Bug 1084482

Summary: [abrt] gnome-software: gs_app_set_name(): gnome-software killed by SIGABRT
Product: [Fedora] Fedora Reporter: miguel rodriguez <bokerones.fritos>
Component: gnome-softwareAssignee: Richard Hughes <rhughes>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: kalevlember, rhughes
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/2426eb6b1e1f20381fb172f2bb2a760d95b6e2bf
Whiteboard: abrt_hash:796f7b26d4a1fbcff5fb600b509caf2d228af212
Fixed In Version: gnome-software-3.13.92-2.fc21 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-20 13:54:10 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description miguel rodriguez 2014-04-04 12:52:57 UTC 
Description of problem:
simply start app from icon software

Version-Release number of selected component:
gnome-software-3.12.0-1.fc21

Additional info:
reporter:       libreport-2.2.0
backtrace_rating: 4
cmdline:        /usr/bin/gnome-software --gapplication-service
crash_function: gs_app_set_name
executable:     /usr/bin/gnome-software
kernel:         3.13.7-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #6 gs_app_set_name at gs-app.c:635
 #7 gs_plugin_refine_item at gs-plugin-appstream.c:551
 #8 gs_plugin_refine_from_id at gs-plugin-appstream.c:667
 #9 gs_plugin_refine at gs-plugin-appstream.c:735
 #10 gs_plugin_loader_run_refine_plugin at gs-plugin-loader.c:187
 #11 gs_plugin_loader_run_refine at gs-plugin-loader.c:248
 #12 gs_plugin_loader_search_thread_cb at gs-plugin-loader.c:1561
 #13 run_in_thread at gsimpleasyncresult.c:857
 #14 io_job_thread at gioscheduler.c:85
 #15 g_task_thread_pool_thread at gtask.c:1213
Comment 1 miguel rodriguez 2014-04-04 12:53:02 UTC 
Created attachment 882686 [details]
File: backtrace
Comment 2 miguel rodriguez 2014-04-04 12:53:04 UTC 
Created attachment 882687 [details]
File: cgroup
Comment 3 miguel rodriguez 2014-04-04 12:53:07 UTC 
Created attachment 882688 [details]
File: core_backtrace
Comment 4 miguel rodriguez 2014-04-04 12:53:09 UTC 
Created attachment 882689 [details]
File: dso_list
Comment 5 miguel rodriguez 2014-04-04 12:53:12 UTC 
Created attachment 882690 [details]
File: environ
Comment 6 miguel rodriguez 2014-04-04 12:53:14 UTC 
Created attachment 882691 [details]
File: limits
Comment 7 miguel rodriguez 2014-04-04 12:53:18 UTC 
Created attachment 882692 [details]
File: maps
Comment 8 miguel rodriguez 2014-04-04 12:53:20 UTC 
Created attachment 882693 [details]
File: open_fds
Comment 9 miguel rodriguez 2014-04-04 12:53:22 UTC 
Created attachment 882694 [details]
File: proc_pid_status
Comment 10 miguel rodriguez 2014-04-04 12:53:25 UTC 
Created attachment 882695 [details]
File: var_log_messages
Comment 11 Richard Hughes 2014-08-07 13:16:10 UTC 
*** Bug 1070550 has been marked as a duplicate of this bug. ***
Comment 12 Richard Hughes 2014-08-07 13:52:51 UTC 
Okay, so this is really odd. It's really a use-after-free, but I can't see the refcount issue here. Can you reproduce this reliably? Any other information about how you triggered the bug would be awesome.
Comment 13 Kalev Lember 2014-08-07 14:16:08 UTC 
I think it's likely a threading issue, two threads accessing the same GsApp and try to simultaneously free the memory:

        g_free (app->priv->name);
        app->priv->name = g_strdup (name);
Comment 14 Kalev Lember 2014-09-20 13:54:10 UTC 
Should be fixed in 3.13.92.