Bug 1844781 - backintime segmentation faults in PyCFunction_Type while closing in Fedora Rawhide [NEEDINFO]
Summary: backintime segmentation faults in PyCFunction_Type while closing in Fedora Ra...
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: backintime
Version: 37
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: hannes
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: PatchNeeded
: 1947817 2143679 2147387 2180265 2214066 2228791 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-06-07 05:57 UTC by Matt Fagnani
Modified: 2023-12-05 20:59 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-12-05 20:59:31 UTC
Type: Bug
Embargoed:
projects.rg: needinfo?


Attachments (Terms of Use)
valgrind log of backintime showing invalid reads when closing (22.81 KB, text/plain)
2020-06-07 05:57 UTC, Matt Fagnani
no flags Details
File: backtrace (129.71 KB, text/plain)
2023-09-01 09:19 UTC, ochal
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Github bit-team backintime issues 1095 0 None open Segmentation fault with python 3.9 2020-08-11 17:52:59 UTC
Github spesmilo electrum issues 6889 0 None open Crash on exit (PyQt, Qt, abnormal termination, quit, segfault, SIGSEGV) 2021-04-18 09:17:51 UTC

Description Matt Fagnani 2020-06-07 05:57:40 UTC
Created attachment 1695766 [details]
valgrind log of backintime showing invalid reads when closing

Description of problem:

backintime GUI has segmentation faulted when I've started and closed it in the Fedora Rawhide KDE Plasma spin live image from 2020-6-3. The crashes happened in PyCFunction_Type in /lib64/libpython3.9.so.1.0 in python3-libs-0:3.9.0~b1-4.fc33.x86_64. I installed the python3.9 debug rpms, but the line number of frame #0 didn't show up. The crashes appeared in coredumpctl. The trace using coredumpctl gdb is the following.

Core was generated by `python3 -Es /usr/share/backintime/qt/app.py'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f20a6756be0 in PyCFunction_Type () from /lib64/libpython3.9.so.1.0
[Current thread is 1 (Thread 0x7f20a6970740 (LWP 11628))]
(gdb) bt
#0  0x00007f20a6756be0 in PyCFunction_Type () from /lib64/libpython3.9.so.1.0
#1  0x00007f2094d07ee5 in cleanup_qobject (sw=0x7f20933c1da0, closure=0x563bc8a78630)
    at ../qpy/QtCore/qpycore_public_api.cpp:41
#2  0x00007f2094e11d50 in sip_api_visit_wrappers (
    visitor=0x7f2094d07ec0 <cleanup_qobject(sipSimpleWrapper*, void*)>, closure=0x563bc8a78630)
    at /usr/src/debug/sip-4.19.22-3.fc33.x86_64/siplib/siplib.c:14290
#3  0x00007f2094d07c30 in cleanup_on_exit () at ../qpy/QtCore/qpycore_init.cpp:37
#4  0x00007f20a653eeac in cfunction_vectorcall_NOARGS (func=<built-in function _qtcore_cleanup>, 
    args=<optimized out>, nargsf=<optimized out>, kwnames=<optimized out>)
    at /usr/src/debug/python3.9-3.9.0~b1-4.fc33.x86_64/Objects/methodobject.c:483
#5  0x00007f20a65fd339 in atexit_callfuncs (module=<optimized out>)
    at /usr/src/debug/python3.9-3.9.0~b1-4.fc33.x86_64/Modules/atexitmodule.c:93
#6  0x00007f20a65d9f4e in call_py_exitfuncs (tstate=0x563bc8328e60)
    at /usr/src/debug/python3.9-3.9.0~b1-4.fc33.x86_64/Python/pylifecycle.c:2372
#7  0x00007f20a65d9bdb in Py_FinalizeEx ()
    at /usr/src/debug/python3.9-3.9.0~b1-4.fc33.x86_64/Python/pylifecycle.c:1366
#8  0x00007f20a65cf6b9 in Py_RunMain ()
    at /usr/src/debug/python3.9-3.9.0~b1-4.fc33.x86_64/Modules/main.c:634
#9  0x00007f20a659d769 in Py_BytesMain (argc=<optimized out>, argv=<optimized out>)
    at /usr/src/debug/python3.9-3.9.0~b1-4.fc33.x86_64/Modules/main.c:686
#10 0x00007f20a67aa152 in __libc_start_main () from /lib64/libc.so.6
#11 0x0000563bc795007e in _start ()

Version-Release number of selected component (if applicable):
backintime-qt-1.2.1-2.fc32.noarch
python3-pyqt5-sip-4.19.22-3.fc33.x86_64
python3-3.9.0~b1-4.fc33.x86_64
python3-qt5-5.14.2-3.fc33.x86_64

How reproducible:
This crash has happened about 10/10 times that I've closed backintime-qt since 2020-6-6. I hadn't seen the crash before then even though I was using backintime regularly.

Steps to Reproduce:
1. Boot the Fedora Rawhide KDE Plasma spin live image Fedora-KDE-Live-x86_64-Rawhide-20200603.n.0.iso from https://koji.fedoraproject.org/koji/buildinfo?buildID=1519720
2. sudo dnf upgrade --refresh
3. sudo dnf install backintime*
4. start Back in Time from the Application Menu
5. select No to the question Back In Time is not configured. Would you like to restore a previous configuration?
6. select Cancel in the Settings screen which closes backintime

Actual results:
backintime segmentation faults in PyCFunction_Type while closing

Expected results:
No crashes would happen.

Additional info:
I ran valgrind --log-file=valgrind-backintime-1.txt python3 -Es /usr/share/backintime/qt/app.py  Six invalid reads starting at sip_api_visit_wrappers (siplib.c:14285) in sip-debugsource-0:4.19.22-3.fc33.x86_64 were shown in the valgrind log. The invalid reads appeared to be use-after-free errors since they involved lines like "Address 0x1accf1d0 is 3,840 bytes inside a block of size 16,496 free'd". sip_api_visit_wrappers is in frame #2 of the crashing thread in gdb, so the problem might be in there. The python 3.9 update might be related.

==14798== Invalid read of size 8
==14798==    at 0x17E7ED31: sip_api_visit_wrappers (siplib.c:14285)
==14798==    by 0x180BAC2F: cleanup_on_exit(_object*, _object*) (qpycore_init.cpp:37)
==14798==    by 0x4B42EAB: cfunction_vectorcall_NOARGS (methodobject.c:483)
==14798==    by 0x4C01338: atexit_callfuncs (atexitmodule.c:93)
==14798==    by 0x4BDDF4D: call_py_exitfuncs (pylifecycle.c:2372)
==14798==    by 0x4BDDBDA: Py_FinalizeEx (pylifecycle.c:1366)
==14798==    by 0x4BD36B8: Py_RunMain (main.c:634)
==14798==    by 0x4BA1768: Py_BytesMain (main.c:686)
==14798==    by 0x488B151: (below main) (in /usr/lib64/libc-2.31.9000.so)
==14798==  Address 0x1accf1d0 is 3,840 bytes inside a block of size 16,496 free'd
==14798==    at 0x483A9F5: free (vg_replace_malloc.c:538)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:127)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:595)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:1922)
==14798==    by 0x4B2BEBA: _PyObject_Free (obmalloc.c:1913)
==14798==    by 0x17E91679: add_aliases (objmap.c:220)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B4D3DF: UnknownInlinedFun (call.c:280)
==14798==    by 0x4B4D3DF: _PyObject_Call (call.c:251)
==14798==    by 0x17E910BD: sipWrapInstance (threads.c:124)
==14798==    by 0x17E8472D: UnknownInlinedFun (siplib.c:13446)
==14798==    by 0x17E8472D: sip_api_convert_from_type (siplib.c:9625)
==14798==    by 0x17E85588: buildObject (siplib.c:2733)
==14798==    by 0x17E85CE9: call_method (siplib.c:2339)
==14798==    by 0x17E85F2C: sip_api_call_method (siplib.c:2395)
==14798==    by 0x180B35E9: sipVH_QtCore_1(PyGILState_STATE, void (*)(_sipSimpleWrapper*, PyGILState_STATE), _sipSimpleWrapper*, _object*, QObject*, QEvent*) (sipQtCorecmodule.cpp:5987)
==14798==  Block was alloc'd at
==14798==    at 0x4839809: malloc (vg_replace_malloc.c:307)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:99)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:572)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1645)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1638)
==14798==    by 0x4B2D2C3: PyMem_Malloc (obmalloc.c:605)
==14798==    by 0x17E7FDFA: sip_api_malloc (siplib.c:2226)
==14798==    by 0x17E91474: UnknownInlinedFun (objmap.c:83)
==14798==    by 0x17E91474: UnknownInlinedFun (objmap.c:343)
==14798==    by 0x17E91474: add_object (objmap.c:314)
==14798==    by 0x17E917FF: sipOMAddObject (objmap.c:162)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B4D3DF: UnknownInlinedFun (call.c:280)
==14798==    by 0x4B4D3DF: _PyObject_Call (call.c:251)
==14798==    by 0x17E910BD: sipWrapInstance (threads.c:124)
==14798==    by 0x17E8472D: UnknownInlinedFun (siplib.c:13446)
==14798==    by 0x17E8472D: sip_api_convert_from_type (siplib.c:9625)
==14798==    by 0x17E85588: buildObject (siplib.c:2733)
==14798==    by 0x17E85CE9: call_method (siplib.c:2339)
==14798== 
==14798== Invalid read of size 8
==14798==    at 0x17E7ED38: sip_api_visit_wrappers (siplib.c:14289)
==14798==    by 0x180BAC2F: cleanup_on_exit(_object*, _object*) (qpycore_init.cpp:37)
==14798==    by 0x4B42EAB: cfunction_vectorcall_NOARGS (methodobject.c:483)
==14798==    by 0x4C01338: atexit_callfuncs (atexitmodule.c:93)
==14798==    by 0x4BDDF4D: call_py_exitfuncs (pylifecycle.c:2372)
==14798==    by 0x4BDDBDA: Py_FinalizeEx (pylifecycle.c:1366)
==14798==    by 0x4BD36B8: Py_RunMain (main.c:634)
==14798==    by 0x4BA1768: Py_BytesMain (main.c:686)
==14798==    by 0x488B151: (below main) (in /usr/lib64/libc-2.31.9000.so)
==14798==  Address 0x1accf1d8 is 3,848 bytes inside a block of size 16,496 free'd
==14798==    at 0x483A9F5: free (vg_replace_malloc.c:538)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:127)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:595)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:1922)
==14798==    by 0x4B2BEBA: _PyObject_Free (obmalloc.c:1913)
==14798==    by 0x17E91679: add_aliases (objmap.c:220)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B4D3DF: UnknownInlinedFun (call.c:280)
==14798==    by 0x4B4D3DF: _PyObject_Call (call.c:251)
==14798==    by 0x17E910BD: sipWrapInstance (threads.c:124)
==14798==    by 0x17E8472D: UnknownInlinedFun (siplib.c:13446)
==14798==    by 0x17E8472D: sip_api_convert_from_type (siplib.c:9625)
==14798==    by 0x17E85588: buildObject (siplib.c:2733)
==14798==    by 0x17E85CE9: call_method (siplib.c:2339)
==14798==    by 0x17E85F2C: sip_api_call_method (siplib.c:2395)
==14798==    by 0x180B35E9: sipVH_QtCore_1(PyGILState_STATE, void (*)(_sipSimpleWrapper*, PyGILState_STATE), _sipSimpleWrapper*, _object*, QObject*, QEvent*) (sipQtCorecmodule.cpp:5987)
==14798==  Block was alloc'd at
==14798==    at 0x4839809: malloc (vg_replace_malloc.c:307)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:99)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:572)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1645)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1638)
==14798==    by 0x4B2D2C3: PyMem_Malloc (obmalloc.c:605)
==14798==    by 0x17E7FDFA: sip_api_malloc (siplib.c:2226)
==14798==    by 0x17E91474: UnknownInlinedFun (objmap.c:83)
==14798==    by 0x17E91474: UnknownInlinedFun (objmap.c:343)
==14798==    by 0x17E91474: add_object (objmap.c:314)
==14798==    by 0x17E917FF: sipOMAddObject (objmap.c:162)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B4D3DF: UnknownInlinedFun (call.c:280)
==14798==    by 0x4B4D3DF: _PyObject_Call (call.c:251)
==14798==    by 0x17E910BD: sipWrapInstance (threads.c:124)
==14798==    by 0x17E8472D: UnknownInlinedFun (siplib.c:13446)
==14798==    by 0x17E8472D: sip_api_convert_from_type (siplib.c:9625)
==14798==    by 0x17E85588: buildObject (siplib.c:2733)
==14798==    by 0x17E85CE9: call_method (siplib.c:2339)
==14798== 
==14798== Invalid read of size 8
==14798==    at 0x17E7E1D4: sip_api_get_address (siplib.c:9141)
==14798==    by 0x180BAEE4: cleanup_qobject(_sipSimpleWrapper*, void*) (qpycore_public_api.cpp:41)
==14798==    by 0x17E7ED4F: sip_api_visit_wrappers (siplib.c:14290)
==14798==    by 0x180BAC2F: cleanup_on_exit(_object*, _object*) (qpycore_init.cpp:37)
==14798==    by 0x4B42EAB: cfunction_vectorcall_NOARGS (methodobject.c:483)
==14798==    by 0x4C01338: atexit_callfuncs (atexitmodule.c:93)
==14798==    by 0x4BDDF4D: call_py_exitfuncs (pylifecycle.c:2372)
==14798==    by 0x4BDDBDA: Py_FinalizeEx (pylifecycle.c:1366)
==14798==    by 0x4BD36B8: Py_RunMain (main.c:634)
==14798==    by 0x4BA1768: Py_BytesMain (main.c:686)
==14798==    by 0x488B151: (below main) (in /usr/lib64/libc-2.31.9000.so)
==14798==  Address 0x13ffff68 is 24 bytes inside a block of size 80 free'd
==14798==    at 0x483A9F5: free (vg_replace_malloc.c:538)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:127)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:595)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:1922)
==14798==    by 0x4B2BEBA: _PyObject_Free (obmalloc.c:1913)
==14798==    by 0x17E91244: remove_object (objmap.c:446)
==14798==    by 0x17E91302: remove_aliases (objmap.c:420)
==14798==    by 0x17E912AB: remove_aliases (objmap.c:402)
==14798==    by 0x17E91879: sipOMRemoveObject (objmap.c:381)
==14798==    by 0x17E8652A: sip_api_instance_destroyed_ex.part.0 (siplib.c:6145)
==14798==    by 0x187785A4: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:350)
==14798==    by 0x187785BC: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:351)
==14798==    by 0x15062779: QObjectPrivate::deleteChildren() (in /usr/lib64/libQt5Core.so.5.14.2)
==14798==    by 0x18CDEAC5: QWidget::~QWidget() (in /usr/lib64/libQt5Widgets.so.5.14.2)
==14798==    by 0x1877454C: sipQDialog::~sipQDialog() (sipQtWidgetsQDialog.cpp:326)
==14798==  Block was alloc'd at
==14798==    at 0x4839809: malloc (vg_replace_malloc.c:307)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:99)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:572)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1645)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1638)
==14798==    by 0x4B2D2C3: PyMem_Malloc (obmalloc.c:605)
==14798==    by 0x17E7FDFA: sip_api_malloc (siplib.c:2226)
==14798==    by 0x17E91621: add_aliases (objmap.c:206)
==14798==    by 0x17E915D4: add_aliases (objmap.c:184)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B3FE2A: _PyObject_MakeTpCall (call.c:191)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:116)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:103)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:127)
==14798==    by 0x4B3F2AD: call_function (ceval.c:5099)
==14798==    by 0x4B38805: _PyEval_EvalFrameDefault (ceval.c:3562)
==14798==    by 0x4B36AAE: UnknownInlinedFun (pycore_ceval.h:40)
==14798==    by 0x4B36AAE: _PyEval_EvalCode (ceval.c:4354)
==14798==    by 0x4B444F5: _PyFunction_Vectorcall (call.c:395)
==14798== 
==14798== Invalid read of size 8
==14798==    at 0x17E7E1E8: sip_api_get_address (siplib.c:9141)
==14798==    by 0x180BAEE4: cleanup_qobject(_sipSimpleWrapper*, void*) (qpycore_public_api.cpp:41)
==14798==    by 0x17E7ED4F: sip_api_visit_wrappers (siplib.c:14290)
==14798==    by 0x180BAC2F: cleanup_on_exit(_object*, _object*) (qpycore_init.cpp:37)
==14798==    by 0x4B42EAB: cfunction_vectorcall_NOARGS (methodobject.c:483)
==14798==    by 0x4C01338: atexit_callfuncs (atexitmodule.c:93)
==14798==    by 0x4BDDF4D: call_py_exitfuncs (pylifecycle.c:2372)
==14798==    by 0x4BDDBDA: Py_FinalizeEx (pylifecycle.c:1366)
==14798==    by 0x4BD36B8: Py_RunMain (main.c:634)
==14798==    by 0x4BA1768: Py_BytesMain (main.c:686)
==14798==    by 0x488B151: (below main) (in /usr/lib64/libc-2.31.9000.so)
==14798==  Address 0x13ffff60 is 16 bytes inside a block of size 80 free'd
==14798==    at 0x483A9F5: free (vg_replace_malloc.c:538)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:127)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:595)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:1922)
==14798==    by 0x4B2BEBA: _PyObject_Free (obmalloc.c:1913)
==14798==    by 0x17E91244: remove_object (objmap.c:446)
==14798==    by 0x17E91302: remove_aliases (objmap.c:420)
==14798==    by 0x17E912AB: remove_aliases (objmap.c:402)
==14798==    by 0x17E91879: sipOMRemoveObject (objmap.c:381)
==14798==    by 0x17E8652A: sip_api_instance_destroyed_ex.part.0 (siplib.c:6145)
==14798==    by 0x187785A4: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:350)
==14798==    by 0x187785BC: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:351)
==14798==    by 0x15062779: QObjectPrivate::deleteChildren() (in /usr/lib64/libQt5Core.so.5.14.2)
==14798==    by 0x18CDEAC5: QWidget::~QWidget() (in /usr/lib64/libQt5Widgets.so.5.14.2)
==14798==    by 0x1877454C: sipQDialog::~sipQDialog() (sipQtWidgetsQDialog.cpp:326)
==14798==  Block was alloc'd at
==14798==    at 0x4839809: malloc (vg_replace_malloc.c:307)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:99)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:572)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1645)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1638)
==14798==    by 0x4B2D2C3: PyMem_Malloc (obmalloc.c:605)
==14798==    by 0x17E7FDFA: sip_api_malloc (siplib.c:2226)
==14798==    by 0x17E91621: add_aliases (objmap.c:206)
==14798==    by 0x17E915D4: add_aliases (objmap.c:184)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B3FE2A: _PyObject_MakeTpCall (call.c:191)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:116)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:103)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:127)
==14798==    by 0x4B3F2AD: call_function (ceval.c:5099)
==14798==    by 0x4B38805: _PyEval_EvalFrameDefault (ceval.c:3562)
==14798==    by 0x4B36AAE: UnknownInlinedFun (pycore_ceval.h:40)
==14798==    by 0x4B36AAE: _PyEval_EvalCode (ceval.c:4354)
==14798==    by 0x4B444F5: _PyFunction_Vectorcall (call.c:395)
==14798== 
==14798== Invalid read of size 4
==14798==    at 0x17E7E244: sip_api_is_owned_by_python (siplib.c:9355)
==14798==    by 0x180BAF06: cleanup_qobject(_sipSimpleWrapper*, void*) (qpycore_public_api.cpp:47)
==14798==    by 0x17E7ED4F: sip_api_visit_wrappers (siplib.c:14290)
==14798==    by 0x180BAC2F: cleanup_on_exit(_object*, _object*) (qpycore_init.cpp:37)
==14798==    by 0x4B42EAB: cfunction_vectorcall_NOARGS (methodobject.c:483)
==14798==    by 0x4C01338: atexit_callfuncs (atexitmodule.c:93)
==14798==    by 0x4BDDF4D: call_py_exitfuncs (pylifecycle.c:2372)
==14798==    by 0x4BDDBDA: Py_FinalizeEx (pylifecycle.c:1366)
==14798==    by 0x4BD36B8: Py_RunMain (main.c:634)
==14798==    by 0x4BA1768: Py_BytesMain (main.c:686)
==14798==    by 0x488B151: (below main) (in /usr/lib64/libc-2.31.9000.so)
==14798==  Address 0x13ffff70 is 32 bytes inside a block of size 80 free'd
==14798==    at 0x483A9F5: free (vg_replace_malloc.c:538)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:127)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:595)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:1922)
==14798==    by 0x4B2BEBA: _PyObject_Free (obmalloc.c:1913)
==14798==    by 0x17E91244: remove_object (objmap.c:446)
==14798==    by 0x17E91302: remove_aliases (objmap.c:420)
==14798==    by 0x17E912AB: remove_aliases (objmap.c:402)
==14798==    by 0x17E91879: sipOMRemoveObject (objmap.c:381)
==14798==    by 0x17E8652A: sip_api_instance_destroyed_ex.part.0 (siplib.c:6145)
==14798==    by 0x187785A4: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:350)
==14798==    by 0x187785BC: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:351)
==14798==    by 0x15062779: QObjectPrivate::deleteChildren() (in /usr/lib64/libQt5Core.so.5.14.2)
==14798==    by 0x18CDEAC5: QWidget::~QWidget() (in /usr/lib64/libQt5Widgets.so.5.14.2)
==14798==    by 0x1877454C: sipQDialog::~sipQDialog() (sipQtWidgetsQDialog.cpp:326)
==14798==  Block was alloc'd at
==14798==    at 0x4839809: malloc (vg_replace_malloc.c:307)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:99)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:572)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1645)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1638)
==14798==    by 0x4B2D2C3: PyMem_Malloc (obmalloc.c:605)
==14798==    by 0x17E7FDFA: sip_api_malloc (siplib.c:2226)
==14798==    by 0x17E91621: add_aliases (objmap.c:206)
==14798==    by 0x17E915D4: add_aliases (objmap.c:184)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B3FE2A: _PyObject_MakeTpCall (call.c:191)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:116)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:103)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:127)
==14798==    by 0x4B3F2AD: call_function (ceval.c:5099)
==14798==    by 0x4B38805: _PyEval_EvalFrameDefault (ceval.c:3562)
==14798==    by 0x4B36AAE: UnknownInlinedFun (pycore_ceval.h:40)
==14798==    by 0x4B36AAE: _PyEval_EvalCode (ceval.c:4354)
==14798==    by 0x4B444F5: _PyFunction_Vectorcall (call.c:395)
==14798== 
==14798== Invalid read of size 8
==14798==    at 0x17E7ED50: sip_api_visit_wrappers (siplib.c:14289)
==14798==    by 0x180BAC2F: cleanup_on_exit(_object*, _object*) (qpycore_init.cpp:37)
==14798==    by 0x4B42EAB: cfunction_vectorcall_NOARGS (methodobject.c:483)
==14798==    by 0x4C01338: atexit_callfuncs (atexitmodule.c:93)
==14798==    by 0x4BDDF4D: call_py_exitfuncs (pylifecycle.c:2372)
==14798==    by 0x4BDDBDA: Py_FinalizeEx (pylifecycle.c:1366)
==14798==    by 0x4BD36B8: Py_RunMain (main.c:634)
==14798==    by 0x4BA1768: Py_BytesMain (main.c:686)
==14798==    by 0x488B151: (below main) (in /usr/lib64/libc-2.31.9000.so)
==14798==  Address 0x13ffff98 is 72 bytes inside a block of size 80 free'd
==14798==    at 0x483A9F5: free (vg_replace_malloc.c:538)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:127)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:595)
==14798==    by 0x4B2BEBA: UnknownInlinedFun (obmalloc.c:1922)
==14798==    by 0x4B2BEBA: _PyObject_Free (obmalloc.c:1913)
==14798==    by 0x17E91244: remove_object (objmap.c:446)
==14798==    by 0x17E91302: remove_aliases (objmap.c:420)
==14798==    by 0x17E912AB: remove_aliases (objmap.c:402)
==14798==    by 0x17E91879: sipOMRemoveObject (objmap.c:381)
==14798==    by 0x17E8652A: sip_api_instance_destroyed_ex.part.0 (siplib.c:6145)
==14798==    by 0x187785A4: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:350)
==14798==    by 0x187785BC: sipQDialogButtonBox::~sipQDialogButtonBox() (sipQtWidgetsQDialogButtonBox.cpp:351)
==14798==    by 0x15062779: QObjectPrivate::deleteChildren() (in /usr/lib64/libQt5Core.so.5.14.2)
==14798==    by 0x18CDEAC5: QWidget::~QWidget() (in /usr/lib64/libQt5Widgets.so.5.14.2)
==14798==    by 0x1877454C: sipQDialog::~sipQDialog() (sipQtWidgetsQDialog.cpp:326)
==14798==  Block was alloc'd at
==14798==    at 0x4839809: malloc (vg_replace_malloc.c:307)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:99)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:572)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1645)
==14798==    by 0x4B2D2C3: UnknownInlinedFun (obmalloc.c:1638)
==14798==    by 0x4B2D2C3: PyMem_Malloc (obmalloc.c:605)
==14798==    by 0x17E7FDFA: sip_api_malloc (siplib.c:2226)
==14798==    by 0x17E91621: add_aliases (objmap.c:206)
==14798==    by 0x17E915D4: add_aliases (objmap.c:184)
==14798==    by 0x17E8F4A9: sipSimpleWrapper_init (siplib.c:10678)
==14798==    by 0x4B4000A: type_call (typeobject.c:1029)
==14798==    by 0x4B3FE2A: _PyObject_MakeTpCall (call.c:191)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:116)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:103)
==14798==    by 0x4B3F2AD: UnknownInlinedFun (abstract.h:127)
==14798==    by 0x4B3F2AD: call_function (ceval.c:5099)
==14798==    by 0x4B38805: _PyEval_EvalFrameDefault (ceval.c:3562)
==14798==    by 0x4B36AAE: UnknownInlinedFun (pycore_ceval.h:40)
==14798==    by 0x4B36AAE: _PyEval_EvalCode (ceval.c:4354)
==14798==    by 0x4B444F5: _PyFunction_Vectorcall (call.c:395)
==14798== 

I'm attaching the full valgrind log.

Comment 1 hannes 2020-06-10 11:40:48 UTC
Could it be that this is related to the python 3.9 rebuild and this issue might be transitory?

Comment 2 Matt Fagnani 2020-06-10 15:15:38 UTC
(In reply to hannes from comment #1)
> Could it be that this is related to the python 3.9 rebuild and this issue
> might be transitory?

This crash started appearing in coredumpctl after an update including gdb-9.1-8.fc33 which reenabled python support https://koji.fedoraproject.org/koji/buildinfo?buildID=1521589 The crash certainly might be related to python 3.9 as I mentioned. python3-pyqt5-sip in particular looks like it might be where the root of the problem is. This report could be reassigned to sip or python3 if appropriate. The crash is still happening sometimes for me. Whether the crash is transitory remains to be seen. Thanks.

Comment 3 Ben Cotton 2020-08-11 13:36:16 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 33 development cycle.
Changing version to 33.

Comment 4 hannes 2021-04-18 08:47:34 UTC
I reported this bug upstream [1], but unfortunately upstream development seemed to almost be stopped.
[1] https://github.com/bit-team/backintime/issues/1095

Comment 5 hannes 2021-04-18 08:48:07 UTC
*** Bug 1947817 has been marked as a duplicate of this bug. ***

Comment 6 Raphael Groner 2021-04-18 09:17:55 UTC
Hi Johannes, thanks for taking this to upstream. A lot of others reported similar crashes independently of operating system or project, obviously related to PyQt or Qt.
Why do you think development is stopped? 
Maybe see https://github.com/spesmilo/electrum/issues/6889#issuecomment-812897729 for some related commits regarding Qt.

Comment 7 hannes 2021-04-18 15:44:57 UTC
Well, as before the 1.2.1 release, there's now a big heap of bugs piling up and nothing gets taken care of. The main dev is busy with real life and there's no sustainable development model at the moment.
I don't blame anyone, because I am in the same situation with my packages, but it's apparent that there's not a lot of development happening at the moment.

https://github.com/bit-team/backintime/issues/1114

Comment 8 Raphael Groner 2021-04-18 16:41:25 UTC
Thanks for the hint about upstream nearest death, although too bad. Maybe it's time to look for alternatives, e.g. borgbackup with vorta.

Comment 9 Raphael Groner 2021-04-18 16:44:54 UTC
Migration to borg seems made easy with help from borg-import: https://github.com/borgbackup/borg-import

Comment 10 Matt Fagnani 2021-09-11 19:40:57 UTC
I've seen backintime-qt 1.3.1-3.fc35 crash sometimes when closing in the same way in Plasma 5.22.5 on Wayland in a F35 KDE Plasma installation, so I'm changing the version to 35. The versions of the other packages involved are python3.10-3.10.0~rc2-1.fc35, python3-pyqt5-sip-12.9.0-2.fc35, python3-qt5-5.15.0-13.fc35, qt5-qtbase-5.15.2-22.fc35. gdb was denied reading renderD128 a few times after the crash as happened after other graphical programs crashed https://bugzilla.redhat.com/show_bug.cgi?id=1896648

Core was generated by `python3 -Es /usr/share/backintime/qt/app.py'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007fab8a8904c0 in PyCFunction_Type () from /lib64/libpython3.10.so.1.0
[Current thread is 1 (Thread 0x7fab8a8bf740 (LWP 5832))]
(gdb) bt
#0  0x00007fab8a8904c0 in PyCFunction_Type () from /lib64/libpython3.10.so.1.0
#1  0x00007fab788440eb in cleanup_qobject (sw=0x7fab681b32d0, closure=0x559b7c0361e0)
    at ../../qpy/QtCore/qpycore_public_api.cpp:41
#2  0x00007fab78959330 in sip_api_visit_wrappers (
    visitor=0x7fab788440d0 <cleanup_qobject(sipSimpleWrapper*, void*)>, closure=0x559b7c0361e0)
    at /usr/src/debug/python-pyqt5-sip-12.9.0-2.fc35.x86_64/siplib.c:13280
#3  0x00007fab78844051 in pyqt5_cleanup_qobjects () at ../../qpy/QtCore/qpycore_public_api.cpp:78
#4  cleanup_on_exit () at ../../qpy/QtCore/qpycore_init.cpp:37
#5  0x00007fab8a66f0e1 in cfunction_vectorcall_NOARGS (func=<built-in function _qtcore_cleanup>, 
    args=<optimized out>, nargsf=<optimized out>, kwnames=<optimized out>)
    at /usr/src/debug/python3.10-3.10.0~rc2-1.fc35.x86_64/Objects/methodobject.c:489
#6  0x00007fab8a70d188 in atexit_callfuncs (state=0x559b7b95a980)
    at /usr/src/debug/python3.10-3.10.0~rc2-1.fc35.x86_64/Modules/atexitmodule.c:96
#7  0x00007fab8a70ccdf in _PyAtExit_Call (interp=<optimized out>)
    at /usr/src/debug/python3.10-3.10.0~rc2-1.fc35.x86_64/Modules/atexitmodule.c:115
#8  Py_FinalizeEx () at /usr/src/debug/python3.10-3.10.0~rc2-1.fc35.x86_64/Python/pylifecycle.c:1731
#9  0x00007fab8a6ff384 in Py_RunMain ()
    at /usr/src/debug/python3.10-3.10.0~rc2-1.fc35.x86_64/Modules/main.c:668
#10 0x00007fab8a6cdd9d in Py_BytesMain (argc=<optimized out>, argv=<optimized out>)
    at /usr/src/debug/python3.10-3.10.0~rc2-1.fc35.x86_64/Modules/main.c:720
#11 0x00007fab8a377560 in __libc_start_call_main (main=main@entry=0x559b7a29e160 <main>, 
    argc=argc@entry=3, argv=argv@entry=0x7ffdd99be678) at ../sysdeps/nptl/libc_start_call_main.h:58
#12 0x00007fab8a37760c in __libc_start_main_impl (main=0x559b7a29e160 <main>, argc=3, 
    argv=0x7ffdd99be678, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, 
--Type <RET> for more, q to quit, c to continue without paging--
    stack_end=0x7ffdd99be668) at ../csu/libc-start.c:409
#13 0x0000559b7a29e095 in _start ()

Comment 11 Christian Buhtz 2022-09-04 13:36:11 UTC
Upstream becomes alive again and wasn't dead already. ;) I'm one of the new forming maintainer team.

This seems to be a RedHat ticket system. So why you report something about Fedora?

The question here is if that problem ocured because of an update of backintime or of a depending component. Can you add some information's about that?

Comment 12 Matt Fagnani 2022-09-05 01:54:08 UTC
(In reply to Christian Buhtz from comment #11)
> Upstream becomes alive again and wasn't dead already. ;) I'm one of the new
> forming maintainer team.
> 
> This seems to be a RedHat ticket system. So why you report something about
> Fedora?
> 
> The question here is if that problem ocured because of an update of
> backintime or of a depending component. Can you add some information's about
> that?

Fedora problems are normally reported on Red Hat Bugzilla since Fedora is supported by Red Hat. Fedora is upstream to Red Hat Enterprise Linux.

This crash started appearing in coredumpctl after an update including gdb-9.1-8.fc33 which reenabled python support as I mentioned in comment 2. I don't think gdb could be the cause of the problem. gdb not having python support enabled just might've made the backintime crashes not appear in coredumpctl. The crash might be related to some change in Python 3.9.0~b1 as I mentioned. There were new python3.9 builds in the weeks before I started to see this crash on 2020-6-6 https://koji.fedoraproject.org/koji/buildinfo?buildID=1517461 python3-pyqt5-sip might be where the root of the problem is given the traces, and there were some rebuilds of sip in the weeks before the crashes started https://koji.fedoraproject.org/koji/buildinfo?buildID=1510329 There weren't any new versions of backintime in Fedora for several months before I first noticed the crashes https://koji.fedoraproject.org/koji/packageinfo?packageID=8257 

backintime-qt-1.3.2-1 crashed in sip_api_get_address when closing in Fedora 36 with Python 3.10.5 on 2022-6-24 which showed more details at the top of the stack than what I initially reported. The crash only happened some of the times I closed backintime, so a race condition might be involved.

Core was generated by `python3 -Es /usr/share/backintime/qt/app.py'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f4195b3b892 in sip_api_get_address (w=0x7f4163705f70)
    at /usr/src/debug/python-pyqt5-sip-12.9.0-3.fc36.x86_64/siplib.c:8572
8572        return (w->access_func != NULL) ? w->access_func(w, GuardedPointer) : w->data;
[Current thread is 1 (Thread 0x7f41a7a9e740 (LWP 2302))]
(gdb) p w
$1 = (sipSimpleWrapper *) 0x7f4163705f70
(gdb) p w->data
$2 = (void *) 0x10
(gdb) p w->access_func
$3 = (sipAccessFunc) 0x35d3530341b040f5
(gdb) bt
#0  0x00007f4195b3b892 in sip_api_get_address (w=0x7f4163705f70)
    at /usr/src/debug/python-pyqt5-sip-12.9.0-3.fc36.x86_64/siplib.c:8572
#1  0x00007f4195a0fc1b in cleanup_qobject (sw=0x7f4163705f70, closure=0x55dcee5ead70)
    at ../../qpy/QtCore/qpycore_public_api.cpp:41
#2  0x00007f4195b4af90 in sip_api_visit_wrappers (
    visitor=0x7f4195a0fc00 <cleanup_qobject(sipSimpleWrapper*, void*)>, closure=0x55dcee5ead70)
    at /usr/src/debug/python-pyqt5-sip-12.9.0-3.fc36.x86_64/siplib.c:13280
#3  0x00007f4195a0fb7f in pyqt5_cleanup_qobjects () at ../../qpy/QtCore/qpycore_public_api.cpp:78
#4  cleanup_on_exit () at ../../qpy/QtCore/qpycore_init.cpp:41
#5  0x00007f41a771e53e in cfunction_vectorcall_NOARGS (func=<built-in function _qtcore_cleanup>, 
    args=<optimized out>, nargsf=<optimized out>, kwnames=<optimized out>)
    at /usr/src/debug/python3.10-3.10.5-2.fc36.x86_64/Objects/methodobject.c:489
#6  0x00007f41a77bf054 in atexit_callfuncs (state=0x55dcedf75980)
    at /usr/src/debug/python3.10-3.10.5-2.fc36.x86_64/Modules/atexitmodule.c:98
#7  0x00007f41a77bed72 in _PyAtExit_Call (interp=<optimized out>)
    at /usr/src/debug/python3.10-3.10.5-2.fc36.x86_64/Modules/atexitmodule.c:118
#8  Py_FinalizeEx () at /usr/src/debug/python3.10-3.10.5-2.fc36.x86_64/Python/pylifecycle.c:1731
#9  0x00007f41a77b12f3 in Py_RunMain ()
    at /usr/src/debug/python3.10-3.10.5-2.fc36.x86_64/Modules/main.c:668
#10 0x00007f41a777db5b in Py_BytesMain (argc=<optimized out>, argv=<optimized out>)
    at /usr/src/debug/python3.10-3.10.5-2.fc36.x86_64/Modules/main.c:720
#11 0x00007f41a7229550 in __libc_start_call_main (main=main@entry=0x55dcedf44160 <main>, 
    argc=argc@entry=3, argv=argv@entry=0x7ffda8746a18) at ../sysdeps/nptl/libc_start_call_main.h:58
#12 0x00007f41a7229609 in __libc_start_main_impl (main=0x55dcedf44160 <main>, argc=3, 
--Type <RET> for more, q to quit, c to continue without paging--c
    argv=0x7ffda8746a18, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffda8746a08) at ../csu/libc-start.c:389
#13 0x000055dcedf44095 in _start ()

I reproduced the crash with backintime-qt 1.3.2-2.fc37 in a Fedora 37 KDE Plasma installation with python 3.11.0~rc1-2.fc37 today.

Core was generated by `python3 -Es /usr/share/backintime/qt/app.py'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f9bc94f0d80 in PyCFunction_Type () from /lib64/libpython3.11.so.1.0
[Current thread is 1 (Thread 0x7f9bc9577740 (LWP 5377))]
(gdb) bt
#0  0x00007f9bc94f0d80 in PyCFunction_Type () at /lib64/libpython3.11.so.1.0
#1  0x00007f9bb7413efb in cleanup_qobject(sipSimpleWrapper*, void*)
    (sw=0x7f9b92846600, closure=0x55e8b3418150) at ../../qpy/QtCore/qpycore_public_api.cpp:41
#2  0x00007f9bb75c2310 in sip_api_visit_wrappers
    (visitor=0x7f9bb7413ee0 <cleanup_qobject(sipSimpleWrapper*, void*)>, closure=0x55e8b3418150)
    at /usr/src/debug/python-pyqt5-sip-12.11.0-2.fc37.x86_64/siplib.c:13317
#3  0x00007f9bb7413e5f in pyqt5_cleanup_qobjects() () at ../../qpy/QtCore/qpycore_public_api.cpp:78
#4  cleanup_on_exit(PyObject*, PyObject*) () at ../../qpy/QtCore/qpycore_init.cpp:41
#5  0x00007f9bc91bcb59 in cfunction_vectorcall_NOARGS
    (func=0x7f9bbb522fc0, args=<optimized out>, nargsf=<optimized out>, kwnames=<optimized out>)
    at /usr/src/debug/python3.11-3.11.0~rc1-2.fc37.x86_64/Include/cpython/methodobject.h:52
#6  0x00007f9bc9276fc8 in atexit_callfuncs (state=0x7f9bc95079e8 <_PyRuntime+62472>)
    at /usr/src/debug/python3.11-3.11.0~rc1-2.fc37.x86_64/Modules/atexitmodule.c:98
#7  0x00007f9bc9266322 in _PyAtExit_Call (interp=<optimized out>)
    at /usr/src/debug/python3.11-3.11.0~rc1-2.fc37.x86_64/Modules/atexitmodule.c:118
#8  Py_FinalizeEx () at /usr/src/debug/python3.11-3.11.0~rc1-2.fc37.x86_64/Python/pylifecycle.c:1777
#9  0x00007f9bc9273379 in Py_RunMain ()
    at /usr/src/debug/python3.11-3.11.0~rc1-2.fc37.x86_64/Modules/main.c:682
#10 0x00007f9bc923919b in Py_BytesMain (argc=<optimized out>, argv=<optimized out>)
    at /usr/src/debug/python3.11-3.11.0~rc1-2.fc37.x86_64/Modules/main.c:734
#11 0x00007f9bc959d550 in __libc_start_call_main
     (main=main@entry=0x55e8b196c160 <main>, argc=argc@entry=3, argv=argv@entry=0x7ffca81d6d38)
--Type <RET> for more, q to quit, c to continue without paging--
    at ../sysdeps/nptl/libc_start_call_main.h:58
#12 0x00007f9bc959d609 in __libc_start_main_impl
     (main=0x55e8b196c160 <main>, argc=3, argv=0x7ffca81d6d38, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7ffca81d6d28) at ../csu/libc-start.c:381
#13 0x000055e8b196c095 in _start ()

Comment 13 Christian Buhtz 2022-09-05 07:43:56 UTC
Dear Matt,

thanks for the reply and explanation. I should have looked into distro-watch myself.

I'm definitely  not an expert here. My "hope" was that this problem is not caused by BackInTime itself because there wasn't a release in the past months. ;) But I also see we can't ignore that on the BackInTime side.

As a high experienced maintainer do you have any advice how we could go further here? ;)

The maintainer team of BackInTime is still forming. This will take some time but we have some expertise in the team that could take a closer look to that problem. How serious do you think this problem is?

Comment 14 Matt Fagnani 2022-09-05 16:48:56 UTC
(In reply to Christian Buhtz from comment #13)
> Dear Matt,
> 
> thanks for the reply and explanation. I should have looked into distro-watch
> myself.
> 
> I'm definitely  not an expert here. My "hope" was that this problem is not
> caused by BackInTime itself because there wasn't a release in the past
> months. ;) But I also see we can't ignore that on the BackInTime side.
> 
> As a high experienced maintainer do you have any advice how we could go
> further here? ;)
> 
> The maintainer team of BackInTime is still forming. This will take some time
> but we have some expertise in the team that could take a closer look to that
> problem. How serious do you think this problem is?

I'm not a maintainer just the reporter. This problem could be reported to the maintainers of python-pyqt5-sip, python3-qt5, or python. This report could be reassigned to one of those packages though I'm unsure which would be most appropriate. I'd say the problem is of medium severity at least.

A similar trace was reported for electrum when closing at https://github.com/spesmilo/electrum/issues/6889#issuecomment-812776695 There's documentation for PyQt on crashes on exit which might be relevant to this problem at https://www.riverbankcomputing.com/static/Docs/PyQt5/gotchas.html#crashes-on-exit Based on that documentation, the order in which the Qt objects QObjects are destroyed on exit is random to some extent. If the memory for a Qt object was freed before it was used by functions in python-pyqt5-sip like sip_api_get_address in my trace from Fedora 36 from comment 12 or those in the valgrind invalid reads and writes in my original report, then this type of crash might be the result. The backintime maintainers could look at whether the order in which its QObjects are destroyed when closing could be changed somehow to avoid this problem.

Comment 15 hannes 2023-01-17 06:26:19 UTC
*** Bug 2143679 has been marked as a duplicate of this bug. ***

Comment 16 hannes 2023-01-17 06:26:34 UTC
*** Bug 2147387 has been marked as a duplicate of this bug. ***

Comment 17 hannes 2023-06-18 07:35:10 UTC
*** Bug 2214066 has been marked as a duplicate of this bug. ***

Comment 18 hannes 2023-08-03 10:47:53 UTC
*** Bug 2228791 has been marked as a duplicate of this bug. ***

Comment 19 ochal 2023-09-01 09:19:30 UTC
Happened post backup when closing the app


reporter:       libreport-2.17.11
type:           CCpp
reason:         python3.11 killed by SIGSEGV
journald_cursor: s=2abe7920a38d4c308ad1c50c556572e8;i=2741fb;b=a95b7260e619477e891170d90ac218fd;m=1c7a4c5ba;t=604486a8b7582;x=409212bcb45feb9
executable:     /usr/bin/python3.11
cmdline:        python3 -Es /usr/share/backintime/qt/app.py
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/org.gnome.Shell
rootdir:        /
uid:            1000
kernel:         6.4.12-200.fc38.x86_64
package:        backintime-qt-1.3.3-2.fc38
runlevel:       N 5
backtrace_rating: 3
crash_function: PyCFunction_Type
comment:        Happened post backup when closing the app

Comment 20 ochal 2023-09-01 09:19:32 UTC
Created attachment 1986530 [details]
File: backtrace

Comment 21 m7t24zklr 2023-09-03 17:55:58 UTC
1. target dir of first profile is not available
2. select different profile (target is a mounted loopback-dev)
3. delete an old backup (one is still left)
4. start backup
5. repeat from 2.
6. close window of BackInTime (I do not remember if I unmounted the target dirs before exiting BackInTime)


reporter:       libreport-2.17.11
type:           CCpp
reason:         python3.11 killed by SIGSEGV
journald_cursor: s=9a28faaec741402688dd95fc18992f9f;i=7ac9d3;b=c71210acf7124ecba62b58e0da94c18f;m=18572f2e2;t=604628892bb16;x=e9a202a55662bff1
executable:     /usr/bin/python3.11
cmdline:        python3 -Es /usr/share/backintime/qt/app.py
cgroup:         0::/user.slice/user-1000.slice/user/session.slice/plasma-plasmashell.service
rootdir:        /
uid:            0
kernel:         6.4.12-200.fc38.x86_64
package:        backintime-qt-1.3.3-2.fc38
runlevel:       N 5
backtrace_rating: 3
crash_function: PyCFunction_Type

Comment 22 Raphael Groner 2023-09-09 16:02:11 UTC
See comments 6 to 9 for recommendation of borgbackup. There's script borg-import able to migrate from backintime config.

Comment 23 hannes 2023-09-09 17:26:29 UTC
What's the needinfo for? The issue is somewhere in Qt and we were not able to properly find the cause for it. 
It also is mostly harmless, since it only happens while closing the program.

Comment 24 hannes 2023-10-21 07:43:18 UTC
*** Bug 2180265 has been marked as a duplicate of this bug. ***

Comment 25 Aoife Moloney 2023-11-23 00:03:22 UTC
This message is a reminder that Fedora Linux 37 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 37 on 2023-12-05.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '37'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 37 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 26 Aoife Moloney 2023-12-05 20:59:31 UTC
Fedora Linux 37 entered end-of-life (EOL) status on None.

Fedora Linux 37 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.