fault. #0 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=11, no_tid=no_tid@entry=0) at pthread_kill.c:44 Downloading source file /usr/src/debug/glibc-2.38.9000-26.fc40.x86_64/nptl/pthread_kill.c 44 return INTERNAL_SYSCALL_ERROR_P (ret) ? INTERNAL_SYSCALL_ERRNO (ret) : 0; [Current thread is 1 (Thread 0x7f4b7c44e680 (LWP 1979))] (gdb) bt #0 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=11, no_tid=no_tid@entry=0) at pthread_kill.c:44 #1 0x00007f4b794abc23 in __pthread_kill_internal (signo=11, threadid=<optimized out>) at pthread_kill.c:78 #2 0x00007f4b794598ee in __GI_raise (sig=11) at ../sysdeps/posix/raise.c:26 #3 0x00007f4b7c80b6cb in KCrash::defaultCrashHandler (sig=11) at /usr/src/debug/kf6-kcrash-5.246.0-1.fc40.x86_64/src/kcrash.cpp:612 #4 <signal handler called> #5 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=11, no_tid=no_tid@entry=0) at pthread_kill.c:44 #6 0x00007f4b794abc23 in __pthread_kill_internal (signo=11, threadid=<optimized out>) at pthread_kill.c:78 #7 0x00007f4b794598ee in __GI_raise (sig=11) at ../sysdeps/posix/raise.c:26 #8 <signal handler called> #9 0x00007f4b794a6407 in __futex_abstimed_wait_common64 (private=0, cancel=true, abstime=0x0, op=393, expected=0, futex_word=0x558c53c52fb0) at futex-internal.c:57 #10 __futex_abstimed_wait_common (futex_word=futex_word@entry=0x558c53c52fb0, expected=expected@entry=0, clockid=clockid@entry=0, abstime=abstime@entry=0x0, private=private@entry=0, cancel=cancel@entry=true) at futex-internal.c:87 #11 0x00007f4b794a648f in __GI___futex_abstimed_wait_cancelable64 (futex_word=futex_word@entry=0x558c53c52fb0, expected=expected@entry=0, clockid=clockid@entry=0, abstime=abstime@entry=0x0, private=private@entry=0) at futex-internal.c:139 #12 0x00007f4b794a8da9 in __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=<optimized out>, cond=0x558c53c52f88) at pthread_cond_wait.c:503 #13 ___pthread_cond_wait (cond=0x558c53c52f88, mutex=<optimized out>) at pthread_cond_wait.c:618 #14 0x00007f4b79d596eb in QWaitConditionPrivate::wait (deadline=..., this=0x558c53c52f60) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/thread/qwaitcondition_unix.cpp:103 #15 QWaitCondition::wait (this=<optimized out>, mutex=0x558c54e0e408, deadline=...) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/thread/qwaitcondition_unix.cpp:181 #16 0x00007f4b7b8c3a87 in QSGThreadedRenderLoop::handleObscurity (this=this@entry=0x558c53a21d40, w=0x558c555cd020) at /usr/src/debug/qt6-qtdeclarative-6.6.1-1.fc40.x86_64/src/quick/scenegraph/qsgthreadedrenderloop.cpp:1334 #17 0x00007f4b7b8c47bd in QSGThreadedRenderLoop::handleObscurity (w=<optimized out>, this=0x558c53a21d40) at /usr/src/debug/qt6-qtdeclarative-6.6.1-1.fc40.x86_64/src/quick/scenegraph/qsgthreadedrenderloop.cpp:1323 #18 QSGThreadedRenderLoop::hide (this=0x558c53a21d40, window=0x558c55a70b70) at /usr/src/debug/qt6-qtdeclarative-6.6.1-1.fc40.x86_64/src/quick/scenegraph/qsgthreadedrenderloop.cpp:1124 #19 0x00007f4b7a4661d8 in QWindow::event (this=0x558c55a70b70, ev=0x7ffd4cb10390) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/kernel/qwindow.cpp:2576 #20 0x00007f4b7bdc3168 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x558c55a70b70, e=0x7ffd4cb10390) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/widgets/kernel/qapplication.cpp:3296 #21 0x00007f4b79ba0e08 in QCoreApplication::notifyInternal2 (receiver=0x558c55a70b70, event=0x7ffd4cb10390) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qcoreapplication.cpp:1121 #22 0x00007f4b79ba100d in QCoreApplication::sendEvent (receiver=<optimized out>, event=<optimized out>) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qcoreapplication.cpp:1539 --Type <RET> for more, q to quit, c to continue without paging--c #23 0x00007f4b7a4638b1 in QWindowPrivate::setVisible (visible=false, this=<optimized out>) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/kernel/qwindow.cpp:415 #24 QWindow::setVisible (this=<optimized out>, visible=false) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/kernel/qwindow.cpp:681 #25 0x00007f4b79c02221 in QtPrivate::QSlotObjectBase::call (a=0x7ffd4cb104d0, r=0x558c55a70b70, this=0x558c55b14360) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qobjectdefs_impl.h:433 #26 doActivate<false> (sender=0x558c55b14380, signal_index=3, argv=0x7ffd4cb104d0) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qobject.cpp:4021 #27 0x00007f4b79bf8807 in QMetaObject::activate (sender=<optimized out>, m=m@entry=0x7f4b7a06df20, local_signal_index=local_signal_index@entry=0, argv=argv@entry=0x7ffd4cb104d0) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qobject.cpp:4081 #28 0x00007f4b79c113dd in QTimer::timeout (this=<optimized out>, _t1=...) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/redhat-linux-build/src/corelib/Core_autogen/include/moc_qtimer.cpp:272 #29 0x00007f4b79bf379f in QObject::event (this=0x558c55b14380, e=0x7ffd4cb10660) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qobject.cpp:1459 #30 0x00007f4b7bdc3168 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x558c55b14380, e=0x7ffd4cb10660) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/widgets/kernel/qapplication.cpp:3296 #31 0x00007f4b79ba0e08 in QCoreApplication::notifyInternal2 (receiver=0x558c55b14380, event=0x7ffd4cb10660) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qcoreapplication.cpp:1121 #32 0x00007f4b79ba100d in QCoreApplication::sendEvent (receiver=<optimized out>, event=<optimized out>) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qcoreapplication.cpp:1539 #33 0x00007f4b79d4ef8b in QTimerInfoList::activateTimers (this=0x558c50017700) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qtimerinfo_unix.cpp:507 #34 0x00007f4b79e6d099 in timerSourceDispatch (source=<optimized out>) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qeventdispatcher_glib.cpp:149 #35 0x00007f4b78826e5c in g_main_dispatch (context=0x7f4b60000ef0) at ../glib/gmain.c:3476 #36 g_main_context_dispatch_unlocked (context=0x7f4b60000ef0) at ../glib/gmain.c:4284 #37 0x00007f4b78881dd8 in g_main_context_iterate_unlocked.isra.0 (context=context@entry=0x7f4b60000ef0, block=block@entry=1, dispatch=dispatch@entry=1, self=<optimized out>) at ../glib/gmain.c:4349 #38 0x00007f4b78824ad3 in g_main_context_iteration (context=0x7f4b60000ef0, may_block=1) at ../glib/gmain.c:4414 #39 0x00007f4b79e6d39f in QEventDispatcherGlib::processEvents (this=0x558c4ffcce40, flags=...) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/kernel/qeventdispatcher_glib.cpp:393 #40 0x00007f4b79badbcb in QEventLoop::exec (this=this@entry=0x7ffd4cb10930, flags=..., flags@entry=...) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/global/qflags.h:34 #41 0x00007f4b79ba99cd in QCoreApplication::exec () at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/global/qflags.h:74 #42 0x00007f4b7a3fa05d in QGuiApplication::exec () at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/kernel/qguiapplication.cpp:1925 #43 0x00007f4b7bdc30d9 in QApplication::exec () at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/widgets/kernel/qapplication.cpp:2574 #44 0x0000558c4f021e52 in main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/plasma-workspace-5.90.0-1.fc40.x86_64/shell/main.cpp:230 Does the issue reproduce if you uncheck "Show small preview windows when hovering over Tasks" in the Task Manager widget's settings window and then do the same thing to cause the crash to happen? (In reply to Nate Graham from comment #2) > Does the issue reproduce if you uncheck "Show small preview windows when > hovering over Tasks" in the Task Manager widget's settings window and then > do the same thing to cause the crash to happen? I unchecked "Show small preview windows when hovering over Tasks" in the Task Manager widget's settings window. I tried to reproduce the crash as in comment 1 for several minutes, but plasmashell didn't crash. The 5 crashes like this in Plasma 5.90.0 took from 1 second to 2 minutes to happen, so the problem might not happen with the preview windows disabled. I checked "Show small preview windows when hovering over Tasks" in the Task Manager widget's settings window. I reproduced the crash after about 1 minute of moving the cursor as before. I think that the problem is actually in thread 73 instead of thread 1 as in the trace I put in comment. drkonqi focused on thread 1, but it was just waiting/polling. Both thread 73 and thread 1 had [KCrash Handler] at the top in drkonqi. Using coredumpctl gdb, the trace of thread 73 was the following. (gdb) thread 73 [Switching to thread 73 (Thread 0x7f369df6f6c0 (LWP 3082))] #0 0x00007f375d51841d in __GI___poll (fds=fds@entry=0x7f369df6d768, nfds=nfds@entry=1, timeout=timeout@entry=1000) at ../sysdeps/unix/sysv/linux/poll.c:29 Downloading source file /usr/src/debug/glibc-2.38.9000-26.fc40.x86_64/io/../sysdeps/unix/sysv/linux/poll.c 29 return SYSCALL_CANCEL (poll, fds, nfds, timeout); (gdb) bt #0 0x00007f375d51841d in __GI___poll (fds=fds@entry=0x7f369df6d768, nfds=nfds@entry=1, timeout=timeout@entry=1000) at ../sysdeps/unix/sysv/linux/poll.c:29 #1 0x00007f37607feb98 in poll (__timeout=1000, __nfds=1, __fds=0x7f369df6d768) at /usr/include/bits/poll2.h:39 #2 pollDrKonqiSocket (sockfd=3, pid=<optimized out>) at /usr/src/debug/kf6-kcrash-5.246.0-1.fc40.x86_64/src/kcrash.cpp:844 #3 KCrash::startProcess (argv=argv@entry=0x7f369df6d8a8, waitAndExit=waitAndExit@entry=true, argc=<optimized out>) at /usr/src/debug/kf6-kcrash-5.246.0-1.fc40.x86_64/src/kcrash.cpp:706 #4 0x00007f37607ff659 in KCrash::defaultCrashHandler (sig=11) at /usr/src/debug/kf6-kcrash-5.246.0-1.fc40.x86_64/src/kcrash.cpp:602 #5 <signal handler called> #6 0x00007f375dec0a40 in typeinfo name for QObjectCleanupHandler () from /lib64/libQt6Core.so.6 #7 0x00007f37604f3f5a in QtWaylandClient::QWaylandWindow::createDecoration (this=0x564f65c87540) at /usr/src/debug/qt6-qtwayland-6.6.1-1.fc40.x86_64/src/client/qwaylandwindow.cpp:1034 #8 0x00007f37588e199c in QtWaylandClient::QWaylandGLContext::makeCurrent (this=this@entry=0x7f3710002490, surface=<optimized out>) at /usr/src/debug/qt6-qtwayland-6.6.1-1.fc40.x86_64/src/hardwareintegration/client/wayland-egl/qwaylandglcontext.cpp:315 #9 0x00007f375e79c188 in QOpenGLContext::makeCurrent (this=0x7f37100021e0, surface=surface@entry=0x564f65d371f0) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/kernel/qopenglcontext.cpp:661 #10 0x00007f375e7b48e9 in QRhiGles2::ensureContext (this=0x7f3710001b70, surface=0x564f65d371f0) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/rhi/qrhigles2.cpp:619 #11 0x00007f375e7c071e in QRhiGles2::beginFrame (this=0x7f3710001b70, swapChain=0x7f37101c8ea0) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/rhi/qrhigles2.cpp:2028 #12 0x00007f375e644bea in QRhi::beginFrame (this=0x7f3710001b50, swapChain=0x7f37101c8ea0, flags=..., flags@entry=...) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/gui/rhi/qrhi.cpp:10146 #13 0x00007f375f8c29f4 in QSGRenderThread::syncAndRender (this=this@entry=0x564f66f2b500) at /usr/include/qt6/QtCore/qflags.h:73 #14 0x00007f375f8c5e93 in QSGRenderThread::run (this=0x564f66f2b500) at /usr/src/debug/qt6-qtdeclarative-6.6.1-1.fc40.x86_64/src/quick/scenegraph/qsgthreadedrenderloop.cpp:946 #15 0x00007f375dd50ace in operator() (__closure=<optimized out>) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/thread/qthread_unix.cpp:324 #16 (anonymous namespace)::terminate_on_exception<QThreadPrivate::start(void*)::<lambda()> > (t=...) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/thread/qthread_unix.cpp:260 #17 QThreadPrivate::start (arg=0x564f66f2b500) at /usr/src/debug/qt6-qtbase-6.6.1-1.fc40.x86_64/src/corelib/thread/qthread_unix.cpp:283 #18 0x00007f375d4a5c91 in start_thread (arg=<optimized out>) at pthread_create.c:447 #19 0x00007f375d525f9c in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78 QtWaylandClient::QWaylandWindow::createDecoration in frame 7 of thread 73 had mShellSurface=0x0, so !mShellSurface->wantsDecorations() might've been a null pointer dereference at /usr/src/debug/qt6-qtwayland-6.6.1-1.fc40.x86_64/src/client/qwaylandwindow.cpp:1034. This problem might involve a race condition in which the Wayland surface of the window previews was occasionally freed then used. (gdb) frame 7 #7 0x00007f37604f3f5a in QtWaylandClient::QWaylandWindow::createDecoration (this=0x564f65c87540) at /usr/src/debug/qt6-qtwayland-6.6.1-1.fc40.x86_64/src/client/qwaylandwindow.cpp:1034 Downloading source file /usr/src/debug/qt6-qtwayland-6.6.1-1.fc40.x86_64/src/client/qwaylandwindow.cpp 1034 if (!mShellSurface || !mShellSurface->wantsDecorations()) (gdb) p mShellSurface $1 = (QtWaylandClient::QWaylandShellSurface *) 0x0 Created attachment 164390 [details]
Valgrind log from trying to reproduce plasmashell crash by hovering over task manager icons
I saw plasmashell crash with this type of trace in Plasma 5.90.0 when I disabled WiFi in the Plasma NetworkManager applet then clicked off of the applet to close it. This crash didn't usually happen when doing so.
I ran plasmashell under valgrind and reproduced the crash as before. The error The Wayland connection broke. Did the Wayland compositor die? was shown in Konsole so the crash might've been due to that different reason. The window previews for konsole and other running programs weren't shown when run under valgrind, but the popups with just their names were shown. There were many invalid reads which looked to be buffer overreads. The ones involving KSvg::SvgPrivate::createRenderer might be more likely to be involved with the window preview popups. I'm attaching the valgrind log.
==8941== Invalid read of size 16
==8941== at 0x72310E7: UnknownInlinedFun (emmintrin.h:706)
==8941== by 0x72310E7: aeshash128_lt16 (qhash.cpp:630)
==8941== by 0x72310E7: aeshash128(unsigned char const*, unsigned long, unsigned long, unsigned long) (qhash.cpp:771)
==8941== by 0x65EE59A: UnknownInlinedFun (qhash.h:57)
==8941== by 0x65EE59A: QHashPrivate::Data<QHashPrivate::Node<QStringView, QHashDummyValue> >::findBucket(QStringView const&) const (qhash.h:683)
==8941== by 0x6621E99: UnknownInlinedFun (qhash.h:718)
==8941== by 0x6621E99: QHash<QStringView, QHashDummyValue>::iterator QHash<QStringView, QHashDummyValue>::emplace_helper<QHashDummyValue>(QStringView&&, QHashDummyValue&&) [clone .isra.0] (qhash.h:1335)
==8941== by 0x65FE1D3: UnknownInlinedFun (qhash.h:1316)
==8941== by 0x65FE1D3: UnknownInlinedFun (qset.h:158)
==8941== by 0x65FE1D3: UnknownInlinedFun (kconfig.cpp:328)
==8941== by 0x65FE1D3: UnknownInlinedFun (kconfigdata_p.h:252)
==8941== by 0x65FE1D3: UnknownInlinedFun (kconfig.cpp:323)
==8941== by 0x65FE1D3: KConfigGroup::groupList() const (kconfiggroup.cpp:1168)
==8941== by 0x1B8580: ShellCorona::sanitizeScreenLayout(QString const&) [clone .isra.0] (shellcorona.cpp:694)
==8941== by 0x175796: ShellCorona::load() (shellcorona.cpp:772)
==8941== by 0x13DE25: UnknownInlinedFun (shellcorona.cpp:328)
==8941== by 0x13DE25: main (main.cpp:227)
==8941== Address 0x1b5764aa is 42 bytes inside a block of size 46 alloc'd
==8941== at 0x484280F: malloc (vg_replace_malloc.c:442)
==8941== by 0x73DCD10: allocateData (qarraydata.cpp:139)
==8941== by 0x73DCD10: QArrayData::allocate(QArrayData**, long long, long long, long long, QArrayData::AllocationOption) (qarraydata.cpp:189)
==8941== by 0x73A3E53: allocate (qarraydata.h:105)
==8941== by 0x73A3E53: QString::QString(long long, Qt::Initialization) (qstring.cpp:2530)
==8941== by 0x73BC0BE: QUtf8::convertToUnicode(QByteArrayView) (qstringconverter.cpp:608)
==8941== by 0x739D18D: QString::fromUtf8(QByteArrayView) (qstring.cpp:5861)
==8941== by 0x65FD74A: UnknownInlinedFun (qstring.h:588)
==8941== by 0x65FD74A: KConfigIniBackend::parseConfig(QByteArray const&, KEntryMap&, QFlags<KConfigBackend::ParseOption>, bool) (kconfigini.cpp:157)
==8941== by 0x65E7FB1: UnknownInlinedFun (kconfigini.cpp:64)
==8941== by 0x65E7FB1: KConfigPrivate::parseConfigFiles() (kconfig.cpp:791)
==8941== by 0x66052BE: UnknownInlinedFun (ksharedconfig.cpp:124)
==8941== by 0x66052BE: KSharedConfig::openConfig(QString const&, QFlags<KConfig::OpenFlag>, QStandardPaths::StandardLocation) (ksharedconfig.cpp:89)
==8941== by 0x1B7F0E: ShellCorona::sanitizeScreenLayout(QString const&) [clone .isra.0] (shellcorona.cpp:683)
==8941== by 0x175796: ShellCorona::load() (shellcorona.cpp:772)
==8941== by 0x13DE25: UnknownInlinedFun (shellcorona.cpp:328)
==8941== by 0x13DE25: main (main.cpp:227)
==8941==
==8941== Invalid read of size 16
==8941== at 0x72310E7: UnknownInlinedFun (emmintrin.h:706)
==8941== by 0x72310E7: aeshash128_lt16 (qhash.cpp:630)
==8941== by 0x72310E7: aeshash128(unsigned char const*, unsigned long, unsigned long, unsigned long) (qhash.cpp:771)
==8941== by 0x65EE59A: UnknownInlinedFun (qhash.h:57)
==8941== by 0x65EE59A: QHashPrivate::Data<QHashPrivate::Node<QStringView, QHashDummyValue> >::findBucket(QStringView const&) const (qhash.h:683)
==8941== by 0x6621E99: UnknownInlinedFun (qhash.h:718)
==8941== by 0x6621E99: QHash<QStringView, QHashDummyValue>::iterator QHash<QStringView, QHashDummyValue>::emplace_helper<QHashDummyValue>(QStringView&&, QHashDummyValue&&) [clone .isra.0] (qhash.h:1335)
==8941== by 0x65FE2C0: UnknownInlinedFun (qhash.h:1321)
==8941== by 0x65FE2C0: UnknownInlinedFun (qset.h:158)
==8941== by 0x65FE2C0: UnknownInlinedFun (kconfig.cpp:328)
==8941== by 0x65FE2C0: UnknownInlinedFun (kconfigdata_p.h:252)
==8941== by 0x65FE2C0: UnknownInlinedFun (kconfig.cpp:323)
==8941== by 0x65FE2C0: KConfigGroup::groupList() const (kconfiggroup.cpp:1168)
==8941== by 0x4D502C6: Plasma::Containment::restoreContents(KConfigGroup&) (containment.cpp:252)
==8941== by 0x4D4FC48: Plasma::Containment::restore(KConfigGroup&) (containment.cpp:171)
==8941== by 0x4D584A1: Plasma::CoronaPrivate::addContainment(QString const&, QList<QVariant> const&, unsigned int, int, bool) (corona.cpp:608)
==8941== by 0x4D594A4: Plasma::CoronaPrivate::importLayout(KConfigGroup const&, bool) (corona.cpp:670)
==8941== by 0x4D59B40: Plasma::Corona::loadLayout(QString const&) (corona.cpp:149)
==8941== by 0x1757A1: ShellCorona::load() (shellcorona.cpp:774)
==8941== by 0x13DE25: UnknownInlinedFun (shellcorona.cpp:328)
==8941== by 0x13DE25: main (main.cpp:227)
==8941== Address 0x2ae4961e is 62 bytes inside a block of size 68 alloc'd
==8941== at 0x484280F: malloc (vg_replace_malloc.c:442)
==8941== by 0x73DCD10: allocateData (qarraydata.cpp:139)
==8941== by 0x73DCD10: QArrayData::allocate(QArrayData**, long long, long long, long long, QArrayData::AllocationOption) (qarraydata.cpp:189)
==8941== by 0x73A3E53: allocate (qarraydata.h:105)
==8941== by 0x73A3E53: QString::QString(long long, Qt::Initialization) (qstring.cpp:2530)
==8941== by 0x73BC0BE: QUtf8::convertToUnicode(QByteArrayView) (qstringconverter.cpp:608)
==8941== by 0x739D18D: QString::fromUtf8(QByteArrayView) (qstring.cpp:5861)
==8941== by 0x65FD74A: UnknownInlinedFun (qstring.h:588)
==8941== by 0x65FD74A: KConfigIniBackend::parseConfig(QByteArray const&, KEntryMap&, QFlags<KConfigBackend::ParseOption>, bool) (kconfigini.cpp:157)
==8941== by 0x65E7FB1: UnknownInlinedFun (kconfigini.cpp:64)
==8941== by 0x65E7FB1: KConfigPrivate::parseConfigFiles() (kconfig.cpp:791)
==8941== by 0x66052BE: UnknownInlinedFun (ksharedconfig.cpp:124)
==8941== by 0x66052BE: KSharedConfig::openConfig(QString const&, QFlags<KConfig::OpenFlag>, QStandardPaths::StandardLocation) (ksharedconfig.cpp:89)
==8941== by 0x4D553A3: Plasma::Corona::config() const (corona.cpp:240)
==8941== by 0x4D598F3: Plasma::Corona::loadLayout(QString const&) (corona.cpp:147)
==8941== by 0x1757A1: ShellCorona::load() (shellcorona.cpp:774)
==8941== by 0x13DE25: UnknownInlinedFun (shellcorona.cpp:328)
==8941== by 0x13DE25: main (main.cpp:227)
==8941==
...
==8941== Invalid read of size 16
==8941== at 0x2D93FD9E: ???
==8941== by 0x319B76AF: ???
==8941== Address 0x319b76be is 30 bytes inside a block of size 40 alloc'd
==8941== at 0x484280F: malloc (vg_replace_malloc.c:442)
==8941== by 0x73DCD10: allocateData (qarraydata.cpp:139)
==8941== by 0x73DCD10: QArrayData::allocate(QArrayData**, long long, long long, long long, QArrayData::AllocationOption) (qarraydata.cpp:189)
==8941== by 0x73A3E53: allocate (qarraydata.h:105)
==8941== by 0x73A3E53: QString::QString(long long, Qt::Initialization) (qstring.cpp:2530)
==8941== by 0x73BC0BE: QUtf8::convertToUnicode(QByteArrayView) (qstringconverter.cpp:608)
==8941== by 0x739D18D: QString::fromUtf8(QByteArrayView) (qstring.cpp:5861)
==8941== by 0x620B70A: fromUtf8<> (qstring.h:588)
==8941== by 0x620B70A: QQmlPropertyMapMetaObject::propertyCreated(int, QMetaPropertyBuilder&) (qqmlpropertymap.cpp:93)
==8941== by 0x615BF91: QQmlOpenMetaObjectType::createProperty(QByteArray const&) (qqmlopenmetaobject.cpp:99)
==8941== by 0x615C6AD: QQmlOpenMetaObject::createProperty(char const*, char const*) (qqmlopenmetaobject.cpp:429)
==8941== by 0x6176CA4: QQmlPropertyData qQmlPropertyCacheCreate<QByteArray>(QMetaObject const*, QByteArray const&) (qqmlpropertycache.cpp:823)
==8941== by 0x618013C: QQmlPropertyData const* qQmlPropertyCacheProperty<QV4::String const*>(QObject*, QV4::String const*, QQmlRefPointer<QQmlContextData> const&, QQmlPropertyData*) (qqmlpropertycache.cpp:884)
==8941== by 0x5FE4BF5: QV4::QObjectWrapper::virtualResolveLookupGetter(QV4::Object const*, QV4::ExecutionEngine*, QV4::Lookup*) (qv4qobjectwrapper.cpp:989)
==8941== by 0x603FD1D: QV4::Moth::VME::interpret(QV4::JSTypesStackFrame*, QV4::ExecutionEngine*, char const*) (qv4vme_moth.cpp:771)
==8941==
==8941== Invalid read of size 16
==8941== at 0x2D93FD9E: ???
==8941== by 0x31ADFF3F: ???
==8941== Address 0x31adff4e is 30 bytes inside a block of size 38 alloc'd
==8941== at 0x484280F: malloc (vg_replace_malloc.c:442)
==8941== by 0x73DCD10: allocateData (qarraydata.cpp:139)
==8941== by 0x73DCD10: QArrayData::allocate(QArrayData**, long long, long long, long long, QArrayData::AllocationOption) (qarraydata.cpp:189)
==8941== by 0x73A3E53: allocate (qarraydata.h:105)
==8941== by 0x73A3E53: QString::QString(long long, Qt::Initialization) (qstring.cpp:2530)
==8941== by 0x73BC0BE: QUtf8::convertToUnicode(QByteArrayView) (qstringconverter.cpp:608)
==8941== by 0x739D18D: QString::fromUtf8(QByteArrayView) (qstring.cpp:5861)
==8941== by 0x620B70A: fromUtf8<> (qstring.h:588)
==8941== by 0x620B70A: QQmlPropertyMapMetaObject::propertyCreated(int, QMetaPropertyBuilder&) (qqmlpropertymap.cpp:93)
==8941== by 0x615BF91: QQmlOpenMetaObjectType::createProperty(QByteArray const&) (qqmlopenmetaobject.cpp:99)
==8941== by 0x615C6AD: QQmlOpenMetaObject::createProperty(char const*, char const*) (qqmlopenmetaobject.cpp:429)
==8941== by 0x615CCBB: QQmlOpenMetaObject::setValue(QByteArray const&, QVariant const&, bool) (qqmlopenmetaobject.cpp:338)
==8941== by 0x620B1DE: QQmlPropertyMap::insert(QString const&, QVariant const&) (qqmlpropertymap.cpp:208)
==8941== by 0x37B8EC9F: UnknownInlinedFun (datasource.cpp:161)
==8941== by 0x37B8EC9F: UnknownInlinedFun (datasource.cpp:157)
==8941== by 0x37B8EC9F: Plasma5Support::DataSource::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) (moc_datasource.cpp:386)
==8941== by 0x72C5FCE: QMetaMethodInvoker::invokeImpl(QMetaMethod, void*, Qt::ConnectionType, long long, void const* const*, char const* const*, QtPrivate::QMetaTypeInterface const* const*) (qmetaobject.cpp:2714)
==8941==
==8941== Invalid read of size 16
==8941== at 0x2D93FD9E: ???
==8941== by 0x2DACAB9F: ???
==8941== Address 0x2dacabae is 30 bytes inside a block of size 42 alloc'd
==8941== at 0x484280F: malloc (vg_replace_malloc.c:442)
==8941== by 0x73DCD10: allocateData (qarraydata.cpp:139)
==8941== by 0x73DCD10: QArrayData::allocate(QArrayData**, long long, long long, long long, QArrayData::AllocationOption) (qarraydata.cpp:189)
==8941== by 0x73A3E53: allocate (qarraydata.h:105)
==8941== by 0x73A3E53: QString::QString(long long, Qt::Initialization) (qstring.cpp:2530)
==8941== by 0x73BC0BE: QUtf8::convertToUnicode(QByteArrayView) (qstringconverter.cpp:608)
==8941== by 0x739D18D: QString::fromUtf8(QByteArrayView) (qstring.cpp:5861)
==8941== by 0x620B70A: fromUtf8<> (qstring.h:588)
==8941== by 0x620B70A: QQmlPropertyMapMetaObject::propertyCreated(int, QMetaPropertyBuilder&) (qqmlpropertymap.cpp:93)
==8941== by 0x615BF91: QQmlOpenMetaObjectType::createProperty(QByteArray const&) (qqmlopenmetaobject.cpp:99)
==8941== by 0x615C6AD: QQmlOpenMetaObject::createProperty(char const*, char const*) (qqmlopenmetaobject.cpp:429)
==8941== by 0x615CCBB: QQmlOpenMetaObject::setValue(QByteArray const&, QVariant const&, bool) (qqmlopenmetaobject.cpp:338)
==8941== by 0x620B1DE: QQmlPropertyMap::insert(QString const&, QVariant const&) (qqmlpropertymap.cpp:208)
==8941== by 0x37B8EC9F: UnknownInlinedFun (datasource.cpp:161)
==8941== by 0x37B8EC9F: UnknownInlinedFun (datasource.cpp:157)
==8941== by 0x37B8EC9F: Plasma5Support::DataSource::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) (moc_datasource.cpp:386)
==8941== by 0x72C5FCE: QMetaMethodInvoker::invokeImpl(QMetaMethod, void*, Qt::ConnectionType, long long, void const* const*, char const* const*, QtPrivate::QMetaTypeInterface const* const*) (qmetaobject.cpp:2714)
==8941==
==8941== Thread 22 QSGRenderThread:
==8941== Invalid read of size 16
==8941== at 0x2D949698: ???
==8941== by 0x38F27C6F: ???
==8941== Address 0x38f350de is 54,398 bytes inside a block of size 54,408 alloc'd
==8941== at 0x484280F: malloc (vg_replace_malloc.c:442)
==8941== by 0x73DCD10: allocateData (qarraydata.cpp:139)
==8941== by 0x73DCD10: QArrayData::allocate(QArrayData**, long long, long long, long long, QArrayData::AllocationOption) (qarraydata.cpp:189)
==8941== by 0x73A51BD: allocate (qarraydata.h:105)
==8941== by 0x73A51BD: QString::fromLatin1(QByteArrayView) (qstring.cpp:5716)
==8941== by 0x4E22A67: UnknownInlinedFun (qstring.h:581)
==8941== by 0x4E22A67: KSvg::SharedSvgRenderer::load(QByteArray const&, QString const&, QHash<QString, QRectF>&) [clone .isra.0] (svg.cpp:152)
==8941== by 0x4E1177B: UnknownInlinedFun (svg.cpp:99)
==8941== by 0x4E1177B: KSvg::SvgPrivate::createRenderer() [clone .part.0] (svg.cpp:694)
==8941== by 0x4E09027: UnknownInlinedFun (svg.cpp:640)
==8941== by 0x4E09027: KSvg::SvgPrivate::findInCache(QString const&, double, QSizeF const&) (svg.cpp:628)
==8941== by 0x4E09ADE: KSvg::Svg::image(QSize const&, QString const&) (svg.cpp:922)
==8941== by 0x301F26E7: UnknownInlinedFun (framesvgitem.cpp:120)
==8941== by 0x301F26E7: KSvg::FrameItemNode::FrameItemNode(KSvg::FrameSvgItem*, QFlags<KSvg::FrameSvg::EnabledBorder>, KSvg::FrameItemNode::FitMode, QSGNode*) (framesvgitem.cpp:110)
==8941== by 0x301F2C26: KSvg::FrameSvgItem::updatePaintNode(QSGNode*, QQuickItem::UpdatePaintNodeData*) (framesvgitem.cpp:606)
==8941== by 0x5942F0B: QQuickWindowPrivate::updateDirtyNode(QQuickItem*) (qquickwindow.cpp:2155)
==8941== by 0x59436F3: QQuickWindowPrivate::updateDirtyNodes() (qquickwindow.cpp:1897)
==8941== by 0x5947973: QQuickWindowPrivate::syncSceneGraph() (qquickwindow.cpp:545)
==8941==
*** This bug has been marked as a duplicate of bug 479302 *** |