| Summary: | [abrt] trojita: QLinkedList<Imap::Commands::Command>::detach(): trojita killed by SIGSEGV | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Karel Volný <kvolny> | ||||||||||||||||||||||||||
| Component: | qt5-qtbase | Assignee: | Than Ngo <than> | ||||||||||||||||||||||||||
| Status: | CLOSED EOL | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||||||||||||||||||||||
| Severity: | unspecified | Docs Contact: | |||||||||||||||||||||||||||
| Priority: | unspecified | ||||||||||||||||||||||||||||
| Version: | 23 | CC: | jgrulich, jkt, jreznik, kde-sig, ovasik, projects.rg, rdieter, than | ||||||||||||||||||||||||||
| Target Milestone: | --- | ||||||||||||||||||||||||||||
| Target Release: | --- | ||||||||||||||||||||||||||||
| Hardware: | x86_64 | ||||||||||||||||||||||||||||
| OS: | Unspecified | ||||||||||||||||||||||||||||
| URL: | https://retrace.fedoraproject.org/faf/reports/bthash/33ebf1f06f4842c95a497393bd54a590df7b6d21 | ||||||||||||||||||||||||||||
| Whiteboard: | abrt_hash:2e166b7501e8738d476d019ffba38cc93e5a505a; | ||||||||||||||||||||||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||||||||||||||||||||||
| Doc Text: | Story Points: | --- | |||||||||||||||||||||||||||
| Clone Of: | Environment: | ||||||||||||||||||||||||||||
| Last Closed: | 2016-12-20 19:52:02 UTC | Type: | --- | ||||||||||||||||||||||||||
| Regression: | --- | Mount Type: | --- | ||||||||||||||||||||||||||
| Documentation: | --- | CRM: | |||||||||||||||||||||||||||
| Verified Versions: | Category: | --- | |||||||||||||||||||||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||||||||||||||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||||||||||||||||||||
| Attachments: |
|
||||||||||||||||||||||||||||
|
Description
Karel Volný
2016-04-08 09:25:44 UTC
Created attachment 1145051 [details]
File: backtrace
Created attachment 1145052 [details]
File: cgroup
Created attachment 1145053 [details]
File: core_backtrace
Created attachment 1145054 [details]
File: dso_list
Created attachment 1145055 [details]
File: environ
Created attachment 1145056 [details]
File: limits
Created attachment 1145057 [details]
File: maps
Created attachment 1145058 [details]
File: mountinfo
Created attachment 1145059 [details]
File: namespaces
Created attachment 1145060 [details]
File: open_fds
Created attachment 1145061 [details]
File: proc_pid_status
Created attachment 1145062 [details]
File: var_log_messages
Can you reproduce this with valgrind attached? The segfault happens in code which enqueues IMAP commands. Based on my past experience, this usually happened when some object (an IMAP connection in this case, maybe?) is already freed, but something still accesses it (a classic use-after-free). Of course I've never seen a crash like this particular one in a few years, so I don't know how to reproduce it. Were you doing something fancy? Was there a network reconnect? (Our tests hammer such a situation already, but it's possible that there's some failure.) RaphGro mentioned a possibility of some behavior change triggered by upstream Qt. Unless it affects signal delivery with queued connections, I don't think this is a Qt bug, but on the other hand, I've seen KDE patches working around delayed signal delivery in some contexts. https://phabricator.kde.org/D1314 implies "Workaround problems with Qt::QueuedConnection" problem with Qt-5.6 The backtrace has nothing to do with Qt::QueuedConnection as assumed in comment #14. It's a bug with QLinkedList in QtCore. The function detach is not documented but called inside the header as inline function and accesses a bogus pointer (uninitialized?). https://github.com/qtproject/qtbase/blob/dev/src/corelib/tools/qlinkedlist.h#L384 https://github.com/qtproject/qtbase/blob/dev/src/corelib/tools/qlinkedlist.h#L105 http://doc.qt.io/qt-5/qlinkedlist.html#append (In reply to Raphael Groner from comment #15) > It's a bug with QLinkedList in QtCore My hypothesis is that the QLinkedList has been already freed, or that something has corrupted memory. If it's been already freed, it's a question how come that we use that memory after free; I haven't seen this report before, and this part of the code is not regularly changed. I doubt I'll be able to understand this without valgrind's output. (In reply to Jan Kundrát from comment #13) > Can you reproduce this with valgrind attached? well, unfortunately, I don't know how to reproduce, and running with Valgrind all the time isn't something I'd like to try but yes, it might have to do something with interrupted connections ... This message is a reminder that Fedora 23 is nearing its end of life. Approximately 4 (four) weeks from now Fedora will stop maintaining and issuing updates for Fedora 23. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '23'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 23 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete. Fedora 23 changed to end-of-life (EOL) status on 2016-12-20. Fedora 23 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed. |