Application: kdeinit5 (5.2.1) Qt Version: 5.4.0 Operating System: Linux 3.19.0-9-generic x86_64 Distribution: Ubuntu Vivid Vervet (development branch) -- Information about the crash: Just viewing wondow decorations for firefox I was just viewing the window decoration. I didn't do any changes. Crash happened when closing the dialog. The crash can be reproduced every time. -- Backtrace: Application: KDE Control Module (kdeinit5), signal: Aborted Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". [Current thread is 1 (Thread 0x7f0dde0047c0 (LWP 10908))] Thread 2 (Thread 0x7f0dad9e9700 (LWP 10914)): #0 0x00007f0ddc6ef0cd in poll () at ../sysdeps/unix/syscall-template.S:81 #1 0x00007f0dd9829ebc in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0 #2 0x00007f0dd9829fcc in g_main_context_iteration () from /lib/x86_64-linux-gnu/libglib-2.0.so.0 #3 0x00007f0ddccfeacc in QEventDispatcherGlib::processEvents (this=0x7f0da00008c0, flags=...) at kernel/qeventdispatcher_glib.cpp:418 #4 0x00007f0ddcca3392 in QEventLoop::exec (this=this@entry=0x7f0dad9e8de0, flags=..., flags@entry=...) at kernel/qeventloop.cpp:204 #5 0x00007f0ddca62a94 in QThread::exec (this=<optimized out>) at thread/qthread.cpp:503 #6 0x00007f0dcc1e76a5 in ?? () from /usr/lib/x86_64-linux-gnu/libQt5Qml.so.5 #7 0x00007f0ddca67a4e in QThreadPrivate::start (arg=0x2287a00) at thread/qthread_unix.cpp:337 #8 0x00007f0dda2880a5 in start_thread (arg=0x7f0dad9e9700) at pthread_create.c:309 #9 0x00007f0ddc6f957d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111 Thread 1 (Thread 0x7f0dde0047c0 (LWP 10908)): [KCrash Handler] #6 0x00007f0ddc635e37 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #7 0x00007f0ddc637528 in __GI_abort () at abort.c:89 #8 0x00007f0ddc6777a4 in __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0x7f0ddc780780 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175 #9 0x00007f0ddc67edb6 in malloc_printerr (ptr=<optimized out>, str=0x7f0ddc7808b0 "double free or corruption (out)", action=1) at malloc.c:4996 #10 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3840 #11 0x00007f0ddccd404b in QMetaCallEvent::~QMetaCallEvent (this=0x7f0dc0009e70, __in_chrg=<optimized out>) at kernel/qobject.cpp:467 #12 0x00007f0ddccd4099 in QMetaCallEvent::~QMetaCallEvent (this=0x7f0dc0009e70, __in_chrg=<optimized out>) at kernel/qobject.cpp:475 #13 0x00007f0ddcca8537 in QCoreApplication::removePostedEvents (receiver=0x122c330, eventType=eventType@entry=0) at kernel/qcoreapplication.cpp:1613 #14 0x00007f0ddccd468a in QObjectPrivate::~QObjectPrivate (this=0x122c670, __in_chrg=<optimized out>) at kernel/qobject.cpp:234 #15 0x00007f0ddccd4799 in QObjectPrivate::~QObjectPrivate (this=0x122c670, __in_chrg=<optimized out>) at kernel/qobject.cpp:245 #16 0x00007f0ddccdf7cb in cleanup (pointer=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:54 #17 ~QScopedPointer (this=0x122c338, __in_chrg=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:101 #18 QObject::~QObject (this=<optimized out>, __in_chrg=<optimized out>) at kernel/qobject.cpp:882 #19 0x00007f0dca1c3649 in QXcbConnection::~QXcbConnection (this=0x122c330, __in_chrg=<optimized out>) at qxcbconnection.cpp:450 #20 0x00007f0dca1c7d2e in qDeleteAll<QList<QXcbConnection*>::const_iterator> (end=..., begin=...) at ../../../../include/QtCore/../../src/corelib/tools/qalgorithms.h:315 #21 qDeleteAll<QList<QXcbConnection*> > (c=...) at ../../../../include/QtCore/../../src/corelib/tools/qalgorithms.h:323 #22 QXcbIntegration::~QXcbIntegration (this=0x1217b80, __in_chrg=<optimized out>) at qxcbintegration.cpp:170 #23 0x00007f0dca1c7e09 in QXcbIntegration::~QXcbIntegration (this=0x1217b80, __in_chrg=<optimized out>) at qxcbintegration.cpp:171 #24 0x00007f0ddd9af440 in QGuiApplicationPrivate::~QGuiApplicationPrivate() () from /usr/lib/x86_64-linux-gnu/libQt5Gui.so.5 #25 0x00007f0ddb0aac99 in QApplicationPrivate::~QApplicationPrivate (this=0x11ff800, __in_chrg=<optimized out>) at kernel/qapplication.cpp:183 #26 0x00007f0ddccdf7cb in cleanup (pointer=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:54 #27 ~QScopedPointer (this=0x7ffc56869328, __in_chrg=<optimized out>) at ../../include/QtCore/../../src/corelib/tools/qscopedpointer.h:101 #28 QObject::~QObject (this=<optimized out>, __in_chrg=<optimized out>) at kernel/qobject.cpp:882 #29 0x00007f0ddb0ac7a3 in QApplication::~QApplication (this=0x7ffc56869320, __in_chrg=<optimized out>) at kernel/qapplication.cpp:803 #30 0x00007f0dcb91d5fc in kdemain () from /usr/lib/x86_64-linux-gnu/libkdeinit5_kcmshell5.so #31 0x00000000004088e9 in ?? () #32 0x000000000040a382 in ?? () #33 0x000000000040a946 in ?? () #34 0x000000000040501b in main () Reported using DrKonqi
Seems a Qt bug, but is corrupted memory. -> Can you valgrind the kcm? valgrind kcmshell5 kwindecoration
Created attachment 91561 [details] valgrind of running the windows decoration module Just launched the module using the command valgrind kcmshell5 kwindecoration > valgrind-kcmshell5-kwindecoration.log 2>&1 and closed it immediately
I am managed to reproduce almost consistently : 1 - Open the windows decorations module, by clicking on any window icon -> More Actions -> Window manager settings. 2 - Choose the kwin scripts session. 3 - Go back to the window decorations module, and close it quickly (by pressing Esc for example). If it doesn't crash, try the procedure again.
updated my system this moring. unable to reproduce the bug again.
valgrind points NETRootInfo::update() (or rather one of its private calls) - this would cover bug #341818 as well (but because of the memory corruption, it could be sth. entirely different) -> Did you receive an update to kwindowsystem?
Created attachment 91569 [details] List of packages updated this morning
I think kwindowsystem was updated.In the attached list, I see an unpdated version of plasma-desktop and a few kde libs.
That would have been "libkf5windowsystem5", the kcm itself comes with "kwin" - only some baloo stuff got updated. If those updates really fixed the bug, it was in either libc or Xorg.