Bug 500326

Summary:	Things crash in QArrayDataPointer<QInputDevice const*>::data under various circumstances with Qt 6.8.2
Product:	[I don't know] kde	Reporter:	Nate Graham <nate>
Component:	general	Assignee:	Unassigned bugs <unassigned-bugs-null>
Status:	RESOLVED UPSTREAM
Severity:	crash	CC:	foxwolfen, itf2, jorgeblasio, kde.gas422, minegame, mld.ald, nicolas.fella, octavia.togami+kdebugs, stakanov, zawertun
Priority:	VHI
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Linux
URL:	https://bugreports.qt.io/browse/QTBUG-133776
Latest Commit:		Version Fixed In:	Qt 6.8.3
Sentry Crash Report:

Description Nate Graham 2025-02-18 15:41:33 UTC

Example backtrace from Bug 499919, reproducible by changing something in the Accessibility KCM and applying:

#5  QArrayDataPointer<QInputDevice const*>::data (this=0x0) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/tools/qarraydatapointer.h:120
#6  QArrayDataPointer<QInputDevice const*>::constEnd (this=0x0) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/tools/qarraydatapointer.h:127
#7  QList<QInputDevice const*>::cend (this=0x0) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/tools/qlist.h:644
#8  QtPrivate::sequential_erase_one<QList<QInputDevice const*>, QInputDevice const*> (c=..., t=<synthetic pointer>: <optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/tools/qcontainertools_impl.h:389
#9  QList<QInputDevice const*>::removeOne<QInputDevice const*> (this=0x0, t=<synthetic pointer>: <optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/tools/qlist.h:613
#10 QInputDevicePrivate::unregisterDevice (dev=dev@entry=0x55b5d53f0a50) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/gui/kernel/qinputdevice.cpp:360
#11 0x00007f528d2fe793 in QInputDevice::~QInputDevice (this=this@entry=0x55b5d53f0a50, __in_chrg=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/gui/kernel/qinputdevice.cpp:110
#12 0x00007f528d330a97 in QPointingDevice::~QPointingDevice (this=this@entry=0x55b5d53f0a50, __in_chrg=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/gui/kernel/qpointingdevice.cpp:168
#13 0x00007f527b182fcf in QXcbScrollingDevice::~QXcbScrollingDevice (this=0x55b5d53f0a50, __in_chrg=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/plugins/platforms/xcb/qxcbscrollingdevice_p.h:29
#14 QXcbScrollingDevice::~QXcbScrollingDevice (this=0x55b5d53f0a50, __in_chrg=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/plugins/platforms/xcb/qxcbscrollingdevice_p.h:29
#15 0x00007f528cb4b8ae in QObject::event (this=0x55b5d53f0a50, e=0x55b5d53f0a70) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/kernel/qobject.cpp:1403
#16 0x00007f528de3d9b8 in QApplicationPrivate::notify_helper (this=<optimized out>, receiver=0x55b5d53f0a50, e=0x55b5d53f0a70) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/widgets/kernel/qapplication.cpp:3296
#17 0x00007f528caf3590 in QCoreApplication::notifyInternal2 (receiver=0x55b5d53f0a50, event=0x55b5d53f0a70) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/kernel/qcoreapplication.cpp:1172
#18 0x00007f528caf37ed in QCoreApplication::sendEvent (receiver=<optimized out>, event=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/kernel/qcoreapplication.cpp:1612
#19 0x00007f528caf6f51 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=52, data=0x55b5d53af9c0) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/kernel/qcoreapplication.cpp:1946
#20 0x00007f528caf71fd in QCoreApplication::sendPostedEvents (receiver=<optimized out>, event_type=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/kernel/qcoreapplication.cpp:1800
#21 0x00007f528ccb55c9 in operator() (__closure=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/thread/qthread_unix.cpp:403
#22 (anonymous namespace)::terminate_on_exception<QThreadPrivate::finish()::<lambda()> >(struct {...} &&) (t=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/thread/qthread_unix.cpp:311
#23 0x00007f528ccb5895 in QThreadPrivate::finish (this=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/thread/qthread_unix.cpp:386
#24 destroy_current_thread_data (p=0x55b5d53af9c0) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/thread/qthread_unix.cpp:130
#25 Cleanup::~Cleanup (this=<optimized out>, __in_chrg=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.2-2.fc41.x86_64/src/corelib/thread/qthread_unix.cpp:180
#26 0x00007f528c429180 in __cxa_finalize (d=0x7f528d079020) at cxa_finalize.c:97
#27 0x00007f528ca53a97 in __do_global_dtors_aux () at /lib64/libQt6Core.so.6
#28 0x00007ffe4220dcc0 in ??? ()
#29 0x00007f528e9c20f2 in _dl_call_fini (closure_map=0x7f528e640a60) at dl-call_fini.c:43


Very likely a Qt bug somewhere.

Comment 1 Nate Graham 2025-02-18 15:41:43 UTC

*** Bug 499919 has been marked as a duplicate of this bug. ***

Comment 2 Nate Graham 2025-02-18 15:41:47 UTC

*** Bug 500252 has been marked as a duplicate of this bug. ***

Comment 3 Nicolas Fella 2025-02-18 15:43:46 UTC

https://bugreports.qt.io/browse/QTBUG-133776

Comment 4 Nate Graham 2025-02-18 15:45:06 UTC

*** Bug 499695 has been marked as a duplicate of this bug. ***

Comment 5 Nate Graham 2025-02-18 15:57:02 UTC

Thanks! If it's only fixed in Qt 6.9.0, we'll probably want a backport somewhere, either in Qt or done by distros. Possibly both.

Comment 6 Nicolas Fella 2025-02-18 19:36:10 UTC

The cherry-pick to 6.8 is pending: https://codereview.qt-project.org/c/qt/qtbase/+/624949

Comment 7 Nate Graham 2025-02-18 21:44:14 UTC

Perfect!

Comment 8 cwo 2025-02-23 23:32:56 UTC

*** Bug 500589 has been marked as a duplicate of this bug. ***

Comment 9 Nicolas Fella 2025-02-26 11:32:17 UTC

*** Bug 500759 has been marked as a duplicate of this bug. ***

Comment 10 Harald Sitter 2025-03-01 13:12:19 UTC

*** Bug 500803 has been marked as a duplicate of this bug. ***

Comment 11 cwo 2025-03-02 20:34:15 UTC

*** Bug 500930 has been marked as a duplicate of this bug. ***

Comment 12 Nicolas Fella 2025-03-07 14:32:15 UTC

*** Bug 501173 has been marked as a duplicate of this bug. ***

Comment 13 Nicolas Fella 2025-03-10 10:08:28 UTC

*** Bug 501286 has been marked as a duplicate of this bug. ***

Comment 14 cwo 2025-03-18 19:30:24 UTC

*** Bug 501605 has been marked as a duplicate of this bug. ***

Comment 15 cwo 2025-03-18 19:54:58 UTC

*** Bug 501605 has been marked as a duplicate of this bug. ***

Comment 16 Nicolas Fella 2025-04-08 17:58:36 UTC

*** Bug 502575 has been marked as a duplicate of this bug. ***