Bug 1256476

Summary: [abrt] trojita: QXcbConnection::internAtom(): trojita killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Karel Volný <kvolny>
Component: qt5-qtbaseAssignee: Than Ngo <than>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 25CC: ajax, jgrulich, jreznik, kde-sig, kevin, kvolny, ltinkl, negativo17, projects.rg, rdieter, rnovacek, than
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/53b01e2bb81ad61edd7daf70e0a18d20e4113931
Whiteboard: abrt_hash:6be8b05ad84ba31b16a7b741acd5186d3be188e6
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-24 12:43:09 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1266712    
Bug Blocks:    
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: mountinfo
none
File: namespaces
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Karel Volný 2015-08-24 16:50:15 UTC
Version-Release number of selected component:
trojita-0.5-7.fc23

Additional info:
reporter:       libreport-2.6.2
backtrace_rating: 4
cmdline:        /bin/trojita
crash_function: QXcbConnection::internAtom
executable:     /usr/bin/trojita
global_pid:     3296
kernel:         4.2.0-0.rc6.git0.2.fc23.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 QXcbConnection::internAtom at qxcbconnection.cpp:1763
 #1 QXcbSystemTrayTracker::create at qxcbsystemtraytracker.cpp:63
 #2 QXcbConnection::systemTrayTracker at qxcbconnection.cpp:2048
 #3 systemTrayTracker at qxcbnativeinterface.cpp:110
 #4 QXcbNativeInterface::nativeResourceForScreen at qxcbnativeinterface.cpp:288
 #5 locateSystemTray at util/qsystemtrayicon_x11.cpp:60
 #6 QSystemTrayIconPrivate::isSystemTrayAvailable_sys at util/qsystemtrayicon_x11.cpp:352
 #7 QSystemTrayIcon::isSystemTrayAvailable at util/qsystemtrayicon.cpp:346
 #8 KStatusNotifierItemPrivate::setLegacySystemTrayEnabled at ../../src/kstatusnotifieritem.cpp:801
 #9 KStatusNotifierItemPrivate::setLegacyMode at ../../src/kstatusnotifieritem.cpp:773

Comment 1 Karel Volný 2015-08-24 16:50:19 UTC
Created attachment 1066526 [details]
File: backtrace

Comment 2 Karel Volný 2015-08-24 16:50:20 UTC
Created attachment 1066527 [details]
File: cgroup

Comment 3 Karel Volný 2015-08-24 16:50:21 UTC
Created attachment 1066528 [details]
File: core_backtrace

Comment 4 Karel Volný 2015-08-24 16:50:23 UTC
Created attachment 1066529 [details]
File: dso_list

Comment 5 Karel Volný 2015-08-24 16:50:24 UTC
Created attachment 1066530 [details]
File: environ

Comment 6 Karel Volný 2015-08-24 16:50:25 UTC
Created attachment 1066531 [details]
File: limits

Comment 7 Karel Volný 2015-08-24 16:50:27 UTC
Created attachment 1066532 [details]
File: maps

Comment 8 Karel Volný 2015-08-24 16:50:28 UTC
Created attachment 1066533 [details]
File: mountinfo

Comment 9 Karel Volný 2015-08-24 16:50:29 UTC
Created attachment 1066534 [details]
File: namespaces

Comment 10 Karel Volný 2015-08-24 16:50:30 UTC
Created attachment 1066535 [details]
File: open_fds

Comment 11 Karel Volný 2015-08-24 16:50:31 UTC
Created attachment 1066536 [details]
File: proc_pid_status

Comment 12 Karel Volný 2015-08-24 16:50:33 UTC
Created attachment 1066537 [details]
File: var_log_messages

Comment 13 Raphael Groner 2015-08-24 17:23:55 UTC
Backtrace indicates some bug in Qt5, so reassigning.

Comment 14 Raphael Groner 2015-08-25 10:05:57 UTC
Possible duplication of bug #1255902.

Comment 15 Raphael Groner 2015-09-04 13:50:50 UTC
*** Bug 1259470 has been marked as a duplicate of this bug. ***

Comment 16 Raphael Groner 2015-09-26 20:07:30 UTC
FTBFS in rawhide, I've to fix that first.

Comment 17 Raphael Groner 2016-11-07 20:38:46 UTC
*** Bug 1392511 has been marked as a duplicate of this bug. ***

Comment 18 Raphael Groner 2016-11-07 20:40:04 UTC
Maybe it get's better with any upcoming Qt5.7+ …

Comment 19 Raphael Groner 2016-11-07 20:56:42 UTC
*** Bug 1256478 has been marked as a duplicate of this bug. ***

Comment 20 Raphael Groner 2016-11-07 21:05:22 UTC
It seems the offending method is not thread safe. What about checking for null pointers and return some invalid atom object to let applications not crash? Also, we should ask the maintainers of XCB for some help.

xcb_atom_t QXcbConnection::internAtom(const char *name)
{
    if (!name || *name == 0)
        return XCB_NONE;

    xcb_intern_atom_cookie_t cookie = xcb_intern_atom(xcb_connection(), false, strlen(name), name);
    xcb_intern_atom_reply_t *reply = xcb_intern_atom_reply(xcb_connection(), cookie, 0);
    int atom = reply->atom;
    free(reply);
    return atom;
}

Comment 21 Karel Volný 2016-11-15 11:49:35 UTC
Similar problem has been detected:

it got stuck after trying to login at http://zbranekvalitne.cz/forum/ucp.php?mode=login

reporter:       libreport-2.8.0
backtrace_rating: 4
cmdline:        /usr/bin/qupzilla
executable:     /usr/bin/qupzilla
global_pid:     30095
kernel:         4.8.6-300.fc25.x86_64
package:        qupzilla-2.0.2-1.fc25
pkg_fingerprint: 4089 D8F2 FDB1 9C98
pkg_vendor:     Fedora Project
reason:         qupzilla killed by SIGABRT
runlevel:       N 5
type:           CCpp
uid:            1000

Comment 22 Karel Volný 2016-11-15 11:54:49 UTC
um, it's nice to get redirected here after a crash of a different application two Fedora versions later :-)

Comment 23 Raphael Groner 2016-11-15 16:26:29 UTC
Because it's (nearly) always the same backtrace you report about a bug in the core of Qt5. See explanation in comment #20.

Comment 24 Rex Dieter 2016-11-15 16:42:37 UTC
Re-assigning back to Qt, this is almost certainly not a libxcb issue

Comment 25 Than Ngo 2016-11-16 10:30:31 UTC
i tested the trojita on machine with f24 and  cannot reproduce this issue. Could someone please add an reproducer for that so i can check?

Thanks

Comment 26 Than Ngo 2016-11-24 12:43:09 UTC
I'm closing that bugzilla INSUFFICIENT_DATA because there's no testcase to reproduce this issue.  Feel free to reopen it once you find some way how to reproduce it.

thanks

Comment 27 Karel Volný 2016-12-14 13:06:30 UTC
(In reply to Ngo Than from comment #25)
> Could someone please add an reproducer for that so i can check?

sorry, I just don't know what triggered the problem

the page mentioned in comment#21 doesn't seem to reproduce the Qupzilla problem now