Bug 1837961

Summary: [abrt] sane-frontends: operator delete(): scanadf killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Ludovic Hirlimann [:Paul-muadib] <ludovic>
Component: sane-frontendsAssignee: Nils Philippsen <nphilipp>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: low    
Version: 32CC: nphilipp, thibault.north, zdohnal
Target Milestone: ---Keywords: TestCaseProvided
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/fdd52c18446e76b4f9ae9101b8f6d4d08515ae66
Whiteboard: abrt_hash:b9d5a62306b30a723c3b3ad0265402b4eceef14e;VARIANT_ID=workstation;
Fixed In Version: sane-frontends-1.0.14-37.fc32 sane-frontends-1.0.14-37.fc31 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-08-28 14:55:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: cpuinfo
none
File: dso_list
none
File: environ
none
File: exploitable
none
File: limits
none
File: maps
none
File: mountinfo
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages none

Description Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:00 UTC 
Version-Release number of selected component:
sane-frontends-1.0.14-34.fc32

Additional info:
reporter:       libreport-2.13.1
backtrace_rating: 4
cmdline:        scanadf --help --device-name=lexmark_nscan:libnet/0021B7F59377
crash_function: operator delete
executable:     /usr/bin/scanadf
journald_cursor: s=85278341b08a4612a07aacb9c7e60ea2;i=57e09;b=b1eccd310dc04877988e3400eca8af5b;m=146416ec50;t=5a603af7ea177;x=2ccba7d9266b42fd
kernel:         5.6.13-300.fc32.x86_64
rootdir:        /
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #1 operator delete at ../../../../libstdc++-v3/libsupc++/del_op.cc:49
 #3 __gnu_cxx::new_allocator<unsigned int>::deallocate at /usr/include/c++/10/ext/new_allocator.h:120
 #4 std::allocator_traits<std::allocator<unsigned int> >::deallocate at /usr/include/c++/10/bits/alloc_traits.h:492
 #5 std::_Vector_base<unsigned int, std::allocator<unsigned int> >::_M_deallocate at /usr/include/c++/10/bits/stl_vector.h:354
 #6 std::_Vector_base<unsigned int, std::allocator<unsigned int> >::~_Vector_base at /usr/include/c++/10/bits/stl_vector.h:335
 #7 std::vector<unsigned int, std::allocator<unsigned int> >::~vector at /usr/include/c++/10/bits/stl_vector.h:683
 #8 genesys::Genesys_Model::~Genesys_Model at genesys/device.h:121
 #9 genesys::Genesys_USB_Device_Entry::~Genesys_USB_Device_Entry at genesys/low.h:204
 #10 std::_Destroy<genesys::Genesys_USB_Device_Entry> at /usr/include/c++/10/bits/stl_construct.h:140
 #11 std::_Destroy_aux<false>::__destroy<genesys::Genesys_USB_Device_Entry*> at /usr/include/c++/10/bits/stl_construct.h:152
Comment 1 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:04 UTC 
Created attachment 1690133 [details]
File: backtrace
Comment 2 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:06 UTC 
Created attachment 1690134 [details]
File: cgroup
Comment 3 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:08 UTC 
Created attachment 1690135 [details]
File: core_backtrace
Comment 4 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:09 UTC 
Created attachment 1690136 [details]
File: cpuinfo
Comment 5 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:11 UTC 
Created attachment 1690137 [details]
File: dso_list
Comment 6 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:13 UTC 
Created attachment 1690138 [details]
File: environ
Comment 7 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:15 UTC 
Created attachment 1690139 [details]
File: exploitable
Comment 8 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:17 UTC 
Created attachment 1690140 [details]
File: limits
Comment 9 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:19 UTC 
Created attachment 1690141 [details]
File: maps
Comment 10 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:21 UTC 
Created attachment 1690142 [details]
File: mountinfo
Comment 11 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:23 UTC 
Created attachment 1690143 [details]
File: open_fds
Comment 12 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:24 UTC 
Created attachment 1690144 [details]
File: proc_pid_status
Comment 13 Ludovic Hirlimann [:Paul-muadib] 2020-05-20 09:41:26 UTC 
Created attachment 1690145 [details]
File: var_log_messages
Comment 14 Zdenek Dohnal 2020-05-22 04:40:49 UTC 
Hi Ludovic,

thank you for reporting the issue!

The segfault happens in genesys backend code, regardless of used device in scanadf command. I'll reassign to sane-backends and report upstream.
Comment 15 Zdenek Dohnal 2020-05-22 04:54:35 UTC 
Reported upstream here https://gitlab.com/sane-project/backends/-/issues/305 .
Comment 16 Zdenek Dohnal 2020-08-20 09:57:37 UTC 
Actually it is really a bug in sane-frontends - scanadf doesn't clean up properly as it is expected for SANE apps.

I took scanimage exit function and adjusted it for scanadf. The segfault is no more.
Comment 18 Zdenek Dohnal 2020-08-20 11:00:06 UTC 
Ticket for the correct project https://gitlab.com/sane-project/frontends/-/issues/19 .
Comment 19 Zdenek Dohnal 2020-08-20 11:33:31 UTC 
Pull request sent upstream https://gitlab.com/sane-project/frontends/-/merge_requests/1 .
Comment 20 Fedora Update System 2020-08-20 12:48:54 UTC 
FEDORA-2020-e72ed839f8 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-e72ed839f8
Comment 21 Fedora Update System 2020-08-21 01:03:54 UTC 
FEDORA-2020-b02acb0cdb has been pushed to the Fedora 31 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-b02acb0cdb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-b02acb0cdb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 22 Fedora Update System 2020-08-21 01:17:50 UTC 
FEDORA-2020-e72ed839f8 has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-e72ed839f8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-e72ed839f8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 23 Fedora Update System 2020-08-28 14:55:28 UTC 
FEDORA-2020-e72ed839f8 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 24 Fedora Update System 2020-08-28 14:58:04 UTC 
FEDORA-2020-b02acb0cdb has been pushed to the Fedora 31 stable repository.
If problem still persists, please make note of it in this bug report.