https://bugs.kde.org/show_bug.cgi?id=516311
Bug ID: 516311
Summary: plasmashell crash due a use-after-free
Classification: Frameworks and Libraries
Product: frameworks-networkmanager-qt
Version First 6.23.0
Reported In:
Platform: NixOS
OS: Linux
Status: REPORTED
Severity: crash
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected]
Target Milestone: ---
Plasmashell frequently crashes on startup for me, resulting in a black screen
and needing a restart.
λ coredumpctl
TIME PID UID GID SIG COREFILE EXE
SIZE
Mon 2026-02-09 15:26:34 EST 1330 1000 1000 SIGSEGV present
/nix/store/1y09br5kqi22blf894i5rd4xjsyx4nki-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Mon 2026-02-09 15:28:42 EST 1331 1000 1000 SIGSEGV present
/nix/store/1y09br5kqi22blf894i5rd4xjsyx4nki-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Mon 2026-02-09 15:36:17 EST 1357 1000 1000 SIGSEGV present
/nix/store/1y09br5kqi22blf894i5rd4xjsyx4nki-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Mon 2026-02-09 15:36:18 EST 1536 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
28.3M
Thu 2026-02-12 07:24:25 EST 1583 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
38.9M
Thu 2026-02-12 07:26:21 EST 1340 1000 1000 SIGSEGV present
/nix/store/1y09br5kqi22blf894i5rd4xjsyx4nki-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Fri 2026-02-13 02:15:58 EST 1486 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
27.1M
Fri 2026-02-13 02:20:30 EST 1499 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
26.6M
Fri 2026-02-13 02:24:26 EST 1486 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
26.9M
Fri 2026-02-13 02:26:21 EST 1489 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
26.5M
Fri 2026-02-13 02:30:11 EST 1490 1000 1000 SIGSEGV present
/nix/store/lbl150k8lvvivkyma5qfama41walml5z-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
26.2M
Fri 2026-02-13 10:51:48 EST 1418 1000 1000 SIGSEGV present
/nix/store/2m6aaqjw1cvjwmx2pm404ssw9f8gv9g0-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
24.7M
Sun 2026-02-15 22:20:51 EST 1506 1000 1000 SIGSEGV present
/nix/store/2m6aaqjw1cvjwmx2pm404ssw9f8gv9g0-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
27.9M
Sun 2026-02-15 22:22:45 EST 1344 1000 1000 SIGSEGV present
/nix/store/7pkdasz0ar64drldgq0cw56vb036da04-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Sun 2026-02-15 22:22:46 EST 1500 1000 1000 SIGSEGV present
/nix/store/2m6aaqjw1cvjwmx2pm404ssw9f8gv9g0-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
24.2M
Sun 2026-02-15 22:24:43 EST 1336 1000 1000 SIGSEGV present
/nix/store/7pkdasz0ar64drldgq0cw56vb036da04-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Sun 2026-02-15 22:24:44 EST 1492 1000 1000 SIGSEGV present
/nix/store/2m6aaqjw1cvjwmx2pm404ssw9f8gv9g0-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
24.3M
Sun 2026-02-15 22:26:38 EST 1325 1000 1000 SIGSEGV present
/nix/store/7pkdasz0ar64drldgq0cw56vb036da04-kwallet-6.22.0/bin/.ksecretd-wrapped
2.4M
Sun 2026-02-15 22:26:38 EST 1484 1000 1000 SIGSEGV present
/nix/store/2m6aaqjw1cvjwmx2pm404ssw9f8gv9g0-plasma-workspace-6.5.5/bin/.plasmashell-wrapped
24.3M
Thu 2026-02-19 01:20:18 EST 1497 1000 1000 SIGSEGV present
/nix/store/qjxd2gpp1l8080yf3nwi2jzrs8nhq68g-plasma-workspace-6.6.0/bin/.plasmashell-wrapped
32.4M
λ coredumpctl gdb 1497
Program terminated with signal SIGSEGV, Segmentation fault.
#0 __pthread_kill_implementation (threadid=281473783787552,
signo=signo@entry=11, no_tid=no_tid@entry=0) at pthread_kill.c:44
(gdb) bt
#0 __pthread_kill_implementation (threadid=281473783787552,
signo=signo@entry=11, no_tid=no_tid@entry=0) at pthread_kill.c:44
#1 0x0000ffffb4505380 in __pthread_kill_internal (threadid=<optimized out>,
signo=11) at pthread_kill.c:89
#2 0x0000ffffb44ac5b8 in __GI_raise (sig=11) at ../sysdeps/posix/raise.c:26
#3 0x0000ffffb88f590c in KCrash::defaultCrashHandler (sig=11) at
/build/kcrash-6.23.0/src/kcrash.cpp:623
#4 <signal handler called>
#5 QArrayDataPointer<char16_t>::QArrayDataPointer (this=0xffffc05605c0,
other=...) at
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/include/QtCore/qarraydatapointer.h:37
#6 QString::QString (this=0xffffc05605c0, other=...) at
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/include/QtCore/qstring.h:1355
#7 QMapData<std::map<QString,
QSharedPointer<NetworkManager::ActiveConnection>, std::less<QString>,
std::allocator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > > > >::keys()
const::{lambda(auto:1 const&)#1}::operator()<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > >(std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > const&) const
(__closure=<synthetic pointer>, v={...}) at
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/include/QtCore/qmap.h:100
#8 std::transform<std::_Rb_tree_const_iterator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > >,
std::back_insert_iterator<QList<QString> >, QMapData<std::map<QString,
QSharedPointer<NetworkManager::ActiveConnection>, std::less<QString>,
std::allocator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > > > >::keys()
const::{lambda(auto:1
const&)#1}>(std::_Rb_tree_const_iterator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > >,
std::_Rb_tree_const_iterator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > >,
std::back_insert_iterator<QList<QString> >, QMapData<std::map<QString,
QSharedPointer<NetworkManager::ActiveConnection>, std::less<QString>,
std::allocator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > > > >::keys()
const::{lambda(auto:1 const&)#1}) (__unary_op=...,
__first=<error reading variable: Cannot access memory at address
0x61006800430072>, __last=..., __result=...) at
/nix/store/zhwzwprgz21jky80mzkdinzmqq4mq6k2-gcc-15.2.0/include/c++/15.2.0/bits/stl_algo.h:4265
#9 QMapData<std::map<QString,
QSharedPointer<NetworkManager::ActiveConnection>, std::less<QString>,
std::allocator<std::pair<QString const,
QSharedPointer<NetworkManager::ActiveConnection> > > > >::keys (this=<optimized
out>) at
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/include/QtCore/qmap.h:102
#10 QMap<QString, QSharedPointer<NetworkManager::ActiveConnection> >::keys
(this=0xffff4f6b4dd0 <QGlobalStatic<QtGlobalStatic::Holder<(anonymous
namespace)::Q_QGS_globalNetworkManager> >::instance()::holder+200>) at
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/include/QtCore/qmap.h:396
#11 NetworkManager::NetworkManagerPrivate::activeConnections
(this=this@entry=0xffff4f6b4d08
<QGlobalStatic<QtGlobalStatic::Holder<(anonymous
namespace)::Q_QGS_globalNetworkManager> >::instance()::holder>) at
/build/networkmanager-qt-6.23.0/src/manager.cpp:977
#12 0x0000ffff4f5323d8 in NetworkManager::activeConnections () at
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/include/QtCore/qglobalstatic.h:58
#13 0x0000ffff700874ec in ConnectionIcon::setStates (this=0xaaab22e11060) at
/build/plasma-nm-6.6.0/libs/connectionicon.cpp:243
#14 0x0000ffffb4ce0f40 in QtPrivate::QSlotObjectBase::call
(this=0xaaab22e18050, r=<optimized out>, a=0xffffc0560820) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qobjectdefs_impl.h:461
#15 doActivate<false> (sender=0xaaab22e056f0, signal_index=0,
argv=0xffffc0560820) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qobject.cpp:4257
#16 0x0000ffffb4cd70e0 in QMetaObject::activate
(sender=sender@entry=0xabab6ce9c550d500, m=m@entry=0xffffb519c1f8
<QObject::staticMetaObject>, local_signal_index=local_signal_index@entry=0,
argv=argv@entry=0xffffc0560820) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qobject.cpp:4317
#17 0x0000ffffb4cd71a0 in QMetaObject::activate<void, QObject*>
(sender=0xabab6ce9c550d500, mo=0xffffb519c1f8 <QObject::staticMetaObject>,
local_signal_index=0, ret=0x0) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qobjectdefs.h:319
#18 QObject::destroyed (this=this@entry=0xaaab22e056f0, _t1=<optimized out>,
_t1@entry=0xaaab22e056f0) at
/build/qtbase-everywhere-src-6.10.1/build/src/corelib/kernel/moc_qobject.cpp:186
#19 0x0000ffffb4cdd1ec in QObject::~QObject (this=0xaaab22e056f0) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qobject.cpp:1024
#20 0x0000ffff4f550250 in NetworkManager::VpnConnection::~VpnConnection
(this=0xaaab22e056f0) at
/build/networkmanager-qt-6.23.0/src/vpnconnection.cpp:68
#21 0x0000ffffb4cd1d40 in QObject::event (this=<optimized out>, e=<optimized
out>) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qobject.cpp:1398
#22 0x0000ffffb7c125cc in QApplicationPrivate::notify_helper (this=<optimized
out>, receiver=0xaaab22e056f0, e=0xaaab22f37b80) at
/build/qtbase-everywhere-src-6.10.1/src/widgets/kernel/qapplication.cpp:3305
#23 0x0000ffffb4c6bc98 in QCoreApplication::notifyInternal2
(receiver=receiver@entry=0xaaab22e056f0, event=event@entry=0xaaab22f37b80) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qcoreapplication.cpp:1109
#24 0x0000ffffb4c6bfd4 in QCoreApplication::sendEvent
(receiver=receiver@entry=0xaaab22e056f0, event=event@entry=0xaaab22f37b80) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qcoreapplication.cpp:1549
#25 0x0000ffffb4c6f6a4 in QCoreApplicationPrivate::sendPostedEvents
(receiver=0x0, event_type=52, data=0xaaab210bb460) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/kernel/qcoreapplication.cpp:1904
#26 0x0000ffffb4e5b78c in operator() (__closure=<optimized out>) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/thread/qthread_unix.cpp:464
#27 (anonymous
namespace)::terminate_on_exception<QThreadPrivate::finish()::<lambda()>
>(struct {...} &&) (t=...) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/thread/qthread_unix.cpp:367
#28 0x0000ffffb4e5bac0 in QThreadPrivate::finish (this=<optimized out>) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/thread/qthread_unix.cpp:448
#29 destroy_current_thread_data (data=<optimized out>) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/thread/qthread_unix.cpp:172
#30 (anonymous
namespace)::QThreadDataDestroyer::EarlyMainThread::~EarlyMainThread
(this=<optimized out>) at
/build/qtbase-everywhere-src-6.10.1/src/corelib/thread/qthread_unix.cpp:232
#31 0x0000ffffb44aee60 in __cxa_finalize (d=0xffffb51b0000) at
cxa_finalize.c:97
#32 0x0000ffffb4bad75c in __do_global_dtors_aux () from
/nix/store/v197cns0dwh1vcimrjlp18rx20174qdb-qtbase-6.10.1/lib/libQt6Core.so.6
#33 0x0000ffffb91d1e68 in _dl_call_fini
(closure_map=closure_map@entry=0xffffb91c7000) at dl-call_fini.c:43
SOFTWARE/OS VERSIONS
Operating System: NixOS 26.05
KDE Plasma Version: 6.6.0
KDE Frameworks Version: 6.23.0
Qt Version: 6.10.1
Kernel Version: 6.18.12 (64-bit)
Graphics Platform: X11
Processors: 10
Memory: 21 GiB of RAM (20.5 GiB usable)
Graphics Processor: virgl
ADDITIONAL INFORMATION
Running inside Qemu on macOS
--
You are receiving this mail because:
You are watching all bug changes.
