https://bugs.kde.org/show_bug.cgi?id=523535
Bug ID: 523535
Summary: Dolphin crashes (SIGSEGV) via Purpose
nextcloudplugin.so — null Accounts::Account*
dereferenced during SignOn auth callback
Classification: Applications
Product: dolphin
Version First unspecified
Reported In:
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Target Milestone: ---
Created attachment 194628
--> https://bugs.kde.org/attachment.cgi?id=194628&action=edit
Trimmed gdb backtrace (crashing thread only) — full crash occurs in
nextcloudplugin.so calling Account::services() on a null pointer
Summary: Dolphin crashes (SIGSEGV) in nextcloudplugin.so — null
Accounts::Account* dereferenced in Account::services() during auth callback
Steps to reproduce:
Add a Nextcloud account via System Settings → Online Accounts
(kaccounts-providers)
Open Dolphin → right-click a file → Share/Send File
Select the Nextcloud account from the list
Observed: Dolphin crashes immediately with SIGSEGV.
Crash backtrace (Thread 1, KCrash Handler):
#6 Accounts::Account::services (this=0x0, serviceType=...) at account.cpp:302
#7 ?? () from /usr/lib/qt6/plugins/kf6/purpose/nextcloudplugin.so
#8 ?? () from libQt6Core.so.6
#9 KJob::finished(KJob*, KJob::QPrivateSignal)
#10 ?? () from libKF6CoreAddons.so.6
#12 SignOn::AuthSession::response(SignOn::SessionData const&)
Analysis: this is null at the point services() is called (account.cpp:302).
nextcloudplugin.so's job-finished slot calls Account::services() without
verifying the Account pointer is still valid, likely a use-after-free or a race
where the account object isn't fully constructed/attached by the time the
SignOn auth response callback fires.
Environment: purpose 6.28.0-1.1, CachyOS (Arch-based), Plasma/KDE Frameworks 6,
kaccounts-integration + kaccounts-providers freshly installed.
--
You are receiving this mail because:
You are watching all bug changes.
