Bug 1034450

Summary: [abrt] PackageKit-0.8.13-1.fc21: g_string_chunk_free: Process /usr/libexec/packagekitd was killed by signal 6 (SIGABRT)
Product: [Fedora] Fedora Reporter: Fabio Valentini <decathorpe>
Component: librepoAssignee: Tomas Mlcoch <tmlcoch>
Status: CLOSED WORKSFORME QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: jonathan, rdieter, rhughes, smparrish, tmlcoch
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/3b1249ee8deed3628a64e89af277b04ef41343d9
Whiteboard: abrt_hash:1c8bf888d646d333c01d4d697aabf9b80eb90ba1
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-12-03 13:02:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Fabio Valentini 2013-11-25 21:01:49 UTC 
Version-Release number of selected component:
PackageKit-0.8.13-1.fc21

Additional info:
reporter:       libreport-2.1.9
backtrace_rating: 4
cmdline:        /usr/libexec/packagekitd
crash_function: g_string_chunk_free
executable:     /usr/libexec/packagekitd
kernel:         3.12.1-2.fc21.x86_64
runlevel:       N 5
type:           CCpp
uid:            0

Truncated backtrace:
Thread no. 1 (10 frames)
 #6 g_string_chunk_free at gstringchunk.c:154
 #7 lr_yum_repomdrecord_free at /usr/src/debug/librepo/py3/librepo/repomd.c:52
 #8 g_slist_foreach at gslist.c:896
 #9 g_slist_free_full at gslist.c:179
 #10 lr_yum_repomd_free at /usr/src/debug/librepo/py3/librepo/repomd.c:69
 #11 lr_result_clear at /usr/src/debug/librepo/py3/librepo/result.c:45
 #12 lr_result_free at /usr/src/debug/librepo/py3/librepo/result.c:55
 #13 hif_source_free at hif-source.c:65
 #14 g_ptr_array_foreach at garray.c:1460
 #15 ptr_array_free at garray.c:1085
Comment 1 Fabio Valentini 2013-11-25 21:02:04 UTC 
Created attachment 828879 [details]
File: backtrace
Comment 2 Fabio Valentini 2013-11-25 21:02:09 UTC 
Created attachment 828880 [details]
File: cgroup
Comment 3 Fabio Valentini 2013-11-25 21:02:16 UTC 
Created attachment 828881 [details]
File: core_backtrace
Comment 4 Fabio Valentini 2013-11-25 21:02:25 UTC 
Created attachment 828882 [details]
File: dso_list
Comment 5 Fabio Valentini 2013-11-25 21:02:33 UTC 
Created attachment 828883 [details]
File: environ
Comment 6 Fabio Valentini 2013-11-25 21:02:38 UTC 
Created attachment 828884 [details]
File: limits
Comment 7 Fabio Valentini 2013-11-25 21:02:44 UTC 
Created attachment 828885 [details]
File: maps
Comment 8 Fabio Valentini 2013-11-25 21:02:48 UTC 
Created attachment 828886 [details]
File: open_fds
Comment 9 Fabio Valentini 2013-11-25 21:02:54 UTC 
Created attachment 828887 [details]
File: proc_pid_status
Comment 10 Fabio Valentini 2013-11-25 21:02:59 UTC 
Created attachment 828888 [details]
File: var_log_messages
Comment 11 Richard Hughes 2013-12-10 17:13:17 UTC 
Reassigning to see if this is interesting.
Comment 12 Tomas Mlcoch 2013-12-11 09:35:42 UTC 
Cannot reproduce, Valgrind shows everything is ok.
I've inspect the code for possibility of double free, but found nothing.

SIGABRT during glibc free() could be heap corruption as well, but as I wrote above, Valrgind doesn't show any error and all my tests pass.

For this moment no fix is available. 

Please let me know if this bug appear again.
Comment 13 Tomas Mlcoch 2014-12-03 13:02:33 UTC 
Cannot reproduce with the current (1.7.10) version.
Feel free to re-open if reappears.