Bug 499185 - plasmashell crashed when clicking on the Screen Brightness icon in the System Tray
Summary: plasmashell crashed when clicking on the Screen Brightness icon in the System...
Status: RESOLVED UPSTREAM
Alias: None
Product: plasmashell
Classification: Plasma
Component: generic-crash (show other bugs)
Version: 6.2.90
Platform: Fedora RPMs Linux
: NOR crash
Target Milestone: 1.0
Assignee: Plasma Bugs List
URL:
Keywords: drkonqi
Depends on:
Blocks:
 
Reported: 2025-01-27 08:16 UTC by Matt Fagnani
Modified: 2025-01-31 16:23 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report: https://crash-reports.kde.org/organizations/kde/issues/124316/events/e2c4f1b283974bcf8243552718d9cec5/


Attachments
New crash information added by DrKonqi (117.69 KB, text/plain)
2025-01-27 08:16 UTC, Matt Fagnani
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Matt Fagnani 2025-01-27 08:16:03 UTC
Application: plasmashell (6.2.90)

ApplicationNotResponding [ANR]: false
Qt Version: 6.8.1
Frameworks Version: 6.10.0
Operating System: Linux 6.13.0-0.rc7.20250114gitc45323b7560e.56.fc42.x86_64 x86_64
Windowing System: Wayland
Distribution: "Fedora Linux 42 (KDE Plasma Prerelease)"
DrKonqi: 6.2.90 [CoredumpBackend]

-- Information about the crash:
I booted the Fedora Rawhide KDE live image Fedora-KDE-Desktop-Live-Rawhide-20250123.n.0.x86_64.iso on bare metal. Plasma 6.2.90 on Wayland started. I clicked on the Networks icon in the System Tray. I disabled Wifi in the Networks applet. I clicked on the Screen Brightness icon in the System Tray. The screen went black. plasmashell disappeared and reappeared automatically. drkonqi showed that plasmashell aborted with a malloc error "double free or corruption (out)" in frame 10 in malloc_printerr of the crashing thread 1. I didn't see this problem with 6.2.5 or earlier.

The reporter is unsure if this crash is reproducible.

-- Backtrace (Reduced):
#5  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
#6  0x00007f620dc804a3 in __pthread_kill_internal (threadid=<optimized out>, signo=6) at pthread_kill.c:89
#7  0x00007f620dc26cbe in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#8  0x00007f620dc0e6d6 in __GI_abort () at abort.c:73
#9  0x00007f620dc0f6fa in __libc_message_impl (fmt=fmt@entry=0x7f620ddc248f "%s\n") at ../sysdeps/posix/libc_fatal.c:132


Reported using DrKonqi
Comment 1 Matt Fagnani 2025-01-27 08:16:05 UTC
Created attachment 177710 [details]
New crash information added by DrKonqi

DrKonqi auto-attaching complete backtrace.
Comment 2 Marco Martin 2025-01-27 15:27:27 UTC
#5  __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
#6  0x00007f620dc804a3 in __pthread_kill_internal (threadid=<optimized out>, signo=6) at pthread_kill.c:89
#7  0x00007f620dc26cbe in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#8  0x00007f620dc0e6d6 in __GI_abort () at abort.c:73
#9  0x00007f620dc0f6fa in __libc_message_impl (fmt=fmt@entry=0x7f620ddc248f "%s\n") at ../sysdeps/posix/libc_fatal.c:132
#10 0x00007f620dc8a635 in malloc_printerr (str=str@entry=0x7f620ddc5728 "double free or corruption (out)") at malloc.c:5829
#11 0x00007f620dc8ca00 in _int_free_merge_chunk (av=av@entry=0x7f620ddf6ac0 <main_arena>, p=<optimized out>, size=<optimized out>) at malloc.c:4718
#12 0x00007f620dc8cb54 in _int_free_chunk (av=0x7f620ddf6ac0 <main_arena>, p=<optimized out>, size=<optimized out>, have_lock=<optimized out>, have_lock@entry=0) at malloc.c:4667
#13 0x00007f620dc8faa6 in _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:4699
#14 __GI___libc_free (mem=<optimized out>) at malloc.c:3476
#15 0x00007f620e2cce61 in QtPrivate::QSlotObjectBase::destroyIfLastRef (this=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobjectdefs_impl.h:483
#16 QtPrivate::QSlotObjectBase::destroyIfLastRef (this=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobjectdefs_impl.h:482
#17 QObjectPrivate::Connection::freeSlotObject (this=0x5571e13836a0) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobject_p_p.h:107
#18 QObjectPrivate::ConnectionData::deleteOrphaned (o=...) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobject.cpp:407
#19 QObjectPrivate::ConnectionData::~ConnectionData (this=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobject_p_p.h:152
#20 QObject::~QObject (this=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobject.cpp:1134
#21 0x00007f620e892655 in QDBusPendingCallWatcher::~QDBusPendingCallWatcher (this=0x5571e0ea2980) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/dbus/qdbuspendingcall.cpp:498
#22 0x00007f620e2c119f in QObject::event (this=0x5571e0ea2980, e=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qobject.cpp:1404
#23 0x00007f62105a2eca in QApplicationPrivate::notify_helper(QObject*, QEvent*) () from /lib64/libQt6Widgets.so.6
#24 0x00007f620e265280 in QCoreApplication::notifyInternal2 (receiver=0x5571e0ea2980, event=0x7f6150484f30) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qcoreapplication.cpp:1168
#25 0x00007f620e2654dd in QCoreApplication::sendEvent (receiver=<optimized out>, event=<optimized out>) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qcoreapplication.cpp:1612
#26 0x00007f620e2690d2 in QCoreApplicationPrivate::sendPostedEvents (receiver=0x0, event_type=0, event_type@entry=32610, data=0x5571dd365330) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qcoreapplication.cpp:1968
#27 0x00007f620e26a500 in QCoreApplication::sendPostedEvents (receiver=<optimized out>, event_type=32610) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qcoreapplication.cpp:1800
#28 0x00007f620e5662ff in postEventSourceDispatch (s=0x5571dd36a670) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qeventdispatcher_glib.cpp:246
#29 0x00007f620ce8df16 in g_main_context_dispatch_unlocked.lto_priv () from /lib64/libglib-2.0.so.0
#30 0x00007f620ce97068 in g_main_context_iterate_unlocked.isra () from /lib64/libglib-2.0.so.0
#31 0x00007f620ce97217 in g_main_context_iteration () from /lib64/libglib-2.0.so.0
#32 0x00007f620e565b43 in QEventDispatcherGlib::processEvents (this=0x5571dd36b450, flags=...) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qeventdispatcher_glib.cpp:399
#33 0x00007f620e2738eb in QEventLoop::exec (this=this@entry=0x7fffac1461f0, flags=..., flags@entry=...) at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/global/qflags.h:34
#34 0x00007f620e26f555 in QCoreApplication::exec () at /usr/src/debug/qt6-qtbase-6.8.1-11.fc42.x86_64/src/corelib/kernel/qcoreapplication.cpp:1513
#35 0x00005571c3befca6 in main ()
Comment 3 Nate Graham 2025-01-27 20:05:09 UTC
I don't see any KDE code in here; it may be a Qt bug.
Comment 4 Nate Graham 2025-01-31 16:23:22 UTC
Apparently it's a GCC 15 bug: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=116506