[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Matt Fagnani changed: What|Removed |Added Status|NEEDSINFO |RESOLVED Resolution|WAITINGFORINFO |FIXED --- Comment #16 from Matt Fagnani --- (In reply to Aleix Pol from comment #14) > Can you still reproduce this? A bunch of things have been fixed since. > > This could also be related, although it wouldn't be easy to backport since > RHI is involved. > https://codereview.qt-project.org/c/qt/qtwayland/+/371043 I haven't seen plasmashell crash with this trace in Plasma on Wayland in many months at least. I didn't see any crash when I repeatedly clicked to open and close the Application Menu at the lower-left of the screen many times today in Plasma 5.23.4 on Wayland with KF 5.90.0, Qt 5.15.2 in Fedora 35. I guess this problem was fixed at some point. I'll mark it as fixed. Feel free to reopen it if someone else sees this again. Thanks. -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Nate Graham changed: What|Removed |Added Severity|normal |crash Resolution|--- |WAITINGFORINFO Status|CONFIRMED |NEEDSINFO --- Comment #15 from Nate Graham --- . -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Aleix Pol changed: What|Removed |Added CC||aleix...@kde.org --- Comment #14 from Aleix Pol --- Can you still reproduce this? A bunch of things have been fixed since. This could also be related, although it wouldn't be easy to backport since RHI is involved. https://codereview.qt-project.org/c/qt/qtwayland/+/371043 -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Nate Graham changed: What|Removed |Added Component|generic-wayland |generic-crash Keywords||wayland -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 --- Comment #13 from Nate Graham --- *** Bug 410290 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Patrick Silva changed: What|Removed |Added CC||bugsefor...@gmx.com -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Nate Graham changed: What|Removed |Added CC||notux...@gmail.com --- Comment #12 from Nate Graham --- *** Bug 398533 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 --- Comment #11 from Willyanto --- Created attachment 133833 --> https://bugs.kde.org/attachment.cgi?id=133833=edit New crash information added by DrKonqi plasmashell (5.20.3) using Qt 5.15.1 - What I was doing when the application crashed: I was browsing the web using Firefox (using XWayland) - Unusual behavior I noticed: The rendered web page looks like in minimized Firefox window but the the actual Firefox window size is maximized -- Backtrace (Reduced): #4 0x7fcd76a09ca5 in wl_proxy_set_queue (proxy=0x0, queue=0x5652cbbef520) at src/wayland-client.c:2173 #5 0x7fcd658dbf5d in QtWaylandClient::QWaylandWindow::waitForFrameSync(int) (timeout=100, this=0x5652cbbf0080) at qwaylandwindow.cpp:632 #6 QtWaylandClient::QWaylandWindow::waitForFrameSync(int) (this=0x5652cbbf0080, timeout=100) at qwaylandwindow.cpp:625 #7 0x7fcd621720aa in QtWaylandClient::QWaylandGLContext::swapBuffers(QPlatformSurface*) (this=0x5652cd9fb3e0, surface=0x5652cbbf0090) at ../../../../hardwareintegration/client/wayland-egl/qwaylandglcontext.cpp:492 #8 0x7fcd78b0d0fc in QSGRenderThread::syncAndRender(QImage*) (this=0x5652cd882d10, grabImage=0x0) at scenegraph/qsgthreadedrenderloop.cpp:870 -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Willyanto changed: What|Removed |Added CC||willyant...@protonmail.com -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 --- Comment #10 from Matt Fagnani --- Created attachment 133126 --> https://bugs.kde.org/attachment.cgi?id=133126=edit New crash information added by DrKonqi plasmashell (5.19.5) using Qt 5.15.1 - What I was doing when the application crashed: I was using Plasma 5.19.5 on Wayland in Fedora 33 with KF 5.75.0 and Qt 5.15.1. I'd set the desktop to use the Application Menu by right-clicking on the button at the bottom left of the screen, selecting Show Alternatives > Application Menu > Switch. I clicked to open the Application Menu several times. The screen went black and plasmashell restarted automatically. plasmashell segmentation faulted in wl_proxy_set_queue at src/wayland-client.c:2173 in libwayland-client-1.18.0-2.fc33.x86_64 due to a null pointer dereference where proxy=0x0. -- Backtrace (Reduced): #4 0x7f8d7de37ca5 in wl_proxy_set_queue (proxy=0x0, queue=0x562e195913a0) at src/wayland-client.c:2173 #5 0x7f8d6cc1df5d in QtWaylandClient::QWaylandWindow::waitForFrameSync(int) (timeout=100, this=0x562e19591920) at qwaylandwindow.cpp:632 #6 QtWaylandClient::QWaylandWindow::waitForFrameSync(int) (this=0x562e19591920, timeout=100) at qwaylandwindow.cpp:625 #7 0x7f8d69f030aa in QtWaylandClient::QWaylandGLContext::swapBuffers(QPlatformSurface*) (this=0x562e1a3701a0, surface=0x562e19591930) at ../../../../hardwareintegration/client/wayland-egl/qwaylandglcontext.cpp:492 #8 0x7f8d7ffca0fc in QSGRenderThread::syncAndRender(QImage*) (this=0x562e1a3ecfb0, grabImage=0x0) at scenegraph/qsgthreadedrenderloop.cpp:870 -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 --- Comment #9 from Matt Fagnani --- Created attachment 132017 --> https://bugs.kde.org/attachment.cgi?id=132017=edit New crash information added by DrKonqi plasmashell (5.19.5) using Qt 5.15.1 - What I was doing when the application crashed: I logged into Plasma 5.19.5 on Wayland in Fedora 33 with KF 5.73.0, Qt 5.15.1, Mesa 20.2.0. I clicked on the updates applet button in the System Tray. plasmashell crashed before the updates applet would have appeared. The screen went black. plasmashell restarted automatically. plasmashell had a segmentation fault in wl_proxy_set_queue at wayland-client.c:2173 in libwayland-client-1.18.0-2.fc33. The crash was likely due to a null pointer dereference since proxy=0x0 as in previous crashes I've reported here. -- Backtrace (Reduced): #4 0x7f1b52da3ca5 in wl_proxy_set_queue (proxy=0x0, queue=0x561f267c6780) at src/wayland-client.c:2173 #5 0x7f1b41a19f5d in QtWaylandClient::QWaylandWindow::waitForFrameSync(int) (timeout=100, this=0x561f266066c0) at qwaylandwindow.cpp:632 #6 QtWaylandClient::QWaylandWindow::waitForFrameSync(int) (this=0x561f266066c0, timeout=100) at qwaylandwindow.cpp:625 #7 0x7f1b4000f0aa in QtWaylandClient::QWaylandGLContext::swapBuffers(QPlatformSurface*) (this=0x561f268c9700, surface=0x561f266066d0) at ../../../../hardwareintegration/client/wayland-egl/qwaylandglcontext.cpp:492 #8 0x7f1b54df60fc in QSGRenderThread::syncAndRender(QImage*) (this=0x561f262a0ce0, grabImage=0x0) at scenegraph/qsgthreadedrenderloop.cpp:870 -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021 Matt Fagnani changed: What|Removed |Added CC||matthew.fagn...@utoronto.ca -- You are receiving this mail because: You are watching all bug changes.
[plasmashell] [Bug 409021] Segmentation faults of plasmashell in wl_proxy_set_queue in libwayland-client in Plasma on Wayland
https://bugs.kde.org/show_bug.cgi?id=409021
Matt Fagnani changed:
What|Removed |Added
Version|5.15.5 |5.19.4
Summary|Segmentation faults of |Segmentation faults of
|plasmashell in |plasmashell in
|wl_proxy_set_queue at |wl_proxy_set_queue in
|wayland-client.c:2094 in|libwayland-client in Plasma
|libwayland-client in Plasma |on Wayland
|5.15.5 on Wayland with Qt |
|5.12.4 |
--- Comment #7 from Matt Fagnani ---
I was using Plasma 5.19.4 on Wayland in Fedora 33 with KF 5.73.0 and Qt 5.14.2.
I set the desktop to use the Application Menu by right-clicking on the button
at the bottom left of the screen, selecting Show Alternatives > Application
Menu > Switch. I quickly left-clicked to open the Application Menu many times.
The Task Manager bar at the bottom of the screen disappeared and reappeared
automatically. plasmashell segmentation faulted in wl_proxy_set_queue at
src/wayland-client.c:2173 in libwayland-client-1.18.0-2.fc33.x86_64.
Core was generated by `/usr/bin/plasmashell'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 __GI_raise (sig=) at ../sysdeps/unix/sysv/linux/raise.c:49
49return ret;
[Current thread is 1 (Thread 0x7ff5eabe6640 (LWP 8221))]
(gdb) bt
#0 __GI_raise (sig=) at ../sysdeps/unix/sysv/linux/raise.c:49
#1
#2 0x7ff688034ca5 in wl_proxy_set_queue (proxy=0x0, queue=0x55f4dc0e5790)
at src/wayland-client.c:2173
#3 0x7ff676c85f8d in QtWaylandClient::QWaylandWindow::waitForFrameSync
(timeout=100,
this=0x55f4dc0ae900) at qwaylandwindow.cpp:637
#4 QtWaylandClient::QWaylandWindow::waitForFrameSync
(this=this@entry=0x55f4dc0ae900,
timeout=timeout@entry=100) at qwaylandwindow.cpp:630
#5 0x7ff6740181ea in QtWaylandClient::QWaylandGLContext::swapBuffers
(this=0x55f4dcaacb10,
surface=0x55f4dc0ae910)
at
../../../../hardwareintegration/client/wayland-egl/qwaylandglcontext.cpp:482
#6 0x7ff68a00d0c4 in QSGRenderThread::syncAndRender (this=0x55f4dc923380,
grabImage=0x0)
at scenegraph/qsgthreadedrenderloop.cpp:841
#7 0x7ff68a013e0f in QSGRenderThread::run (this=0x55f4dc923380)
at scenegraph/qsgthreadedrenderloop.cpp:980
#8 0x7ff68857b690 in QThreadPrivate::start (arg=0x55f4dc923380) at
thread/qthread_unix.cpp:342
#9 0x7ff6879df3f9 in start_thread (arg=0x7ff5eabe6640) at
pthread_create.c:463
#10 0x7ff6881ffb03 in clone () at
../sysdeps/unix/sysv/linux/x86_64/clone.S:95
The pointer proxy=0x0 passed to wl_proxy_set_queue might've led to a null
pointer dereference like in the crash I reported here before.
(gdb) l src/wayland-client.c:2173
2168 * \memberof wl_proxy
2169 */
2170WL_EXPORT void
2171wl_proxy_set_queue(struct wl_proxy *proxy, struct wl_event_queue
*queue)
2172{
2173if (queue)
2174proxy->queue = queue;
2175else
2176proxy->queue = >display->default_queue;
2177}
The crashes might involve a race condition in which the Wayland proxy of the
Application menu was occasionally freed or corrupted before it was used.
The use-after-free errors I reported in comment 1 might still be happening and
leading to the crashes. plasmashell crashed when I've quickly left-clicked to
open the Application Menu many times in the last day with errors like The
Wayland connection experienced a fatal error: Invalid argument
https://bugs.kde.org/show_bug.cgi?id=424879 and a segmentation fault in
update_buffers in mesa-libEGL https://bugs.kde.org/show_bug.cgi?id=414411 Those
crashes might have been related to this one.
--
You are receiving this mail because:
You are watching all bug changes.
