Bug 2265304

Summary: [abrt] gnome-software: g_type_check_instance_is_fundamentally_a(): gnome-software killed by SIGSEGV
Product: [Fedora] Fedora Reporter: Luna Jernberg <droidbittin>
Component: gnome-softwareAssignee: Milan Crha <mcrha>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 40CC: droidbittin, gnome-sig, mcrha, rhughes, sevmek
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/7facc39250bf494a0012c2a4190c88bab75c758
Whiteboard: abrt_hash:a4ba904d88389f3aa0c7346e647f43c57820564e;VARIANT_ID=workstation;
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-05-16 07:56:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: proc_pid_status
none
File: maps
none
File: limits
none
File: environ
none
File: open_fds
none
File: mountinfo
none
File: os_info
none
File: cpuinfo
none
File: core_backtrace
none
File: exploitable
none
File: dso_list
none
File: var_log_messages
none
File: backtrace none

Description Luna Jernberg 2024-02-21 11:41:17 UTC
Version-Release number of selected component:
gnome-software-46~beta-1.fc40

Additional info:
reporter:       libreport-2.17.14
type:           CCpp
reason:         gnome-software killed by SIGSEGV
journald_cursor: s=dacbef940bf746bfaa7da2bb26e416ec;i=93cd;b=e51dc46955b844988c4a2094bd794ac3;m=1879337e;t=611e2bda0b806;x=ac5726126e885d3f
executable:     /usr/bin/gnome-software
cmdline:        /usr/bin/gnome-software --gapplication-service
cgroup:         0::/user.slice/user-1000.slice/user/app.slice/app-flatpak-org.tuxfamily.XMoto-2788.scope
rootdir:        /
uid:            1000
kernel:         6.8.0-0.rc5.41.fc40.x86_64
package:        gnome-software-46~beta-1.fc40
runlevel:       N 5
backtrace_rating: 4
crash_function: g_type_check_instance_is_fundamentally_a

Truncated backtrace:
Thread no. 1 (14 frames)
 #0 g_type_check_instance_is_fundamentally_a at ../gobject/gtype.c:4151
 #1 g_object_ref at ../gobject/gobject.c:3831
 #2 run_cb at ../lib/gs-plugin-job-refine.c:811
 #3 g_task_return_now at ../gio/gtask.c:1361
 #4 g_task_return at ../gio/gtask.c:1430
 #6 finish_refine_internal_recursion at ../lib/gs-plugin-job-refine.c:697
 #7 finish_refine_internal_op at ../lib/gs-plugin-job-refine.c:650
 #8 rewrite_resources_cb at /usr/include/glib-2.0/glib/gmem.h:242
 #9 g_task_return_now at ../gio/gtask.c:1361
 #10 complete_in_idle_cb at ../gio/gtask.c:1375
 #13 g_main_context_dispatch_unlocked at ../glib/gmain.c:4152
 #14 g_main_context_iterate_unlocked.isra.0 at ../glib/gmain.c:4217
 #15 g_main_context_iteration at ../glib/gmain.c:4282
 #16 g_application_run at ../gio/gapplication.c:2613

Comment 1 Luna Jernberg 2024-02-21 11:41:21 UTC
Created attachment 2017966 [details]
File: proc_pid_status

Comment 2 Luna Jernberg 2024-02-21 11:41:22 UTC
Created attachment 2017967 [details]
File: maps

Comment 3 Luna Jernberg 2024-02-21 11:41:23 UTC
Created attachment 2017968 [details]
File: limits

Comment 4 Luna Jernberg 2024-02-21 11:41:25 UTC
Created attachment 2017969 [details]
File: environ

Comment 5 Luna Jernberg 2024-02-21 11:41:26 UTC
Created attachment 2017970 [details]
File: open_fds

Comment 6 Luna Jernberg 2024-02-21 11:41:27 UTC
Created attachment 2017971 [details]
File: mountinfo

Comment 7 Luna Jernberg 2024-02-21 11:41:29 UTC
Created attachment 2017972 [details]
File: os_info

Comment 8 Luna Jernberg 2024-02-21 11:41:30 UTC
Created attachment 2017973 [details]
File: cpuinfo

Comment 9 Luna Jernberg 2024-02-21 11:41:31 UTC
Created attachment 2017974 [details]
File: core_backtrace

Comment 10 Luna Jernberg 2024-02-21 11:41:33 UTC
Created attachment 2017975 [details]
File: exploitable

Comment 11 Luna Jernberg 2024-02-21 11:41:34 UTC
Created attachment 2017976 [details]
File: dso_list

Comment 12 Luna Jernberg 2024-02-21 11:41:36 UTC
Created attachment 2017977 [details]
File: var_log_messages

Comment 13 Luna Jernberg 2024-02-21 11:41:37 UTC
Created attachment 2017978 [details]
File: backtrace

Comment 14 Milan Crha 2024-02-21 14:31:33 UTC
*** Bug 2265306 has been marked as a duplicate of this bug. ***

Comment 15 Milan Crha 2024-02-21 14:45:45 UTC
Thanks for a bug report. It looks like some sort of a use-after-free problem, when some part of the code overwrites memory, which is occupied by a different object than the code expects, because this exact place of this crash uses an object, which had been used several lines above the place of the crash. I noticed similar "random" crashes reported during the past months, but it's hard to reproduce them, thus even they look differently they can be caused by the same reason.

I know of [1], which is part of the 46.beta, which you have, but it was about reading already freed memory, not writing into it, thus it's something else.

[1] https://gitlab.gnome.org/GNOME/gnome-software/-/commit/256913f808598dc4fd2318cb54b7d2a7496f9617

Comment 16 Milan Crha 2024-02-22 07:29:13 UTC
*** Bug 2265427 has been marked as a duplicate of this bug. ***

Comment 17 Milan Crha 2024-02-22 07:29:44 UTC
*** Bug 2265428 has been marked as a duplicate of this bug. ***

Comment 18 Aoife Moloney 2025-04-25 10:18:17 UTC
This message is a reminder that Fedora Linux 40 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 40 on 2025-05-13.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '40'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 40 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 19 Aoife Moloney 2025-05-16 07:56:28 UTC
Fedora Linux 40 entered end-of-life (EOL) status on 2025-05-13.

Fedora Linux 40 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.