Bug 389447 - "free(): invalid pointer" on startup
Summary: "free(): invalid pointer" on startup
Status: RESOLVED NOT A BUG
Alias: None
Product: skrooge
Classification: Applications
Component: general (other bugs)
Version First Reported In: 2.10.0
Platform: Arch Linux Linux
: NOR normal
Target Milestone: 25.1.0
Assignee: Stephane MANKOWSKI
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-26 08:37 UTC by Jan Buchar
Modified: 2018-01-28 00:20 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:


Attachments
Skrooge debug trace (1.79 KB, text/plain)
2018-01-27 18:11 UTC, Jan Buchar
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Jan Buchar 2018-01-26 08:37:03 UTC
I installed Skrooge 2.10.5 on Arch linux and it crashes while the loading screen is running. The error is "free(): invalid pointer". I tried running Skrooge with strace -e open and it seems the crash occurs after reading /usr/lib/mozilla/plugins.

The complete stack trace:

#0  0x00007ffff4db1860 in raise () at /usr/lib/libc.so.6
#1  0x00007ffff4db2ec9 in abort () at /usr/lib/libc.so.6
#2  0x00007ffff4df4437 in __libc_message () at /usr/lib/libc.so.6
#3  0x00007ffff4dfa78b in  () at /usr/lib/libc.so.6
#4  0x00007ffff4dfc24c in _int_free () at /usr/lib/libc.so.6
#5  0x00007fff7d6b8282 in std::locale::_Impl::_M_install_facet(std::locale::id const*, std::locale::facet const*) () at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#6  0x00007fff7d6c4de3 in std::locale::_Impl::_Impl(unsigned long) ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#7  0x00007fff7d6c5d55 in std::locale::_S_initialize_once() ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#8  0x00007fffef956dcf in __pthread_once_slow () at /usr/lib/libpthread.so.0
#9  0x00007fff7d6c5da1 in std::locale::_S_initialize() ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#10 0x00007fff7d6c5de3 in std::locale::locale() ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#11 0x00007fff7d6976a4 in std::ios_base::Init::Init() ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#12 0x00007fff7d68f7b8 in __static_initialization_and_destruction_0(int, int) ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#13 0x00007fff7d68f7ea in _GLOBAL__sub_I_JLIWrapper_md.cpp ()
    at /usr/lib/jvm/java-9-jdk/lib/libdeploy.so
#14 0x00007ffff7de74fa in call_init.part () at /lib64/ld-linux-x86-64.so.2
#15 0x00007ffff7de7606 in _dl_init () at /lib64/ld-linux-x86-64.so.2
#16 0x00007ffff7debade in dl_open_worker () at /lib64/ld-linux-x86-64.so.2
#17 0x00007ffff4eaeb04 in _dl_catch_error () at /usr/lib/libc.so.6
#18 0x00007ffff7deb2fa in _dl_open () at /lib64/ld-linux-x86-64.so.2
#19 0x00007fffedc51e86 in  () at /usr/lib/libdl.so.2
#20 0x00007ffff4eaeb04 in _dl_catch_error () at /usr/lib/libc.so.6
#21 0x00007fffedc52587 in  () at /usr/lib/libdl.so.2
#22 0x00007fffedc51f22 in dlopen () at /usr/lib/libdl.so.2
#23 0x00007ffff5752f6e in  () at /usr/lib/libQt5Core.so.5
#24 0x00007ffff574c819 in QLibrary::load() () at /usr/lib/libQt5Core.so.5
#25 0x00007fffe93627f1 in  () at /usr/lib/libQt5WebKit.so.5
#26 0x00007fffe9345d98 in  () at /usr/lib/libQt5WebKit.so.5
#27 0x00007fffe9342ea1 in  () at /usr/lib/libQt5WebKit.so.5
#28 0x00007fffe9343872 in  () at /usr/lib/libQt5WebKit.so.5
#29 0x00007fffe9321b9b in  () at /usr/lib/libQt5WebKit.so.5
#30 0x00007fffea4bb61c in WebCore::Page::pluginData() const ()
    at /usr/lib/libQt5WebKit.so.5
#31 0x00007fffea07fadb in  () at /usr/lib/libQt5WebKit.so.5
#32 0x00007fffea3c67d0 in  () at /usr/lib/libQt5WebKit.so.5
#33 0x00007fffea3c6d9b in  () at /usr/lib/libQt5WebKit.so.5
#34 0x00007fffea6a299b in  () at /usr/lib/libQt5WebKit.so.5
#35 0x00007fffea43247e in  () at /usr/lib/libQt5WebKit.so.5
#36 0x00007fffea41bbd4 in  () at /usr/lib/libQt5WebKit.so.5
#37 0x00007fffea753297 in  () at /usr/lib/libQt5WebKit.so.5
#38 0x00007fffea74eaba in  () at /usr/lib/libQt5WebKit.so.5
#39 0x00007fffea753aad in  () at /usr/lib/libQt5WebKit.so.5
#40 0x00007ffff5787a06 in QMetaObject::activate(QObject*, int, int, void**) ()
    at /usr/lib/libQt5Core.so.5
#41 0x00007ffff14d11d6 in  () at /usr/lib/libQt5Network.so.5
#42 0x00007ffff5788452 in QObject::event(QEvent*) () at /usr/lib/libQt5Core.so.5
#43 0x00007ffff64d1e3c in QApplicationPrivate::notify_helper(QObject*, QEvent*) ()
    at /usr/lib/libQt5Widgets.so.5
#44 0x00007ffff64d9816 in QApplication::notify(QObject*, QEvent*) ()
    at /usr/lib/libQt5Widgets.so.5
#45 0x00007ffff57571e0 in QCoreApplication::notifyInternal2(QObject*, QEvent*) ()
    at /usr/lib/libQt5Core.so.5
#46 0x00007ffff5759e46 in QCoreApplicationPrivate::sendPostedEvents(QObject*, int, QThreadData*) () at /usr/lib/libQt5Core.so.5
#47 0x00007ffff57b40a4 in  () at /usr/lib/libQt5Core.so.5
#48 0x00007fffed99d270 in g_main_context_dispatch () at /usr/lib/libglib-2.0.so.0
#49 0x00007fffed99ef69 in  () at /usr/lib/libglib-2.0.so.0
#50 0x00007fffed99efae in g_main_context_iteration () at /usr/lib/libglib-2.0.so.0
#51 0x00007ffff57b3691 in QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () at /usr/lib/libQt5Core.so.5
#52 0x00007fffdbf5b282 in  () at /usr/lib/libQt5XcbQpa.so.5
#53 0x00007ffff7b274f3 in SKGMainPanel::SKGMainPanel(QSplashScreen*, SKGDocument*, QStringList const&) () at /usr/lib/libskgbasegui.so.2
#54 0x0000555555557a51 in  ()
#55 0x00007ffff4d9df4a in __libc_start_main () at /usr/lib/libc.so.6
#56 0x0000555555557c8a in _start ()
Comment 1 Stephane MANKOWSKI 2018-01-27 18:02:24 UTC
Hi,

Skrooge doesn't read in /usr/lib/mozilla/plugins.
Moreover, your call stack contains only one line about skrooge and is not really exploitable.

For me, the issue is more a packaging or an installation issue than a code issue.

Did you try to uninstall and re-install Skrooge?
Comment 2 Jan Buchar 2018-01-27 18:07:59 UTC
I just tried installing Skrooge on a different machine with the same results.
Comment 3 Stephane MANKOWSKI 2018-01-27 18:09:58 UTC
Could you try this from a console?

export SKGTRACE=10
skrooge > t.txt

Post here the file t.txt
Comment 4 Jan Buchar 2018-01-27 18:11:32 UTC
Created attachment 110154 [details]
Skrooge debug trace
Comment 5 Stephane MANKOWSKI 2018-01-27 18:13:53 UTC
Comment on attachment 110154 [details]
Skrooge debug trace

What is the traduction for "Modul rozpočtu pro Skrooge"?
This is just to know what is the plugin impacted.
Comment 6 Jan Buchar 2018-01-27 18:21:35 UTC
I would guess that it's something about budgeting.
Comment 7 Stephane MANKOWSKI 2018-01-27 19:07:50 UTC
Could you give me the result of this command?
find /usr -name *skrooge_budget*
Comment 8 Antonio Rojas 2018-01-28 00:20:28 UTC
This is caused by Oracle Java 9 in combination with qtwebkit, nothing to do with skrooge. Oracle Java is not supported in Arch Linux, use OpenJDK