[kde] [Bug 392497] kdenlive crashing in frei0r scurves with double free

[Christoph Feck]

https://bugs.kde.org/show_bug.cgi?id=392497

Christoph Feck  changed:

   What|Removed |Added

 Resolution|FIXED   |UPSTREAM

--- Comment #4 from Christoph Feck  ---
Just in case you are going to report this upstream and need the debug
information: Your original backtrace said:

updateCsplineMap () at /usr/lib64/frei0r-1/curves.so

This looks like a frei0r plugin, which might have a separate debug information
package.

-- 
You are receiving this mail because:
You are watching all bug changes.

[kde] [Bug 392497] kdenlive crashing in frei0r scurves with double free

[Perry Harrington]

https://bugs.kde.org/show_bug.cgi?id=392497

--- Comment #3 from Perry Harrington  ---
Ok, just nuked ALL of my KDE configs and kdenlive works again.

Now I'll try putting my kdenlive config back.

Thanks for tolerating me!

-- 
You are receiving this mail because:
You are watching all bug changes.

[kde] [Bug 392497] kdenlive crashing in frei0r scurves with double free

[Perry Harrington]

https://bugs.kde.org/show_bug.cgi?id=392497

Perry Harrington  changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|UNCONFIRMED |RESOLVED

--- Comment #2 from Perry Harrington  ---
OK, this is all really goofy.

I tried deleting all the kdenlive settings, because this looked like a settings
issue, that didn't work.

I created a new unix user and ran kdenlive under that user without any
problems.

Soo, something is borked with my environment for my normal user.

Doesn't look like an actual bug.

Sorry.

-- 
You are receiving this mail because:
You are watching all bug changes.

[kde] [Bug 392497] kdenlive crashing in frei0r scurves with double free

[Perry Harrington]

https://bugs.kde.org/show_bug.cgi?id=392497

--- Comment #1 from Perry Harrington  ---
I installed debuginfos for everything (like 1.6GB worth!) and ran it in GDB,
this is the backtrace:

free(): corrupted unsorted chunks

Thread 35 "kdenlive" received signal SIGABRT, Aborted.
[Switching to Thread 0x7fff2c9c9700 (LWP 24827)]
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51  }
Missing separate debuginfos, use: dnf debuginfo-install
ffmpeg-libs-3.4.2-1.fc27.x86_64 kvazaar-libs-1.2.0-1.fc27.x86_64
libavdevice-3.4.2-1.fc27.x86_64 libfdk-aac-0.1.5-7.fc27.x86_64
librtmp-2.4-8.20151223gitfa8646d.fc27.x86_64 openh264-libs-1.7.0-1.fc27.x86_64
x264-libs-0.152-13.20171224gite9a5903.fc27.x86_64 x265-libs-2.6-1.fc27.x86_64
(gdb) bt
#0  0x7fffeba51660 in __GI_raise (sig=sig@entry=6) at
../sysdeps/unix/sysv/linux/raise.c:51
#1  0x7fffeba52c41 in __GI_abort () at abort.c:79
#2  0x7fffeba93f17 in __libc_message (action=action@entry=do_abort,
fmt=fmt@entry=0x7fffebb99677 "%s\n")
at ../sysdeps/posix/libc_fatal.c:181
#3  0x7fffeba9a21a in malloc_printerr (str=str@entry=0x7fffebb9b2c8
"free(): corrupted unsorted chunks") at malloc.c:5368
#4  0x7fffeba9c258 in _int_free (av=0x7fff1420, p=0x7ffeec0c30a0,
have_lock=) at malloc.c:4325
#5  0x7fff3c455bec in updateCsplineMap (instance=0x7fff23058480) at
filter/curves/curves.c:763
#6  0x7fffa03fe17a in process_frei0r_item
(service=service@entry=0x5a43a9e0, position=position@entry=228,
time=7.5996, prop=prop@entry=0x5a43a9e0,
this=this@entry=0x7fff0e847700, image=image@entry=0x7fff2c9c8a48,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44) at
frei0r_helper.c:119
#7  0x7fffa03fdb8f in filter_get_image (this=this@entry=0x7fff0e847700,
image=image@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at filter_frei0r.c:39
#8  0x76f5d72f in mlt_frame_get_image (self=self@entry=0x7fff0e847700,
buffer=buffer@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at mlt_frame.c:585
#9  0x7fffa03fdb30 in filter_get_image (this=this@entry=0x7fff0e847700,
image=image@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at filter_frei0r.c:32
#10 0x76f5d72f in mlt_frame_get_image (self=self@entry=0x7fff0e847700,
buffer=buffer@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at mlt_frame.c:585
#11 0x7fffa03fdb30 in filter_get_image (this=this@entry=0x7fff0e847700,
image=image@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at filter_frei0r.c:32
#12 0x76f5d72f in mlt_frame_get_image (self=self@entry=0x7fff0e847700,
buffer=buffer@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at mlt_frame.c:585
#13 0x7fffa03fdb30 in filter_get_image (this=this@entry=0x7fff0e847700,
image=image@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=1)
at filter_frei0r.c:32
#14 0x76f5d72f in mlt_frame_get_image (self=self@entry=0x7fff0e847700,
buffer=buffer@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=1)
at mlt_frame.c:585
#15 0x7fff63b2197e in filter_get_image (frame=frame@entry=0x7fff0e847700,
image=image@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=1, writable@entry=0)
at filter_lift_gamma_gain.c:174
#16 0x76f5d72f in mlt_frame_get_image (self=self@entry=0x7fff0e847700,
buffer=buffer@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
at mlt_frame.c:585
#17 0x7fffa03fdb30 in filter_get_image (this=this@entry=0x7fff0e847700,
image=image@entry=0x7fff2c9c8a48, format=format@entry=0x7fff2c9c8cac,
width=width@entry=0x7fff2c9c8a40, height=height@entry=0x7fff2c9c8a44,
writable=writable@entry=0)
---Type  to continue, or q  to quit---q
 at filter_frei0r.c:32Quit

And the stack frames:

(gdb) up
#1  0x7fffeba52c41 in __GI_abort () at abort.c:79
79raise (SIGABRT);
(gdb) up
#2  0x7fffeba93f17 in __libc_message (action=action@entry=do_abort,
fmt=fmt@entry=0x7fffebb99677 "%s\n")