Hide Forgot
Created attachment 1221600 [details] valgrind output Description of problem: Core was generated by `/home/orion/fedora/plplot/plplot-5.11.1/fedora/examples/c/x04c -dev pdfqt -o /h'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f700a1dc8f1 in xcb_send_request_with_fds64 (c=0x55f6576e22a0, flags=flags@entry=1, vector=vector@entry=0x7ffd90f5fdc0, req=req@entry=0x7f700a1ef2e0 <xcb_req>, num_fds=num_fds@entry=0, fds=fds@entry=0x0) at xcb_out.c:274 274 if(longlen <= c->setup->maximum_request_length) (gdb) print c $2 = (xcb_connection_t *) 0x55f6576e22a0 (gdb) print c->setup $4 = (xcb_setup_t *) 0x21 (gdb) print c->setup->maximum_request_length Cannot access memory at address 0x3b (gdb) bt #0 0x00007f700a1dc8f1 in xcb_send_request_with_fds64 (c=c@entry=0x55f6576e22a0, flags=flags@entry=1, vector=vector@entry=0x7ffd90f5fdc0, req=req@entry=0x7f700a1ef2e0 <xcb_req>, num_fds=num_fds@entry=0, fds=fds@entry=0x0) at xcb_out.c:274 #1 0x00007f700a1dccdb in xcb_send_request64 (c=c@entry=0x55f6576e22a0, flags=flags@entry=1, vector=vector@entry=0x7ffd90f5fdc0, req=req@entry=0x7f700a1ef2e0 <xcb_req>) at xcb_out.c:349 #2 0x00007f700a1dcce9 in xcb_send_request (c=c@entry=0x55f6576e22a0, flags=flags@entry=1, vector=vector@entry=0x7ffd90f5fdc0, req=req@entry=0x7f700a1ef2e0 <xcb_req>) at xcb_out.c:355 #3 0x00007f700a1e2def in xcb_intern_atom (c=c@entry=0x55f6576e22a0, only_if_exists=only_if_exists@entry=0 '\000', name_len=<optimized out>, name=<optimized out>) at xproto.c:3206 #4 0x00007f70078ef647 in Breeze::Helper::createAtom(QString const&) const (this=this@entry=0x55f6576eba30, name=...) at /usr/src/debug/breeze-5.8.3/kstyle/breezehelper.cpp:1589 #5 0x00007f70078ef73b in Breeze::Helper::init() (this=this@entry=0x55f6576eba30) at /usr/src/debug/breeze-5.8.3/kstyle/breezehelper.cpp:1608 #6 0x00007f70078ef8df in Breeze::Helper::Helper(QByteArray const&) (this=0x55f6576eba30, name=...) at /usr/src/debug/breeze-5.8.3/kstyle/breezehelper.cpp:51 #7 0x00007f70079001de in Breeze::Style::Style() (this=0x55f6577e5ca0) at /usr/src/debug/breeze-5.8.3/kstyle/breezestyle.cpp:160 #8 0x00007f700790d651 in Breeze::StylePlugin::create(QString const&) (this=<optimized out>, key=...) at /usr/src/debug/breeze-5.8.3/kstyle/breezestyleplugin.cpp:38 #9 0x00007f700e1d9a33 in QStyleFactory::create(QString const&) () at /lib64/libQtGui.so.4 #10 0x00007f700ded1d40 in QApplication::style() () at /lib64/libQtGui.so.4 #11 0x00007f700ded1fcd in QApplicationPrivate::initialize() () at /lib64/libQtGui.so.4 #12 0x00007f700ded20ea in QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) () at /lib64/libQtGui.so.4 #13 0x00007f700ded24b8 in QApplication::QApplication(int&, char**, bool, int) () at /lib64/libQtGui.so.4 #14 0x00007f700ec60184 in initQtApp(bool) (isGUI=isGUI@entry=true) at /home/orion/fedora/plplot/plplot-5.11.1/drivers/qt.cpp:104 #15 0x00007f700ec60853 in plD_init_epspdfqt(PLStream*) (pls=0x7f7010f33aa0 <pls0>) at /home/orion/fedora/plplot/plplot-5.11.1/drivers/qt.cpp:998 #16 0x00007f7010ceb719 in plP_init () at /home/orion/fedora/plplot/plplot-5.11.1/src/plcore.c:144 #17 0x00007f7010cf381e in plGetFam (pls=pls@entry=0x7f7010f33aa0 <pls0>) at /home/orion/fedora/plplot/plplot-5.11.1/src/plctrl.c:2781 #18 0x00007f700ec61350 in plD_bop_epspdfqt_helper(PLStream*, int) (pls=0x7f7010f33aa0 <pls0>, ifeps=0) at /home/orion/fedora/plplot/plplot-5.11.1/drivers/qt.cpp:1033 #19 0x00007f7010ceb90f in plP_bop () at /home/orion/fedora/plplot/plplot-5.11.1/src/plcore.c:211 #20 0x00007f7010d098cf in c_pladv (page=<optimized out>) at /home/orion/fedora/plplot/plplot-5.11.1/src/plpage.c:51 #21 0x000055f656bcbee6 in plot1 (type=1) at /home/orion/fedora/plplot/plplot-5.11.1/examples/c/x04c.c:58 #22 0x000055f656bcbd57 in main (argc=<optimized out>, argv=<optimized out>) at /home/orion/fedora/plplot/plplot-5.11.1/examples/c/x04c.c:29 Running with valgrind I got: ==32144== Invalid read of size 4 ==32144== at 0xBD8C77E: xcb_send_request_with_fds64 (xcb_out.c:229) ==32144== by 0xBD8CCE8: xcb_send_request (xcb_out.c:355) ==32144== by 0xBD92DEE: xcb_intern_atom (xproto.c:3206) ==32144== by 0xF207646: Breeze::Helper::createAtom(QString const&) const (breezehelper.cpp:1589) ==32144== by 0xF20773A: Breeze::Helper::init() (breezehelper.cpp:1608) ==32144== by 0xF2078DE: Breeze::Helper::Helper(QByteArray const&) (breezehelper.cpp:51) ==32144== by 0xF2181DD: Breeze::Style::Style() (breezestyle.cpp:160) ==32144== by 0xF225650: Breeze::StylePlugin::create(QString const&) (breezestyleplugin.cpp:38) ==32144== by 0x7C75A32: QStyleFactory::create(QString const&) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796DD3F: QApplication::style() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796DFCC: QApplicationPrivate::initialize() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796E0E9: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== Address 0x71e4a50 is 0 bytes inside a block of size 21,152 free'd ==32144== at 0x4C2ED3A: free (vg_replace_malloc.c:530) ==32144== by 0xAFAD996: XCloseDisplay (in /usr/lib64/libX11.so.6.3.0) ==32144== by 0x79DBDB9: ??? (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796AFD1: QApplication::~QApplication() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796B2E8: QApplication::~QApplication() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x7318D82: closeQtApp() (qt.cpp:116) ==32144== by 0x4E55972: plP_tidy (plcore.c:234) ==32144== by 0x4E5D802: plGetFam (plctrl.c:2778) ==32144== by 0x731934F: plD_bop_epspdfqt_helper(PLStream*, int) (qt.cpp:1033) ==32144== by 0x4E5590E: plP_bop (plcore.c:211) ==32144== by 0x4E73916: c_plbop (plpage.c:125) ==32144== by 0x1090DB: demo2 (x02c.c:70) ==32144== Block was alloc'd at ==32144== at 0x4C2FA40: calloc (vg_replace_malloc.c:711) ==32144== by 0xBD8B98B: xcb_connect_to_fd (xcb_conn.c:345) ==32144== by 0xBD8F948: xcb_connect_to_display_with_auth_info (xcb_util.c:535) ==32144== by 0xAFCFA39: _XConnectXCB (in /usr/lib64/libX11.so.6.3.0) ==32144== by 0xAFC0771: XOpenDisplay (in /usr/lib64/libX11.so.6.3.0) ==32144== by 0x79E52A4: ??? (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796E0E1: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796E4B7: QApplication::QApplication(int&, char**, bool, int) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x7318183: initQtApp(bool) (qt.cpp:104) ==32144== by 0x7318852: plD_init_epspdfqt(PLStream*) (qt.cpp:998) ==32144== by 0x4E55718: plP_init (plcore.c:144) ==32144== by 0x4E5A09B: c_plinit (plcore.c:2340) ==32144== ==32144== Invalid read of size 8 ==32144== at 0xBD8C8E9: xcb_send_request_with_fds64 (xcb_out.c:274) ==32144== by 0xBD8CCE8: xcb_send_request (xcb_out.c:355) ==32144== by 0xBD92DEE: xcb_intern_atom (xproto.c:3206) ==32144== by 0xF207646: Breeze::Helper::createAtom(QString const&) const (breezehelper.cpp:1589) ==32144== by 0xF20773A: Breeze::Helper::init() (breezehelper.cpp:1608) ==32144== by 0xF2078DE: Breeze::Helper::Helper(QByteArray const&) (breezehelper.cpp:51) ==32144== by 0xF2181DD: Breeze::Style::Style() (breezestyle.cpp:160) ==32144== by 0xF225650: Breeze::StylePlugin::create(QString const&) (breezestyleplugin.cpp:38) ==32144== by 0x7C75A32: QStyleFactory::create(QString const&) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796DD3F: QApplication::style() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796DFCC: QApplicationPrivate::initialize() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796E0E9: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== Address 0x71e4a58 is 8 bytes inside a block of size 21,152 free'd ==32144== at 0x4C2ED3A: free (vg_replace_malloc.c:530) ==32144== by 0xAFAD996: XCloseDisplay (in /usr/lib64/libX11.so.6.3.0) ==32144== by 0x79DBDB9: ??? (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796AFD1: QApplication::~QApplication() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796B2E8: QApplication::~QApplication() (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x7318D82: closeQtApp() (qt.cpp:116) ==32144== by 0x4E55972: plP_tidy (plcore.c:234) ==32144== by 0x4E5D802: plGetFam (plctrl.c:2778) ==32144== by 0x731934F: plD_bop_epspdfqt_helper(PLStream*, int) (qt.cpp:1033) ==32144== by 0x4E5590E: plP_bop (plcore.c:211) ==32144== by 0x4E73916: c_plbop (plpage.c:125) ==32144== by 0x1090DB: demo2 (x02c.c:70) ==32144== Block was alloc'd at ==32144== at 0x4C2FA40: calloc (vg_replace_malloc.c:711) ==32144== by 0xBD8B98B: xcb_connect_to_fd (xcb_conn.c:345) ==32144== by 0xBD8F948: xcb_connect_to_display_with_auth_info (xcb_util.c:535) ==32144== by 0xAFCFA39: _XConnectXCB (in /usr/lib64/libX11.so.6.3.0) ==32144== by 0xAFC0771: XOpenDisplay (in /usr/lib64/libX11.so.6.3.0) ==32144== by 0x79E52A4: ??? (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796E0E1: QApplicationPrivate::construct(_XDisplay*, unsigned long, unsigned long) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x796E4B7: QApplication::QApplication(int&, char**, bool, int) (in /usr/lib64/libQtGui.so.4.8.7) ==32144== by 0x7318183: initQtApp(bool) (qt.cpp:104) ==32144== by 0x7318852: plD_init_epspdfqt(PLStream*) (qt.cpp:998) ==32144== by 0x4E55718: plP_init (plcore.c:144) ==32144== by 0x4E5A09B: c_plinit (plcore.c:2340) and much more. See attached. With the valgrind output it seems like libxcb may still be trying to do stuff while the application is terminating? Really not sure where to go from here. Version-Release number of selected component (if applicable): libxcb-1.12-1.fc25.x86_64 How reproducible: Seems a bit racy, but pretty consistent Additional info: http://koji.fedoraproject.org/koji/taskinfo?taskID=16446807
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle. Changing version to '26'.
This message is a reminder that Fedora 26 is nearing its end of life. Approximately 4 (four) weeks from now Fedora will stop maintaining and issuing updates for Fedora 26. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '26'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 26 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete.
Fedora 26 changed to end-of-life (EOL) status on 2018-05-29. Fedora 26 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed.