Bug 1057781 - [abrt] PackageKit: g_thread_unref(): packagekitd killed by SIGSEGV
Summary: [abrt] PackageKit: g_thread_unref(): packagekitd killed by SIGSEGV
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: PackageKit
Version: 22
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Richard Hughes
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:416c2b74014eb2ea064fc776e4e...
: 1048590 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-01-24 20:27 UTC by Joachim Frieben
Modified: 2015-09-15 20:11 UTC (History)
7 users (show)

Fixed In Version: PackageKit-1.0.9-1.fc22
Clone Of:
Environment:
Last Closed: 2015-09-15 20:11:45 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (20.55 KB, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: cgroup (161 bytes, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: core_backtrace (12.94 KB, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: dso_list (7.23 KB, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: environ (120 bytes, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: exploitable (82 bytes, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: limits (1.29 KB, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: maps (40.71 KB, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: open_fds (1.99 KB, text/plain)
2014-01-24 20:27 UTC, Joachim Frieben
no flags Details
File: proc_pid_status (1.03 KB, text/plain)
2014-01-24 20:28 UTC, Joachim Frieben
no flags Details
File: var_log_messages (2.84 KB, text/plain)
2014-01-24 20:28 UTC, Joachim Frieben
no flags Details

Description Joachim Frieben 2014-01-24 20:27:35 UTC
Version-Release number of selected component:
PackageKit-0.8.16-1.fc21

Additional info:
reporter:       libreport-2.1.11
backtrace_rating: 4
cmdline:        /usr/libexec/packagekitd
crash_function: g_thread_unref
executable:     /usr/libexec/packagekitd
kernel:         3.14.0-0.rc0.git3.1.fc21.x86_64
runlevel:       3 5
type:           CCpp
uid:            0

Truncated backtrace:
Thread no. 1 (3 frames)
 #0 g_thread_unref at gthread.c:760
 #1 pk_backend_job_thread_setup at pk-backend-job.c:795
 #2 g_thread_proxy at gthread.c:798

Potential duplicate: bug 1048590

Comment 1 Joachim Frieben 2014-01-24 20:27:41 UTC
Created attachment 855199 [details]
File: backtrace

Comment 2 Joachim Frieben 2014-01-24 20:27:44 UTC
Created attachment 855200 [details]
File: cgroup

Comment 3 Joachim Frieben 2014-01-24 20:27:46 UTC
Created attachment 855201 [details]
File: core_backtrace

Comment 4 Joachim Frieben 2014-01-24 20:27:49 UTC
Created attachment 855202 [details]
File: dso_list

Comment 5 Joachim Frieben 2014-01-24 20:27:51 UTC
Created attachment 855203 [details]
File: environ

Comment 6 Joachim Frieben 2014-01-24 20:27:53 UTC
Created attachment 855204 [details]
File: exploitable

Comment 7 Joachim Frieben 2014-01-24 20:27:55 UTC
Created attachment 855205 [details]
File: limits

Comment 8 Joachim Frieben 2014-01-24 20:27:57 UTC
Created attachment 855206 [details]
File: maps

Comment 9 Joachim Frieben 2014-01-24 20:27:59 UTC
Created attachment 855207 [details]
File: open_fds

Comment 10 Joachim Frieben 2014-01-24 20:28:01 UTC
Created attachment 855208 [details]
File: proc_pid_status

Comment 11 Joachim Frieben 2014-01-24 20:28:03 UTC
Created attachment 855209 [details]
File: var_log_messages

Comment 12 Jaroslav Reznik 2015-03-03 15:25:14 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 22 development cycle.
Changing version to '22'.

More information and reason for this action is here:
https://fedoraproject.org/wiki/Fedora_Program_Management/HouseKeeping/Fedora22

Comment 13 Matthias Clasen 2015-05-28 02:46:39 UTC
This looks like a race in pk_backend_job_thread_create: pk_backend_job_thread_setup may run and try to free the thread object before g_thread_new has returned.

The fix should be simple: Just don't store the thread object inside the job; just do g_thread_unref (g_thread_new (...));

Comment 14 Kalev Lember 2015-06-08 23:43:33 UTC
*** Bug 1048590 has been marked as a duplicate of this bug. ***

Comment 15 Kalev Lember 2015-09-07 23:45:40 UTC
Thanks! Fixed upstream in https://github.com/hughsie/PackageKit/commit/c0d0481767a2b11ab0750d51474008a38a503a6e

Comment 16 Kalev Lember 2015-09-15 20:11:45 UTC
Should be fixed in PackageKit-1.0.9-1.fc22


Note You need to log in before you can comment on or make changes to this bug.