Bug 1084482 - [abrt] gnome-software: gs_app_set_name(): gnome-software killed by SIGABRT
Summary: [abrt] gnome-software: gs_app_set_name(): gnome-software killed by SIGABRT
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: gnome-software
Version: rawhide
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Richard Hughes
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:796f7b26d4a1fbcff5fb600b509...
: 1070550 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-04-04 12:52 UTC by miguel rodriguez
Modified: 2014-09-20 13:54 UTC (History)
2 users (show)

Fixed In Version: gnome-software-3.13.92-2.fc21
Clone Of:
Environment:
Last Closed: 2014-09-20 13:54:10 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)
File: backtrace (77.47 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: cgroup (172 bytes, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: core_backtrace (63.09 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: dso_list (12.42 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: environ (2.08 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: limits (1.29 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: maps (59.88 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: open_fds (1.15 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: proc_pid_status (961 bytes, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
File: var_log_messages (1.44 KB, text/plain)
2014-04-04 12:53 UTC, miguel rodriguez 		no flags Details
View All

Description miguel rodriguez 2014-04-04 12:52:57 UTC 
Description of problem:
simply start app from icon software

Version-Release number of selected component:
gnome-software-3.12.0-1.fc21

Additional info:
reporter:       libreport-2.2.0
backtrace_rating: 4
cmdline:        /usr/bin/gnome-software --gapplication-service
crash_function: gs_app_set_name
executable:     /usr/bin/gnome-software
kernel:         3.13.7-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (10 frames)
 #6 gs_app_set_name at gs-app.c:635
 #7 gs_plugin_refine_item at gs-plugin-appstream.c:551
 #8 gs_plugin_refine_from_id at gs-plugin-appstream.c:667
 #9 gs_plugin_refine at gs-plugin-appstream.c:735
 #10 gs_plugin_loader_run_refine_plugin at gs-plugin-loader.c:187
 #11 gs_plugin_loader_run_refine at gs-plugin-loader.c:248
 #12 gs_plugin_loader_search_thread_cb at gs-plugin-loader.c:1561
 #13 run_in_thread at gsimpleasyncresult.c:857
 #14 io_job_thread at gioscheduler.c:85
 #15 g_task_thread_pool_thread at gtask.c:1213
Comment 1 miguel rodriguez 2014-04-04 12:53:02 UTC 
Created attachment 882686 [details]
File: backtrace
Comment 2 miguel rodriguez 2014-04-04 12:53:04 UTC 
Created attachment 882687 [details]
File: cgroup
Comment 3 miguel rodriguez 2014-04-04 12:53:07 UTC 
Created attachment 882688 [details]
File: core_backtrace
Comment 4 miguel rodriguez 2014-04-04 12:53:09 UTC 
Created attachment 882689 [details]
File: dso_list
Comment 5 miguel rodriguez 2014-04-04 12:53:12 UTC 
Created attachment 882690 [details]
File: environ
Comment 6 miguel rodriguez 2014-04-04 12:53:14 UTC 
Created attachment 882691 [details]
File: limits
Comment 7 miguel rodriguez 2014-04-04 12:53:18 UTC 
Created attachment 882692 [details]
File: maps
Comment 8 miguel rodriguez 2014-04-04 12:53:20 UTC 
Created attachment 882693 [details]
File: open_fds
Comment 9 miguel rodriguez 2014-04-04 12:53:22 UTC 
Created attachment 882694 [details]
File: proc_pid_status
Comment 10 miguel rodriguez 2014-04-04 12:53:25 UTC 
Created attachment 882695 [details]
File: var_log_messages
Comment 11 Richard Hughes 2014-08-07 13:16:10 UTC 
*** Bug 1070550 has been marked as a duplicate of this bug. ***
Comment 12 Richard Hughes 2014-08-07 13:52:51 UTC 
Okay, so this is really odd. It's really a use-after-free, but I can't see the refcount issue here. Can you reproduce this reliably? Any other information about how you triggered the bug would be awesome.
Comment 13 Kalev Lember 2014-08-07 14:16:08 UTC 
I think it's likely a threading issue, two threads accessing the same GsApp and try to simultaneously free the memory:

        g_free (app->priv->name);
        app->priv->name = g_strdup (name);
Comment 14 Kalev Lember 2014-09-20 13:54:10 UTC 
Should be fixed in 3.13.92.
Note You need to log in before you can comment on or make changes to this bug.